家里的

olly

窝了几个月了
原路径是C:\WINDOWS\system32\Com\

[ 本帖最后由 olly 于 2007-12-22 10:47 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\Com.rar'
E:\Virus\Com.rar
  [0] Archive type: RAR
  --> Com\SMSS.EXE
      [DETECTION] Is the Trojan horse TR/Agent.dzc.2
  --> Com\LSASS.EXE
      [DETECTION] Is the Trojan horse TR/Agent.dzc.2
      [WARNING]   The file was ignored!

挪威的冬天

一共多少啊

信息        2007-12-22  10:46:14        您此次查毒共查出4个病毒以及危险代码                       
信息        2007-12-22  10:46:14        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件12个                       
信息        2007-12-22  10:46:14        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-22  10:46:14        C:\Documents and Settings\Norways_Winter\桌面\Com.rar\Com\LSASS.EXE        Worm.VcingT.o.102400        跳过，未处理       
病毒        2007-12-22  10:46:14        C:\Documents and Settings\Norways_Winter\桌面\Com.rar\Com\netcfg.dll        Win32.Troj.NetvfgT.a.45056        跳过，未处理       
病毒        2007-12-22  10:46:14        C:\Documents and Settings\Norways_Winter\桌面\Com.rar\Com\netcfg.000        Win32.Troj.NetvfgT.a.45056        跳过，未处理       
病毒        2007-12-22  10:46:14        C:\Documents and Settings\Norways_Winter\桌面\Com.rar\Com\SMSS.EXE        Win32.VcingDropT.d.45056        跳过，未处理

wsxujiehao123

只是普通的病毒红伞2,3下就挂了他

Graybird

The file 'comrepl.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'comexp.msc' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'comempty.dat' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows 2003 Server (SP0)'.

The file 'comrereg.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'mtsadmin.tlb' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'comadmin.dll' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows XP (KB902400)'.

6个不是病毒~ 1个没报~ 已上报~

[ 本帖最后由 Graybird 于 2007-12-22 12:27 编辑 ]

wangjay1980

2

kkgh

微点干掉

扫描进行于：2007-12-22 12:22:33
扫描日志
NOD32版本 2741 (20071221) NT
命令行： F:\virus\Com.rar

日期： 22.12.2007  时间：12:22:34
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\virus\Com.rar
F:\virus\Com.rar >>RAR >>Com\SMSS.EXE - Win32/Small.NBU 蠕虫
F:\virus\Com.rar >>RAR >>Com\netcfg.000 - Win32/Small.NBU 蠕虫
F:\virus\Com.rar >>RAR >>Com\netcfg.dll - Win32/Small.NBU 蠕虫
F:\virus\Com.rar >>RAR >>Com\LSASS.EXE - Win32/Small.NBU 蠕虫
已扫描的文件数目：10
已发现的病毒数目：4
完成时间： 12:22:34 总扫描时间：0 秒 (00:00:00)

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.DiskGen.bc   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.23.51

袋鼠吱吱

文件 D:\病毒样本备份\Com\Com\LSASS.EXE 包含 W32/Fujacks 特洛伊。未确定的清理错误，OAS 拒绝访问并继续。是使用扫描引擎版本 5200.2160 DAT 版本 5191.0000 检测到的。