一个

显示全部楼层 · 发表于 2007-11-19 10:46:32

一个

显示全部楼层 · 发表于 2007-11-19 10:50:14

Starting the file scan:

Begin scan in 'E:\yangben.rar'
E:\yangben.rar
  [0] Archive type: RAR
  --> sos.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> auto.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> dsqggqe.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> sbl.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Small.GOC.1
   [INFO]    The file was deleted!

End of the scan: 2007年11月19日  10:50
Used time: 00:17 min

The scan has been done completely.

   0 Scanning directories
   6 Files were scanned
   5 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-11-19 11:08:43

已删除：木马程序 Trojan.Win32.Agent.cng 文件: C:\Documents and Settings\Administrator\桌面\yangben.rar/sos.exe//PE_Patch.UPX//UPX
已删除：木马程序 Backdoor.Win32.Popwin.aic 文件: C:\Documents and Settings\Administrator\桌面\yangben.rar/auto.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.dpi 文件: C:\Documents and Settings\Administrator\桌面\yangben.rar/dsqggqe.exe//ASPack
已删除：病毒 Virus.Win32.Downloader.w 文件: C:\Documents and Settings\Administrator\桌面\yangben.rar/sbl.exe
已删除：病毒 Worm.Win32.AutoRun.bc 文件: C:\Documents and Settings\Administrator\桌面\yangben.rar/setup.exe//UPack

显示全部楼层 · 发表于 2007-11-19 14:39:42

蠕虫名称:Worm.Win32.AutoRun.fa
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\YANGBEN\SOS.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Backdoor.Win32.Popwin.p
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\YANGBEN\AUTO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Delf.bpa
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\YANGBEN\DSQGGQE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-11-19 14:53:41

扫描开始时间: 2007-11-19 14:52:59
扫描日志
NOD32 版本 2666 (20071119) NT
命令行: C:\Documents and Settings\LuckyStar\桌面\yangben.rar

日期: 2007年11月19日时间: 14:53:02
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\LuckyStar\桌面\yangben.rar
C:\Documents and Settings\LuckyStar\桌面\yangben.rar ?RAR ?sos.exe<病毒 - Win32/AutoRun.K 蠕虫变种>
C:\Documents and Settings\LuckyStar\桌面\yangben.rar ?RAR ?auto.exe<病毒 - Win32/TrojanDownloader.Flux 木马>
C:\Documents and Settings\LuckyStar\桌面\yangben.rar ?RAR ?dsqggqe.exe<病毒 - Win32/Delf.NDF 蠕虫变种>
C:\Documents and Settings\LuckyStar\桌面\yangben.rar ?RAR ?setup.exe<病毒 - 可能是 Win32/Drowor 病毒变种>
已扫描文件数量: 5
已发现病毒数量: 4
完成时间: 14:53:02 总共扫描时间: 0 秒 (00:00:00)

显示全部楼层 · 发表于 2007-11-19 15:18:53

已删除：木马程序 Trojan.Win32.Agent.cng 文件　: C:\Documents and Settings\Administrator\桌面\yangben.rar/sos.exe//PE_Patch.UPX//UPX
已删除：木马程序 Backdoor.Win32.Popwin.aic 文件　: C:\Documents and Settings\Administrator\桌面\yangben.rar/auto.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.dpi 文件　: C:\Documents and Settings\Administrator\桌面\yangben.rar/dsqggqe.exe//ASPack
已清除：病毒 Virus.Win32.Downloader.w 文件　: C:\Documents and Settings\Administrator\桌面\yangben.rar/sbl.exe
已删除：病毒 Worm.Win32.AutoRun.bc 文件　: C:\Documents and Settings\Administrator\桌面\yangben.rar/setup.exe//UPack

显示全部楼层 · 发表于 2007-11-19 15:36:16

kv08

在 C:\Documents and Settings\...\桌面\yangben.rar->sos.exe 中发现 Trojan/Agent.aasb 病毒, 已删除
在 C:\Documents and Settings\...\桌面\yangben.rar->auto.exe 中发现 Backdoor/Popwin.f 病毒, 已删除
在 C:\Documents and Settings\...\桌面\yangben.rar->dsqggqe.exe 中发现 TrojanDownloader.Agent.lnc 病毒, 已删除
在 C:\Documents and Settings\...\桌面\yangben.rar->sbl.exe 中发现 Win32/.Downloader.i 病毒, 已清除
在 C:\Documents and Settings\...桌面\yangben.rar->setup.exe 中发现 Trojan/PSW.GamePass.yuo 病毒, 已删除
正常结束。

扫描结果:
               文件数 :6                                  病毒体 :5
               删除 :4                                  解毒 :1
扫描速度(千字节/秒) :107                            扫描时间 :00:00:02
扫描文件速度(个/秒) :3

显示全部楼层 · 发表于 2007-11-19 15:42:07

Date Virus Name Virus Type User Filename Scan Type
2007-11-19 15:40 TrojanPSW.GamePass.yuo.dtgt 木马 licheng D:\xiazai\yangben.rar>>setup.exe Manual scan
2007-11-19 15:40 TrojanDownloader.w.mphe 木马 licheng D:\xiazai\yangben.rar>>sbl.exe Manual scan
2007-11-19 15:40 TrojanDownloader.Agent.lnc.yxay 木马 licheng D:\xiazai\yangben.rar>>dsqggqe.exe Manual scan
2007-11-19 15:40 Backdoor.Popwin.yterx 后门 licheng D:\xiazai\yangben.rar>>auto.exe Manual scan
2007-11-19 15:40 W32.SillyFDC.balw 病毒 licheng D:\xiazai\yangben.rar>>sos.exe Manual scan

显示全部楼层 · 发表于 2007-11-19 21:47:41

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 939
Paranoia Database - 48881
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\桌面

C:\Documents and Settings\Uhthn\Desktop\桌面\sos.exe - Infected WIN32.TROJAN.DELF.5 - Deleted
C:\Documents and Settings\Uhthn\Desktop\桌面\auto.exe - Infected BACKDOOR.AGENT.9 - Deleted
C:\Documents and Settings\Uhthn\Desktop\桌面\dsqggqe.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.8
C:\Documents and Settings\Uhthn\Desktop\桌面\sbl.exe - Suspected MaliciousScope:GENERIC.MALWARE.2
C:\Documents and Settings\Uhthn\Desktop\桌面\setup.exe - Infected TROJAN-DOWNLOADER.AGENT.4 - Deleted

5 Files scanned
3 Infected files found
2 Suspected files found
0 Files disinfected
3 Files deleted

显示全部楼层 · 发表于 2007-11-19 23:50:27

已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.cng 檔案: C:\Documents and Settings\kato9096\桌面\yangben.rar/sos.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Popwin.aic 檔案: C:\Documents and Settings\kato9096\桌面\yangben.rar/auto.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.dpi 檔案: C:\Documents and Settings\kato9096\桌面\yangben.rar/dsqggqe.exe//ASPack
已解毒: 病毒 Virus.Win32.Downloader.w 檔案: C:\Documents and Settings\kato9096\桌面\yangben.rar/sbl.exe
已刪除: 病毒 Worm.Win32.AutoRun.bc 檔案: C:\Documents and Settings\kato9096\桌面\yangben.rar/setup.exe//UPack

[病毒样本] 一个

本帖子中包含更多资源

5

本帖子中包含更多资源

浏览过的版块