东方卫士马更新了？

lanvin

www.i110.com

wangjay1980

人家收集样本呢

啊弥陀佛

微点活捉

lanvin

一个杀软做成这样
实在是 丢人夜不怕了
貌似是个下载者
我不弄了

冷冷

多了一个 基本是那些！！

Graybird

Starting the file scan:

Begin scan in 'E:\8.rar'
E:\8.rar
  [0] Archive type: RAR
  --> ntuser.com
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> svchoost.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> svchost.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> 14[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> 222[1].exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> 014[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> aa[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> bak[1].css
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年1月2日  17:25
Used time: 00:38 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      8 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

Joker

C:\Documents and Settings\Administrator\桌面\8.rar » RAR » ntuser.com - Win32/Jalous.N worm
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » svchoost.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » svchost.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » 14[1].exe - Win32/Jalous.N worm
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » 222[1].exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » 014[1].exe - a variant of Win32/Jalous worm
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » aa[1].exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\8.rar » RAR » bak[1].css - probably a variant of Win32/Genetik trojan

xiaohf

原帖由 冷_冷 于 2008-1-2 17:22 发表
多了一个 基本是那些！！

小红伞砍8个

yunhan123

病毒        2008-01-02  18:10:00        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:10:00        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:10:00        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\WOOSA5W7\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:55        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:55        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:54        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:54        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\K965GDC3\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:54        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\GD2X4VSR\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\K965GDC3\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:53        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
病毒        2008-01-02  18:09:51        病毒在文件C:\Documents and Settings\大江东去\Local Settings\Temporary Internet Files\Content.IE5\SJC7GPY1\rl[1].htm中        JS.RealExploit.t.9779        拦截成功（文件被禁止访问）       
金山监控杀的。为啥没有EXE文件。只有网页格式文件删除。

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.Agent.yos
病毒： Malicious Code           
病毒： Worm.Win32.Agent.zik     
病毒： Trojan.Win32.Mnless.zyt  

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25.21