6个

显示全部楼层 · 发表于 2007-12-21 20:24:20

filseclab

显示全部楼层 · 发表于 2007-12-21 20:28:16

C:\122102.rar\install_en.cab\UGA6P_0001_N122M2210NetInstaller.exe - infected with Trojan.DownLoader.36408
C:\122102.rar\3721.exe - infected with Win32.HLLW.Amir
C:\122102.rar\iebar.cab\iebar23.0.dll - is an AdWare program Adware.IEBar.origin
C:\122102.rar\iebar.cab\barhelp24.0.dll - is an AdWare program Adware.IEBar
C:\122102.rar\diybar2.cab\diybar2.dll - is an AdWare program Adware.DiyBar
C:\122102.rar\123.exe - infected with Trojan.MulDrop.4679
C:\122102.rar\200701250235.exe - infected with Trojan.MulDrop.4679

Archive contains 7 infected items

DRWEB 4.44

显示全部楼层 · 发表于 2007-12-21 20:29:32

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.WinFixer.au
病毒： Trojan.PSW.Win32.Agent.vqg
病毒： Trojan.IEbar.b
病毒： Trojan.IEbar.c
病毒： Dropper.Win32.Microjoin.cn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.23.42

显示全部楼层 · 发表于 2007-12-21 20:30:21

木马名称:Trojan-Downloader.Win32.Agent.nli

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\3721.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Iebar.b

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\IEBAR23.0.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Iebar.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\BARHELP24.0.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Diybar.a

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\DIYBAR2.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-12-21 20:30:44

Start of the scan: 2007年12月21日  20:30

Starting the file scan:

Begin scan in 'I:\样本'
I:\样本\122102.rar
  [0] Archive type: RAR
  --> 3721.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.fuh
--> iebar.cab
   [1] Archive type: CAB (Microsoft)
   --> iebar23.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.M.1
   --> barhelp24.0.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/IEBar.N
--> diybar2.cab
   [1] Archive type: CAB (Microsoft)
   --> diybar2.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bar.Diybar.B
  --> 123.exe
   [DETECTION] Contains detection pattern of the dropper DR/MicroJoiner.Gen
  --> 200701250235.exe
   [DETECTION] Contains detection pattern of the dropper DR/MicroJoiner.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年12月21日  20:30
Used time: 00:12 min

The scan has been done completely.

   1 Scanning directories
   21 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   15 Files not concerned
   4 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-21 20:30:45

D:\Download\Scan\123.exe - Signature 'Trojan-Dropper.Win32.Microjoin.cn' found
D:\Download\Scan\200701250235.exe - Signature 'Trojan-Dropper.Win32.Microjoin.cn' found
D:\Download\Scan\3721.exe - Signature 'Trojan-Downloader.Win32.Agent.fuh' found
D:\Download\Scan\diybar2.cab:\diybar2.dll - Signature 'not-a-virus:AdWare.Win32.Diybar.b' found
D:\Download\Scan\diybar2.cab:\menu_ex.xml
D:\Download\Scan\diybar2.cab:\diybar2.inf
D:\Download\Scan\diybar2.cab:\version.txt
D:\Download\Scan\diybar2.cab
D:\Download\Scan\iebar.cab:\iebar23.0.dll - Signature 'not-a-virus:AdWare.Win32.Iebar.m' found
D:\Download\Scan\iebar.cab:\barhelp24.0.dll - Signature 'not-a-virus:AdWare.Win32.Iebar.h' found
D:\Download\Scan\iebar.cab:\winio.dll
D:\Download\Scan\iebar.cab:\winio.sys
D:\Download\Scan\iebar.cab:\winio.vxd
D:\Download\Scan\iebar.cab:\urlinfo.xml
D:\Download\Scan\iebar.cab:\toolbar.bmp
D:\Download\Scan\iebar.cab:\iebar.inf
D:\Download\Scan\iebar.cab
D:\Download\Scan\install_en.cab:\UGA6P_0001_N122M2210NetInstaller.inf
D:\Download\Scan\install_en.cab:\UGA6P_0001_N122M2210NetInstaller.exe - Signature 'not-a-virus:Downloader.Win32.WinFixer.au' found
D:\Download\Scan\install_en.cab

20 Files scanned
(3 Archives with 14 files)
7 Signatures found
0 Suspect code-parts found
Used time: 0:00.234

显示全部楼层 · 发表于 2007-12-21 20:31:53

小a只报了5个～～

显示全部楼层 · 发表于 2007-12-21 21:42:01

扫描进行于：2007-12-21 21:41:54
扫描日志
NOD32版本 2740 (20071221) NT
命令行： F:\virus\122102.rar

日期： 21.12.2007 时间：21:41:56
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\virus\122102.rar
F:\virus\122102.rar >>RAR >>install_en.cab >>CAB >>UGA6P_0001_N122M2210NetInstaller.exe - Win32/Adware.AVSystemCare 应用程序
F:\virus\122102.rar >>RAR >>iebar.cab >>CAB >>iebar23.0.dll - Win32/Adware.Toolbar.IEBar 应用程序
F:\virus\122102.rar >>RAR >>iebar.cab >>CAB >>barhelp24.0.dll - 可能是 Win32/Adware.Agent 应用程序的一个变种
F:\virus\122102.rar >>RAR >>diybar2.cab >>CAB >>diybar2.dll - Win32/Adware.Toolbar.Diybar 应用程序
F:\virus\122102.rar >>RAR >>123.exe - 未查明的 NewHeur_PE 病毒 [7]
F:\virus\122102.rar >>RAR >>200701250235.exe - 未查明的 NewHeur_PE 病毒 [7]
已扫描的文件数目：17
已发现的病毒数目：6
完成时间： 21:41:57 总扫描时间：1 秒 (00:00:01)

注意：
[7] 该文件可能感染上未知病毒。

显示全部楼层 · 发表于 2007-12-21 21:53:51

费尔

显示全部楼层 · 发表于 2007-12-22 00:07:22

Result: 6 malware found
Trojan-Downloader.Win32.Agent.fuh (virus)
G:\Users\Administrator\Desktop\122102.rar\3721.exe
AdWare.Win32.Iebar.m (adware)
G:\Users\Administrator\Desktop\122102.rar\iebar.cab\iebar23.0.dll
AdWare.Win32.Iebar.h (adware)
G:\Users\Administrator\Desktop\122102.rar\iebar.cab\barhelp24.0.dll
AdWare.Win32.Diybar.b (adware)
G:\Users\Administrator\Desktop\122102.rar\diybar2.cab\diybar2.dll
Trojan-Dropper.Win32.Microjoin.cn (virus)
G:\Users\Administrator\Desktop\122102.rar\123.exe
G:\Users\Administrator\Desktop\122102.rar\200701250235.exe

[病毒样本] 6个

本帖子中包含更多资源

21/6

本帖子中包含更多资源