virus

电影结束了

virus

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\WINDOWS\MicroSoftImm.exe]
                    …………发现Spy！报告:[1] Win32.Packer3
文件信息:  大小:176640  MD5:bba428c6cfe0db97a30b857a5d899dbc

[C:\Documents and Settings\Administrator\桌面\Virus\WINDOWS\98032B.exe]
                    …………发现Spy！报告:[1] Win32.Packer3
文件信息:  大小:130204  MD5:bccc597609952ae696f0ece73683755c

[C:\Documents and Settings\Administrator\桌面\Virus\WINDOWS\uusee109475.exe]
                    …………发现Spy！报告:[1] Win32.NkHack.ADO
文件信息:  大小:144896  MD5:cf49b8e4fe6eee946651a1862f2bb6ab

文件数:15   病毒数:3  比重:0.2
OK  扫描完毕！
  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

[ 本帖最后由 FBAV 于 2007-12-31 12:47 编辑 ]

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\virus.part1.rar'
C:\Documents and Settings\haha\桌面\virus.part1.rar
  [0] Archive type: RAR
  --> 05rn1x7.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 0zcztj.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 98032B.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> ck9zc70q.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> iks6stoixp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      A backup was created as '47ea74e4.qua'  ( QUARANTINE )
Begin scan in 'C:\Documents and Settings\haha\桌面\virus.part2.rar'
C:\Documents and Settings\haha\桌面\virus.part2.rar
  [0] Archive type: RAR
  --> my_70302.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.gap
  --> tempaq
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AO
  --> uusee109475.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> xqnw8fty.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> y0oe7ff.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> ÊÕ²Ø.url
      [DETECTION] Is the Trojan horse TR/Farfli.A.6
      [INFO]      A backup was created as '47ea74e5.qua'  ( QUARANTINE )
Begin scan in 'C:\Documents and Settings\haha\桌面\WINDOWS.rar'


End of the scan: 2007年12月31日  12:47
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     11 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\WINDOWS'
C:\Documents and Settings\Administrator\My Documents\WINDOWS\
  0366.exe
  05rn1x7.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  0zcztj.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
  98032B.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!
  ck9zc70q.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  iks6stoixp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
  logo[1].exe
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AO
      [INFO]      The file was deleted!
  MicroSoftImm.exe
    [0] Archive type: Runtime Packed
    --> Object
  my_70302.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.gap
      [INFO]      The file was deleted!
  my_70338.exe
  tempaq
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AO
      [INFO]      The file was deleted!
  uusee109475.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  xqnw8fty.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  y0oe7ff.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  收藏.url
      [DETECTION] Is the Trojan horse TR/Farfli.A.6
      [INFO]      The file was deleted!


End of the scan: 2007年12月30日  20:50
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     15 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      1 Warnings
      0 Notes

醉一生爱妍

压缩包··貌似有问题？

The EQs

C:\Documents and Settings\Don johnson\桌面\virus\05rn1x7.sys - a variant of Win32/Rootkit.Agent.NCK trojan
C:\Documents and Settings\Don johnson\桌面\virus\0zcztj.dll - probably a variant of Win32/TrojanDownloader.Agent.NPO trojan
C:\Documents and Settings\Don johnson\桌面\virus\ck9zc70q.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
C:\Documents and Settings\Don johnson\桌面\virus\iks6stoixp.dll - probably a variant of Win32/TrojanDownloader.Agent.NPO trojan
C:\Documents and Settings\Don johnson\桌面\virus\logo[1].exe - a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
C:\Documents and Settings\Don johnson\桌面\virus\tempaq - a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
C:\Documents and Settings\Don johnson\桌面\virus\xqnw8fty.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
C:\Documents and Settings\Don johnson\桌面\virus\y0oe7ff.sys - a variant of Win32/Rootkit.Agent.NCK trojan

qigang

16/1

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.aql   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25

醉一生爱妍

江民K3个了

qigang

Rising20.25未杀！

rest1min

KV2008杀掉3个。