2个U盘隐藏EXE文件.红伞没报

pmj_sh

Object: msdumprep.exe
        In archive: C:\Documents and Settings\Jimmy\桌面\绅博GDATA AntiVirenKit（中国）官方论坛_a.zip
        Status: Virus detected
        Virus: Virus.Win32.AutoRun.zw (KAV engine)
Object: ravmon.exe
        In archive: C:\Documents and Settings\Jimmy\桌面\绅博GDATA AntiVirenKit（中国）官方论坛_a.zip
        Status: Virus detected
        Virus: Virus.Win32.AutoRun.zv (KAV engine), Win32.Worm.Autoruner.FK (BD-Engine)
Object: 绅博GDATA AntiVirenKit（中国）官方论坛_a.zip
        Path: C:\Documents and Settings\Jimmy\桌面
        Status: Virus detected
        Virus: Virus.Win32.AutoRun.zw, Virus.Win32.AutoRun.zv (KAV engine), Win32.Worm.Autoruner.FK (BD-Engine)
Analysis complete: 2007-11-3 11:14

scottxzt

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.089\MSDUMPREP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知后门程序
程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX00.089\RAVMON.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX04.411\MSDUMPREP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知后门程序
程序:
C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\RAR$EX04.411\RAVMON.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

wangfeng66

C:\ravmon.exe - infected with Win32.HLLW.Autoruner.origin

DRWEB 4.44  Kill  一个

[ 本帖最后由 wangfeng66 于 2007-11-3 13:09 编辑 ]

uhthn2002

C:\Documents and Settings\Uhthn\Desktop\New Folder\ravmon.exe : is suspected of Trojan-PSW.Game.72 (paranoid heuristics)
C:\Documents and Settings\Uhthn\Desktop\New Folder\ravmon.exe : backup copy created


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 2     
- scanned         : 0       -  scanned    : 0       - scanned     : 2     
- contain viruses : 0       -  infected   : 0       - infected    : 0     
- deleted         : 0       -  suspicious : 0       - suspicious  : 1     



Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 803
Paranoia Database - 48490
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\msdumprep.exe - Infected VIRUS.AUTORUN.7 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\ravmon.exe - Infected VIRUS.AUTORUN.7 - Deleted

2 Files scanned
2 Infected files found
0 Suspected files found
0 Files disinfected
2 Files deleted