几个

liunanyuan

........................

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\New Folder.rar'
E:\Virus\New Folder.rar
  [0] Archive type: RAR
  --> New Folder\014[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> New Folder\14[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> New Folder\9041[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> New Folder\9041[2].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> New Folder\9041[3].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> New Folder\ae[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\ae[2].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\bak[1].css
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> New Folder\comrepl32.exe
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.BD.2
  --> New Folder\g15[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\index[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Infected.WebPage.Gen
  --> New Folder\index[2].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\index[3].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\index[4].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\in[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.Y
  --> New Folder\MicroSoft.pif
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> New Folder\mm[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> New Folder\Ms06014[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/Ystat.1
  --> New Folder\new82[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Iframe.AB
  --> New Folder\pcibus.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> New Folder\pic[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> New Folder\saveclientinfo[1].htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> New Folder\shan[1].htm
      [DETECTION] Is the Trojan horse TR/IFrame.BA
  --> New Folder\shan[2].htm
      [DETECTION] Is the Trojan horse TR/IFrame.BA
  --> New Folder\shan[3].htm
      [DETECTION] Is the Trojan horse TR/IFrame.BA
  --> New Folder\TxoMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> New Folder\web[1].htm
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlayer
  --> New Folder\web[2].htm
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlayer
  --> New Folder\wxptdi.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
      [WARNING]   The file was ignored!


End of the scan: 2007年12月22日  16:08
Used time: 00:29 min

The scan has been done completely.

      0 Scanning directories
     30 Files were scanned
     18 viruses and/or unwanted programs were found
     11 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     12 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

28654621

Tested file        Status
New Folder.rar/New Folder/014           unknown - .exe [+]
New Folder.rar/New Folder/14           unknown - .exe [+]
New Folder.rar/New Folder/9041           unknown - .htm [+]
New Folder.rar/New Folder/ae           unknown - .htm [+]
New Folder.rar/New Folder/bak           unknown - .css [+]
New Folder.rar/New Folder/comrepl32.exe           infected - Win32:Downloader-RT [Wrm]
New Folder.rar/New Folder/g15           unknown - .htm [+]
New Folder.rar/New Folder/index           unknown - .htm [+]
New Folder.rar/New Folder/in           unknown - .htm [+]
New Folder.rar/New Folder/MicroSoft.pif/           unknown - [L] Win32:Downloader-RR [Wrm]
New Folder.rar/New Folder/MicroSoft.pif           clear
New Folder.rar/New Folder/mm           unknown - .exe [+]
New Folder.rar/New Folder/Ms06014           unknown - .htm [+]
New Folder.rar/New Folder/new82           unknown - .htm [+]
New Folder.rar/New Folder/pcibus.sys           infected - Win32:Downloader-RR [Wrm]
New Folder.rar/New Folder/pic           unknown - .exe [+]
New Folder.rar/New Folder/saveclientinfo           unknown - .htm [+]
New Folder.rar/New Folder/shan           unknown - .htm [+]
New Folder.rar/New Folder/TxoMoU.Exe/           unknown - [L] Win32:Delf-FKN [Trj]
New Folder.rar/New Folder/TxoMoU.Exe           clear
New Folder.rar/New Folder/web           unknown - .htm [+]
New Folder.rar/New Folder/wxptdi.sys           infected - Win32:Downloader-RR [Wrm]
New Folder.rar           clear


VPS version: VPS 071221-0 21.12.2007
Scaner version: 3.0.1
Scanned files: 37
Scanned directories: 0
Archives count: 14
Infected files:
Errors: 0
File count: 1.4 MB
Scan time: 0s 140ms
Scanned speed: 9.6 MB

jimmyleo

LZ下次去一下重复吧
缓存里三个一样的
估计是直接antivir隔离里捞出来的

无尽藏海

蜘蛛    10个 [:27:]

[ 本帖最后由 无尽藏海 于 2007-12-22 16:17 编辑 ]

dyw1021

C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\014[1].exe - a variant of Win32/Jalous worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\14[1].exe - Win32/Jalous.N worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\9041[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\9041[2].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\9041[3].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\ae[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\ae[2].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\bak[1].css - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\comrepl32.exe - Win32/Jalous.N worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\g15[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\index[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\index[2].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\index[3].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\index[4].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\in[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\MicroSoft.pif - a variant of Win32/Jalous worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\mm[1].exe - a variant of Win32/Jalous worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\Ms06014[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\new82[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\pcibus.sys - Win32/Jalous.Z worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\pic[1].exe - a variant of Win32/Jalous worm
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\saveclientinfo[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\shan[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\shan[2].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\shan[3].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\TxoMoU.Exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\web[1].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\web[2].htm - is OK
C:\Documents and Settings\Administrator\桌面\New_Folder.rar » RAR » New Folder\wxptdi.sys - Win32/Jalous.X worm

Joker

deleted: Trojan program Trojan-Downloader.Win32.Agent.ggs        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\bak[1].css//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.ggs        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\TxoMoU.Exe//PE_Patch.UPX//UPX
deleted: virus Worm.Win32.Downloader.bd        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\14[1].exe//NSPack
deleted: virus Worm.Win32.Downloader.bd        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\comrepl32.exe
deleted: virus Worm.Win32.Downloader.cb        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\pcibus.sys
deleted: virus Worm.Win32.Downloader.cs        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\pic[1].exe//PE_Patch//UPack
deleted: virus Worm.Win32.Downloader.cx        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\MicroSoft.pif//PE_Patch//UPack
deleted: virus Worm.Win32.Downloader.cx        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\mm[1].exe//PE_Patch//UPack
deleted: virus Worm.Win32.Downloader.cx        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\wxptdi.sys
deleted: virus Worm.Win32.Downloader.de        File: C:\Documents and Settings\Administrator\×ÀÃæ\New_Folder.rar/New Folder\014[1].exe//PE_Patch//UPack

liunanyuan

呵呵    是的         

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Mnless.zyt  
病毒： Backdoor.Win32.Agent.yos
病毒： Trojan.Win32.Mnless.zlb  
病毒： Trojan.DL.Script.JS.Agent.lst
病毒： Trojan.Win32.Mnless.zkb  
病毒： Hack.Exploit.Script.JS.Agent.dr
病毒： Trojan.Win32.Undef.agx   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.23.50