第二包23个

qianwenxiang

挪威的冬天

信息        2008-01-26  15:23:18        您此次查毒共查出9个病毒以及危险代码                       
信息        2008-01-26  15:23:18        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件38个                       
信息        2008-01-26  15:23:18        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\zloi.exe        Win32.VirInstaller.Agent.20480        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\u_f1_v33_64.exe        Win32.PSWTroj.LdPinch.37761        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\ldig004.exe        Win32.VirInstaller.Mudrop.fv.73728        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\krea.exe        Win32.Troj.Agent.ps.32768        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\Installer_cna_upx.exe        Win32.Troj.Wopla.as.409600        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\fm.exe        Win32.VirInstaller.Agent.20480        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\specialdialer.exe        Win32.Troj.Dialer.ay.13824        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\pbho.exe        Win32.Troj.BHO.39424        跳过，未处理       
病毒        2008-01-26  15:23:18        C:\Users\挪威的冬天\Desktop\Malware2.rar\file_1.exe        Win32.TrojDownloader.Agent.28672        跳过，未处理

Graybird

Starting the file scan:

Begin scan in 'E:\Malware2.rar'
E:\Malware2.rar
  [0] Archive type: RAR
  --> file_1.exe
      [DETECTION] Contains detection pattern of the worm WORM/Ntech.AG
  --> file_2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.JH.16
  --> loader.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.AAJL
  --> 0002.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.8704
  --> 183aa.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.gbj
  --> kwpop_43.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> pbho.exe
      [DETECTION] Is the Trojan horse TR/BHO.afz
  --> specialdialer.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 01113.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> 77_nm1_29_11_07_0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> fm.exe
      [DETECTION] Contains detection pattern of the worm WORM/Ntech.AD
  --> Installer_cna_upx.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.EZ
  --> krea.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680.95
  --> ldig004.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> severa.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.ow
  --> u_f1_v33_64.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> zloi.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.dfm.2
  --> shift.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.ow
    --> ms03011.jar
      [1] Archive type: ZIP
      --> MagicApplet.class
          [DETECTION] Contains detection pattern of the exploits EXP/Java.Bytver.5.B
      --> OwnClassLoader.class
          [DETECTION] Contains detection pattern of the exploits EXP/ByteVerify
      --> ProxyClassLoader.class
          [DETECTION] Contains detection pattern of the exploits EXP/Java.Bytver.5.A
      --> Installer.class
          [DETECTION] Contains detection pattern of the exploits EXP/ByteVerify.S.1
  --> af1.dll
      [DETECTION] Is the Trojan horse TR/Dldr.ConHook.Gen
  --> 1015.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年1月26日  15:25
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     29 Files were scanned
     24 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

Joker

deleted: Trojan program Trojan-Downloader.Win32.Agent.hmc        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/file_1.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.cyn        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/file_2.exe//#
deleted: Trojan program Trojan-Downloader.Win32.Small.hpo        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/loader.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.hua        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/0002.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.gbj        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/183aa.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.gbi        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/kwpop_43.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: Trojan program Trojan.Win32.BHO.afz        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/pbho.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: auto-dialer not-a-virus:Porn-Dialer.Win32.GBDialer.j        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/specialdialer.exe
deleted: Trojan program Trojan-Proxy.Win32.Xorpix.ck        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/01113.exe
deleted: Trojan program Trojan.Win32.Agent.dor        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/77_nm1_29_11_07_0.exe
deleted: Trojan program Trojan-Downloader.Win32.Diehard.dd        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/fm.exe
deleted: Trojan program Trojan-Proxy.Win32.Wopla.as        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/Installer_cna_upx.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.cib        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/krea.exe//PE_Patch.UPX
deleted: Trojan program Trojan-Dropper.Win32.Mudrop.fv        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/ldig004.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: Trojan program Trojan-Downloader.Win32.Tibs.ul        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/severa.exe
deleted: Trojan program Trojan-PSW.Win32.LdPinch.eoq        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/u_f1_v33_64.exe
deleted: Trojan program Trojan-Downloader.Win32.Diehard.dd        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/zloi.exe
deleted: virus Email-Worm.Win32.Zhelatin.uq        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/shift.exe
deleted: Trojan program Trojan-Downloader.Java.OpenConnection.ao        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/ms03011.jar/MagicApplet.class
deleted: Trojan program Trojan-Downloader.Java.Agent.a        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/ms03011.jar/Installer.class
deleted: adware not-a-virus:AdWare.Win32.Virtumonde.ecc        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/af1.dll
deleted: Trojan program Trojan.Win32.DNSChanger.aum        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/1015.exe
deleted: Trojan program Trojan-Dropper.Win32.FriJoiner.fl        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware2.rar/ldr.exe

23

金头石子

我的小红伞报了24个

醉一生爱妍

NOD kill 19

[ 本帖最后由 garyyan456 于 2008-1-26 15:37 编辑 ]

鱼是一只我

江民好像报了3个

Graybird

The file 'svchost.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP2)'.

spaceplane

AVAST 16个
大蜘蛛 16个

啊弥陀佛

木马名称:Trojan.Win32.BHO.ju
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\PBHO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Agent.jmt
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\77_NM1_29_11_07_0.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Dropper.Win32.Mudrop.fo
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\LDIG004.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\0002.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\183AA.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\1015.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KDJSS.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\01113.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\PAR4A23.TMP
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\FILE_1.EXE
是可疑程序!
试图修改关键系统文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\FM.EXE
是可疑程序!
试图修改关键系统文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\KREA.EXE
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\LOADER.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\ZLOI.EXE
是可疑程序!
试图修改关键系统文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\U_F1_V33_64.EXE
是否删除病毒程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\FILE_2.EXE
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\SEVERA.EXE
是否删除蠕虫程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MALWARE2\KWPOP_43.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SVCHOST.EXE
是否删除木马程序及其衍生物?