小包

lanvin

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\1.EXE
是否删除木马程序及其衍生物?


广告软件名称:AdWare.Win32.Aureate.a
程序:
C:\WINDOWS\SYSTEM32\MSIPCSV.EXE
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Aureate.c
程序:
C:\WINDOWS\SYSTEM32\HTMDENG.EXE
是广告软件!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\5.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SERVER.EXE
是否删除木马程序及其衍生物?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\8.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MEDIA\LTASKUP.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\10.COM
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM\NAMED.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\11.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\NBDOS.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\111[1]\111\12.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NOSKRNL.EXE
2) C:\WINDOWS\SYSTEM32\NOSKRNL.SYS
是否删除木马程序及其衍生物?

微点砍掉

平淡

hahacomcn

，这两包还小啊，简直是超级汉堡包。
Begin scan in 'C:\Documents and Settings\Administrator\桌面\111.part1.rar'
C:\Documents and Settings\Administrator\桌面\111.part1.rar
  [0] Archive type: RAR
  --> 111\2.dll
      [DETECTION] Is the Trojan horse TR/Agent.79872
  --> 111\3.dll
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
Begin scan in 'C:\Documents and Settings\Administrator\桌面\111.part2.rar'
C:\Documents and Settings\Administrator\桌面\111.part2.rar
  [0] Archive type: RAR
  --> 111\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 111\8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
  --> 111\9.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 111\10.com
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Nethief.63 Backdoor server programs
  --> 111\11.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 111\12.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen


End of the scan: 2007年11月1日  19:24
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
      7 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:

wangjay1980

detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//msipcsv.exe
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//htmdeng.exe
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//adimage.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//Amcis2.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//IPCClient.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//tfde.dll
detected: virus Heur.Trojan.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\111\5.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\111\7.exe
detected: Trojan program Trojan.BAT.KillFiles.gh        File: C:\Documents and Settings\Owner\×ÀÃæ\111\8.exe//PE_Patch.PECompact//PecBundle//PECompact//#
detected: Trojan program Backdoor.Win32.IRCBot.anp        File: C:\Documents and Settings\Owner\×ÀÃæ\111\10.com
detected: virus Heur.Backdoor.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\111\11.exe
detected: virus Packed.Win32.Tibs.cz        File: C:\Documents and Settings\Owner\×ÀÃæ\111\12.exe

伊の星

小红伞7个。


[ 本帖最后由 etly 于 2007-11-1 22:12 编辑 ]

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\111'
C:\Users\morgan\Documents\111\
  1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/NaviPromo.Byt.15
      [INFO]      The file was deleted!
  10.com
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Nethief.63 Backdoor server programs
      [INFO]      The file was deleted!
  11.exe
      [DETECTION] Contains detection pattern of the worm WORM/SdBot.415744.2
      [INFO]      The file was deleted!
  12.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [INFO]      The file was deleted!
  2.dll
      [DETECTION] Is the Trojan horse TR/Agent.79872
      [INFO]      The file was deleted!
  3.dll
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
      [INFO]      The file was deleted!
  4.exe
  5.exe
      [DETECTION] Is the Trojan horse TR/Agent.542208.1
      [INFO]      The file was deleted!
  6.zip
  7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
  8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
      [INFO]      The file was deleted!
  9.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月1日  07:55
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     12 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     10 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

detected: Trojan program Trojan-Dropper.Win32.Agent.cli        File: C:\Documents and Settings\Owner\×ÀÃæ\111\1.exe
detected: adware not-a-virus:AdWare.Win32.Vapsup.kl        File: C:\Documents and Settings\Owner\×ÀÃæ\111\2.dll
detected: adware not-a-virus:AdWare.Win32.Virtumonde.agc        File: C:\Documents and Settings\Owner\×ÀÃæ\111\3.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//msipcsv.exe
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//htmdeng.exe
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//adimage.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//Amcis2.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//IPCClient.dll
detected: adware not-a-virus:AdWare.Win32.Aureate.a        File: C:\Documents and Settings\Owner\×ÀÃæ\111\4.exe//tfde.dll
detected: Trojan program Trojan-PSW.Win32.Zbot.ar        File: C:\Documents and Settings\Owner\×ÀÃæ\111\5.exe
detected: Trojan program Backdoor.Win32.IRCBot.any        File: C:\Documents and Settings\Owner\×ÀÃæ\111\6.zip/www.Nokia_19_jpg-msn.com
detected: Trojan program Trojan-Spy.Win32.Agent.aju        File: C:\Documents and Settings\Owner\×ÀÃæ\111\7.exe
detected: Trojan program Backdoor.Win32.Delf.cdd        File: C:\Documents and Settings\Owner\×ÀÃæ\111\8.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-PSW.Win32.Agent.tb        File: C:\Documents and Settings\Owner\×ÀÃæ\111\9.dll
detected: Trojan program Backdoor.Win32.IRCBot.anp        File: C:\Documents and Settings\Owner\×ÀÃæ\111\10.com
detected: Trojan program Backdoor.Win32.Rbot.eta        File: C:\Documents and Settings\Owner\×ÀÃæ\111\11.exe
detected: virus Packed.Win32.Tibs.cz        File: C:\Documents and Settings\Owner\×ÀÃæ\111\12.exe