广告+木马,4个

sam.to

已刪除: 廣告軟體 not-a-virus:AdWare.Win32.Boran.dj        檔案: C:\Documents and Settings\kato9096\桌面\virus\dzh_2007v5.exe//stream//data0006//stream//data0001
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.tt        檔案: C:\Documents and Settings\kato9096\桌面\virus\dzh_2007v5.exe//stream//data0007//data0002
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.te        檔案: C:\Documents and Settings\kato9096\桌面\virus\dzh_2007v5.exe//stream//data0007//data0003//stream//data0001
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.hox        檔案: C:\Documents and Settings\kato9096\桌面\virus\dzh_2007v5.exe//stream//data0008//#/dll.dll

剑书

上报~

The scan has been done completely.

      2 Scanning directories
      1 Files were scanned
      0 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus\virus\dzh_2007v5'
C:\Documents and Settings\Administrator\桌面\virus\virus\dzh_2007v5\$TEMP\install.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.QF.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\virus\dzh_2007v5\$TEMP\TBSetup(-33554382).exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '47e7d3e0.qua'!


End of the scan: 星期二 2008年1月22日  01:17
Used time: 00:11 min

The scan has been done completely.

      2 Scanning directories
      8 Files were scanned
      1 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

[ 本帖最后由 nosferatu 于 2008-1-22 01:19 编辑 ]

zhr5898

运行后费尔拦···

冷冷

-------------------------------------------------------------------------------CAV
I:\virus\virus/dzh_2007v5.exe: Trojan.Dropper-1805 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 193059
Engine version: 0.92
Scanned directories: 1
Scanned files: 1
Infected files: 1
Data scanned: 1.54 MB
Time: 7.859 sec (0 m 7 s)
-------------------------------------------------------------------------------IK
I:\virus\virus\dzh_2007v5.exe - Signature 'Trojan-Downloader.7484' found
1 File scanned
   (0 Archives with 0 files)
1 Signature found
0 Suspect code-parts found
Used time: 0:00.016
-------------------------------------------------------------------------------DR.WEB


[ 本帖最后由 冷_冷 于 2008-1-22 01:36 编辑 ]

king6808

杀之

492052134

瑞星MISS

鱼是一只我

江民不报，估计运行应该拦截吧

mofunzone

运行后antivir杀了11个，漏掉了18个，卡巴斯基明显没有杀全

clc78223

ess 3.0
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe » NSIS » SkypeClient.exe - Win32/TrojanDownloader.Adload.NEQ trojan
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe » NSIS » dodolook314.exe » NSIS » 31.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe » NSIS » ad_2501.exe » NSIS » InsShell.exe - probably a variant of Win32/Adware.Boran application
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe » NSIS » i24.exe » NSIS » d03.exe » NSIS » Uninst.exe - Win32/Adware.Cinmus application
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe » NSIS » TBSetup(-33554382).exe - a variant of Win32/TrojanDropper.Small.NGH trojan
D:\Personal\My Documents\桌面\virus\virus\dzh_2007v5.exe - multiple threats - unable to clean