4

ck893210

....

rest1min

KV2008和卡巴均杀掉3个。

库洛洛

Starting the file scan:

Begin scan in 'E:\1.rar'
E:\1.rar
  [0] Archive type: RAR
  --> 1\AcLue.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.dle
  --> 1\AcSpecf.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.dle.1
  --> 1\eth8023.sys
      [DETECTION] Is the Trojan horse TR/Spy.FtpSend.A.1
  --> 1\linkinfo.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
      [INFO]      The file was deleted!

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2007-12-31, 5:54

Scan name: 12.31
Path to scan: C:\样本 yangpizhi\12.31\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-12-31, 15:38:04
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Clean]        C:\样本 yangpizhi\12.31\1.rar->1\AcLue.dll
[Clean]        C:\样本 yangpizhi\12.31\1.rar->1\AcSpecf.dll
[Clean]        C:\样本 yangpizhi\12.31\1.rar->1\eth8023.sys
[Found Trojan]         <W32/Trojan.APKI (exact, not disinfectable)>        C:\样本 yangpizhi\12.31\1.rar->1\linkinfo.dll
[Contains infected objects]        C:\样本 yangpizhi\12.31\1.rar
[Quarantined]        C:\样本 yangpizhi\12.31\1.rar->1\linkinfo.dll

---------------------------------------------------------------------
Scan ended:        2007-12-31, 15:38:11
Duration:        0:00:06

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

扫描进行于：2007-12-31 15:41:42
扫描日志
NOD32版本 2757 (20071230) NT
命令行： F:\virus\1.rar

日期： 31.12.2007  时间：15:41:44
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\virus\1.rar
F:\virus\1.rar >>RAR >>1\linkinfo.dll - Win32/Alman.NAB 病毒
已扫描的文件数目：4
已发现的病毒数目：1
完成时间： 15:41:44 总扫描时间：0 秒 (00:00:00)

yuyando

Begin scan in 'F:\Documents and Settings\Administrator\桌面\1.rar'
F:\Documents and Settings\Administrator\桌面\1.rar
  [0] Archive type: RAR
  --> 1\AcLue.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.dle
  --> 1\AcSpecf.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.dle.1
  --> 1\eth8023.sys
      [DETECTION] Is the Trojan horse TR/Spy.FtpSend.A.1
  --> 1\linkinfo.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
      [INFO]      The file was deleted!

红心王子

木马名称:Trojan-Downloader.Win32.Agent.ksi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\1\LINKINFO.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

kkgh

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间:        15:49:18 2007-12-31

+ 扫描结果:       



C:\Documents and Settings\zh\桌面\1.rar/1\linkinfo.dll -> Downloader.Agent.bsi : 未进行操作.


::报告结束

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Magistr.g           

用户来源：互联网

软件版本：20.25

couldsst

BD
C:\a\1(2).rar=]1\linkinfo.dll Win32.Almanahe.B
C:\a\1(2).rar=]1\AcLue.dll Win32.Almanahe.F
C:\a\1(2).rar=]1\AcSpecf.dll Win32.Almanahe.F
C:\a\1(2).rar=]1\eth8023.sys Win32.Almanahe.F

will

1个~