几个

liunanyuan

.........................

Kitman

Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         bbs.kafan.cn/attachment.php?aid=176387
Information:         Is the Trojan horse TR/Agent.1412.1

Generated by AntiVir WebGuard 7.01.00.13, AVE 7.6.0.46, VDF 7.0.1.174

lic

Scanning Log
NOD32 version 2755 (20071229) NT
Command line: C:\Documents and Settings\Owner\桌面\Desktop.rar
Checking CRC of NOD32.EXE: Status OK
C:\Program Files\Eset\nod32.exe - is OK
Operating memory is OK.
MBR sector of the 1. physical disk is OK.
Active boot sector of the 1. physical disk is OK.
Date: 30.12.2007  Time: 12:36:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Owner\桌面\Desktop.rar
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?~Temp9921.tmp - a variant of Win32/TrojanDownloader.Tiny.Y trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?NATIVE.EXE - is OK
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?OnlO0r.bak - probably a variant of Win32/PSW.OnLineGames.NBR trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?s[1].exe - a variant of Win32/TrojanDownloader.Tiny.Y trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?17173[1].htm - is OK
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?~Temp2834.tmp - a variant of Win32/TrojanDownloader.Tiny.Y trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?~Temp3248.tmp - a variant of Win32/TrojanDownloader.Tiny.Y trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar ?RAR ?~Temp6394.tmp - a variant of Win32/TrojanDownloader.Tiny.Y trojan
C:\Documents and Settings\Owner\桌面\Desktop.rar:Zone.Identifier - is OK
Number of scanned files: 9
Number of threats found: 6
Time of completion: 12:36:43 Total scanning time: 2 sec (00:00:02)

lic

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 30/12/2007, 0:17

Scan name: test
Path to scan: C:\Documents and Settings\Owner\桌面\desktop

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 30/12/2007, 12:43:42
---------------------------------------------------------------------

[Found virus]         <W32/AutoRun.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\Owner\桌面\desktop\OnlO0r.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Owner\桌面\desktop\s[1].exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Owner\桌面\desktop\~Temp2834.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Owner\桌面\desktop\~Temp3248.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Owner\桌面\desktop\~Temp6394.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Owner\桌面\desktop\~Temp9921.exe->(UPack)

---------------------------------------------------------------------

lic

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.08
nvcbin.def revision 5.90.00 of 2007/12/28 07:03:39 (1172297 variants)
nvcmacro.def revision 5.90.00 of 2007/12/21 16:51:24 (20421 variants)
Total number of variants: 1192718
Command line: "@C:\WINDOWS\TEMP\~OD41E.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: C:\
- Scanning system areas of drive: C:\
- Scanning files in the directory: C:\Documents and Settings\Owner\桌面\Desktop\
     1516 ms C:\Documents and Settings\Owner\桌面\Desktop\17173[1].htm   
     1578 ms C:\Documents and Settings\Owner\桌面\Desktop\NATIVE.EXE     
      485 ms C:\Documents and Settings\Owner\桌面\Desktop\OnlO0r.exe     
        0 ms C:\Documents and Settings\Owner\桌面\Desktop\s[1].exe        Security Risk W32/Suspicious_U.gen ()
        0 ms C:\Documents and Settings\Owner\桌面\Desktop\~Temp2834.exe   Security Risk W32/Suspicious_U.gen ()
       16 ms C:\Documents and Settings\Owner\桌面\Desktop\~Temp3248.exe   Security Risk W32/Suspicious_U.gen ()
        0 ms C:\Documents and Settings\Owner\桌面\Desktop\~Temp6394.exe   Security Risk W32/Suspicious_U.gen ()
       16 ms C:\Documents and Settings\Owner\桌面\Desktop\~Temp9921.exe   Security Risk W32/Suspicious_U.gen ()

===================================================================================================

asraena

AntiVir PersonalEdition Premium
Report file date: 2007年12月30日  12:50

Version information:
Start of the scan: 2007年12月30日  12:50

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Desktop.rar'
C:\Documents and Settings\Administrator\桌面\Desktop.rar
  [0] Archive type: RAR
  --> ~Temp9921.tmp
      [DETECTION] Is the Trojan horse TR/Agent.1412.1
  --> OnlO0r.bak
      [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> s[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.1412.1
  --> 17173[1].htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Dldr.Sohu.A
  --> ~Temp2834.tmp
      [DETECTION] Is the Trojan horse TR/Agent.1412.1
  --> ~Temp3248.tmp
      [DETECTION] Is the Trojan horse TR/Agent.1412.1
  --> ~Temp6394.tmp
      [DETECTION] Is the Trojan horse TR/Agent.1412.1
      [INFO]      The file was deleted!


End of the scan: 2007年12月30日  12:50
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

[ 本帖最后由 asraena 于 2007-12-30 12:53 编辑 ]

will

Win32:AutoRun-U

[ 本帖最后由 yimike 于 2007-12-30 13:01 编辑 ]

couldsst

BD
C:\a\Desktop.rar=]~Temp9921.tmp Generic.Malware.dld!!.883BFB5B
C:\a\Desktop.rar=]s[1].exe Generic.Malware.dld!!.883BFB5B
C:\a\Desktop.rar=]~Temp2834.tmp Generic.Malware.dld!!.883BFB5B
C:\a\Desktop.rar=]~Temp3248.tmp Generic.Malware.dld!!.883BFB5B
C:\a\Desktop.rar=]~Temp6394.tmp Generic.Malware.dld!!.883BFB5B
C:\a\Desktop.rar=]OnlO0r.bak Trojan.PWS.Delf.IFD

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.glo

用户来源：互联网

软件版本：20.24.60

zhr5898

费尔杀了六个