我们学校机房的一个病毒,过卡巴,AVAST,不过没过小红伞

a750828

McAfee W32/Fujacks

gdljken

小红伞不错的

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2007-12-14, 3:08

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\setup.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-12-14, 19:00:53
---------------------------------------------------------------------

[Clean]        C:\Documents and Settings\Administrator\桌面\setup.rar->setup.exe->(UPX)
[Found security risk]         <W32/BadBHO.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\Administrator\桌面\setup.rar->setup.exe->(RAR)->Setup.exe
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\setup.rar
[Quarantined]        C:\Documents and Settings\Administrator\桌面\setup.rar->setup.exe->(RAR)->Setup.exe

---------------------------------------------------------------------
Scan ended:        2007-12-14, 19:00:54
Duration:        0:00:01

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

ngh55

A-Squared         
Found nothing
AntiVir        
Found TR/Spanky.A.1
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found Win32/Fujacks.C
BitDefender        
Found nothing
ClamAV        
Found nothing
CPsecure        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found Trojan:W32/Agent.DZC, Virus.Win32.Xorer.bu
Fortinet        
Found nothing
Ikarus        
Found Virus.Win32.Xorer.bu
Kaspersky Anti-Virus        
Found Virus.Win32.Xorer.bu
NOD32        
Found nothing
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
Sophos Antivirus        
Found Mal/Packer
VirusBuster        
Found nothing
VBA32        
Found nothing

IllusionWing

KIS8主防拦截
XP - MICROPOINT 飘过.....
虚拟机 - KIS7 主防飘过....

scottxzt

2007-12-15 13:51:49,W32.Xorer.bu.twzu,病毒,

scottxzt

木马名称:Trojan-Downloader.Win32.Delf.ier

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\SETUP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?危险进程(PID:388): C:\Documents and Settings\dell\桌面\Setup.exe

产品名称: 无
文件版本: 无
公司名称: 无
文件描述: 无
数字签名: 没有发现签名

C:\windows\system32\com\SMSS.EXE
C:\WINDOWS\system32\Com\LSASS.EXE

千里同风

又是一个捆绑包，附件是从程序中抽取出来的

hhy85627

原帖由 cake 于 2007-12-12 16:56 发表
KIS查杀 没反应

点击下载~KIS阻止了啊~

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\V001.rar'
E:\Virus\V001.rar
  [0] Archive type: RAR
  --> EXE_145.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
  --> ACT_185.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ewq
      [WARNING]   The file was ignored!