30

liunanyuan

杂........

[ 本帖最后由 liunanyuan 于 2007-12-13 09:50 编辑 ]

HC303

毒霸5个，瑞星11个，红伞23+7

mofunzone

明明是30个的

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\29.rar'
C:\Users\morgan\Documents\
  29.rar
    [0] Archive type: RAR
    --> VMwareService.exe
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmp7A.tmp
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> pcibus.sys
        [DETECTION] Is the Trojan horse TR/Drop.Agent.23552
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8838283[1].htm
        [DETECTION] Is the Trojan horse TR/IFrame.AW
        [WARNING]   Infected files in archives cannot be repaired!
    --> XunLei[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> noani[2].htm
        [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agent.ZY
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ms06014[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> haha[1].htm
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.ED
        [WARNING]   Infected files in archives cannot be repaired!
    --> jh[1].htm
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.afm
        [WARNING]   Infected files in archives cannot be repaired!
    --> kong[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> htm[1].htm
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.AS
        [WARNING]   Infected files in archives cannot be repaired!
    --> gm[1].htm
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.ala.10
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6671697[1].htm
        [DETECTION] Is the Trojan horse TR/IFrame.AW
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ajax[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ani[1].htm
        [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agent.ZY
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11[1].js
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.CN
        [WARNING]   Infected files in archives cannot be repaired!
    --> rl[2].js
        [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.E
        [WARNING]   Infected files in archives cannot be repaired!
    --> realplayer[1].htm
        [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H
        [WARNING]   Infected files in archives cannot be repaired!
    --> kaka[1].htm
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> down1[1].txt
        [DETECTION] Contains suspicious code HEUR/HTML.Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2[1].htm
        [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.I
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1[1].js
        [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.GG
        [WARNING]   Infected files in archives cannot be repaired!
    --> realplay_071122_exp[1].htm
        [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H
        [WARNING]   Infected files in archives cannot be repaired!
    --> realplayer[2].htm
        [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Agent.ZY
        [WARNING]   Infected files in archives cannot be repaired!
    --> lz[1].htm
        [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> gege[1].htm
        [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.I
        [WARNING]   Infected files in archives cannot be repaired!
    --> ani[1].c
        [DETECTION] Contains detection pattern of the exploits EXP/Ani.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmp7C.tmp
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmp77.tmp
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmp83.tmp
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      [WARNING]   The file was ignored!


End of the scan: 2007年12月12日  17:02
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     31 Files were scanned
     24 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      1 Archives were scanned
     31 Warnings
      0 Notes

HC303

楼上的，我的怎么和你的不一样，我的怎么报23个已知，7个启发报。

wangjay1980

deleted: virus Worm.Win32.Anilogo.b        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/VMwareService.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kmp        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/tmp7A.tmp
deleted: virus Worm.Win32.Downloader.cb        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/pcibus.sys
deleted: Trojan program Trojan-Downloader.JS.Agent.alj        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/haha[1].htm
deleted: Trojan program Trojan-Downloader.JS.Agent.ala        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/gm[1].htm
deleted: malware Exploit.Win32.Agent.bb        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/realplayer[1].htm
deleted: malware Exploit.Win32.Agent.bb        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/realplay_071122_exp[1].htm
deleted: malware Exploit.Win32.IMG-ANI.k        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/ani[1].c
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.joj        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/tmp7C.tmp
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jer        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/tmp77.tmp
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kpe        File: C:\Documents and Settings\Owner\×ÀÃæ\29.rar/tmp83.tmp
11

00卫报

mofunzone

我的是v8，你的是v7

啊弥陀佛

木马名称:Trojan-Spy.Win32.Delf.eqt
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.WOW.boc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\22.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSPRINT32D.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\15.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\20.EXE
1) C:\DFD5694187.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\21.EXE
木马程序生成以下文件:
1) C:\WINDOWS\FONTS\SYSTEM\ATI2EVXX.EXE
是否删除木马程序及其衍生物?

铁面

FS报11个

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Win32.Logogo.a           
病毒： Trojan.PSW.Win32.SO2Online.x
病毒： Trojan.Win32.Mnless.zkb  
病毒： Trojan.DL.Win32.Iframe.a
病毒： Trojan.Script.JS.Agent.ab
病毒： Hack.Exploit.Script.JS.RealPlayer.b
病毒： Trojan.DL.Script.JS.Agent.lve
病毒： Trojan.DL.Script.HTML.Agent.x
病毒： Hack.SuspiciousAni      

用户来源：互联网

软件版本：20.22.22

残缺的唯美

G:\Users\Administrator\Desktop\29.rar » RAR » VMwareService.exe - Win32/Mypis.H virus
G:\Users\Administrator\Desktop\29.rar » RAR » tmp7A.tmp - Win32/PSW.OnLineGames.NJY trojan
G:\Users\Administrator\Desktop\29.rar » RAR » pcibus.sys - a variant of Win32/Jalous worm
G:\Users\Administrator\Desktop\29.rar » RAR » ani[1].c - a variant of Win32/TrojanDownloader.Ani.Gen trojan
G:\Users\Administrator\Desktop\29.rar » RAR » tmp7C.tmp - Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\29.rar » RAR » tmp77.tmp - Win32/PSW.OnLineGames.JER trojan