第三包12个

qianwenxiang

Virus Details

Virus Name: TROJ_SMALL.BNM

Location: c:\test\0801\0126\malware3\comload.dll

Type: File

Quarantine Time: 2008/01/26 15:23:31

不小心开了监控 汗

Joker

deleted: Trojan program Trojan.Win32.Pakes.bqt        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/e.exe
deleted: riskware not-a-virus:FraudTool.Win32.UltimateDefender.v        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/udefender_os1zn2mO7Z.exe
deleted: Trojan program Trojan.Win32.DNSChanger.aqd        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/codechot4531.exe//data0001
deleted: adware not-a-virus:AdWare.Win32.Delf.ad        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/cybar.dll//UPX
deleted: adware not-a-virus:AdWare.Win32.Delf.ak        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/cyupdater.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: adware not-a-virus:AdWare.Win32.BHO.tw        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/cybho.dll//PE_Patch.PECompact//PecBundle//PECompact
deleted: auto-dialer not-a-virus:Porn-Dialer.Win32.GBDialer.j        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/gdnOT2904.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.gh        File: C:\Documents and Settings\Administrator\×ÀÃæ\Malware3.rar/comload.dll//UPX

8

挪威的冬天

信息        2008-01-26  15:28:06        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-01-26  15:28:06        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件20个                       
信息        2008-01-26  15:28:06        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-01-26  15:28:06        C:\Users\挪威的冬天\Desktop\Malware3.rar\comload.dll        Win32.TrojDownloader.Small.gh.27648        跳过，未处理       
病毒        2008-01-26  15:28:06        C:\Users\挪威的冬天\Desktop\Malware3.rar\gdnOT2904.exe        Win32.Troj.Dialer.ay.13824        跳过，未处理       
病毒        2008-01-26  15:28:06        C:\Users\挪威的冬天\Desktop\Malware3.rar\e.exe        Win32.Troj.Rootkit.397312        跳过，未处理

Graybird

Starting the file scan:

Begin scan in 'E:\Malware3.rar'
E:\Malware3.rar
  [0] Archive type: RAR
  --> BmpOperate.zip
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.179 Backdoor server programs
  --> webinfs.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
  --> logo.jpg
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AO
  --> e.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> udefender_os1zn2mO7Z.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> codechot4531.exe
      [DETECTION] Contains detection pattern of the dropper DR/Dldr.DNSChanger.Gen
  --> cybar.dll
      [DETECTION] Is the Trojan horse TR/Toolbar.276480
  --> cyupdater.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Delf.AK
  --> kr3.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.Gen
  --> cybho.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.TW
  --> gdnOT2904.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> comload.dll
      [DETECTION] Contains detection pattern of the dial-up program DIAL/302267
      [INFO]      The file was deleted!


End of the scan: 2008年1月26日  15:30
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

鱼是一只我

江民才杀掉4个。。

spaceplane

AVAST 7个
大蜘蛛才2个，我晕

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Malware3.rar'
C:\Documents and Settings\Administrator\My Documents\
  Malware3.rar
    [0] Archive type: RAR
    --> BmpOperate.zip
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.179 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
      --> webinfs.exe
        [1] Archive type: Runtime Packed
        --> Object
    --> logo.jpg
        [DETECTION] Is the Trojan horse TR/Drop.RKit.AO
        [WARNING]   Infected files in archives cannot be repaired!
      --> e.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> udefender_os1zn2mO7Z.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
            [WARNING]   Infected files in archives cannot be repaired!
    --> codechot4531.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> cybar.dll
        [DETECTION] Is the Trojan horse TR/Toolbar.276480
        [WARNING]   Infected files in archives cannot be repaired!
    --> cyupdater.exe
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Delf.AK
        [WARNING]   Infected files in archives cannot be repaired!
    --> kr3.int
    --> cybho.dll
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.TW
        [WARNING]   Infected files in archives cannot be repaired!
    --> gdnOT2904.exe
        [DETECTION] Contains detection pattern of the dial-up program DIAL/Generic
        [WARNING]   Infected files in archives cannot be repaired!
    --> comload.dll
        [DETECTION] Contains detection pattern of the dial-up program DIAL/302267
        [WARNING]   Infected files in archives cannot be repaired!
      [WARNING]   The file was ignored!
  Malware3.rar:Zone.Identifier


End of the scan: 2008年1月26日  00:02
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     14 Files were scanned
     10 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
     11 Warnings
      0 Notes

28654621

D:\download\Malware3.rar>>logo.jpg        Trojan.Cap712323.enqt        木马        还未处理
D:\download\Malware3.rar>>e.exe        Trojan.Pakes.bqt.vrjb        木马        还未处理
D:\download\Malware3.rar>>udefender_os1zn2mO7Z.exe        Adware.UltimateDefender.byzi        广告程序        还未处理
D:\download\Malware3.rar>>cybar.dll        Adware.Delf.ad.fffp.dll        广告程序        还未处理
D:\download\Malware3.rar>>gdnOT2904.exe        PornDialer.GBDialer.j.bwxk        黑客工具        还未处理
D:\download\Malware3.rar>>comload.dll        TrojanDownloader.Small.gh.zs.dll        木马        还未处理

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Dialer.Win32.Agent.yfq
病毒： Trojan.DL.Small.oy      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.51

leonfg

ESET 5
C:\Documents and Settings\GUNDAM\桌面\Malware3.rar » RAR » logo.jpg - a variant of Win32/TrojanDownloader.QQHelper.NDW trojan
C:\Documents and Settings\GUNDAM\桌面\Malware3.rar » RAR » e.exe - Win32/Rootkit.Agent.NEA trojan
C:\Documents and Settings\GUNDAM\桌面\Malware3.rar » RAR » cyupdater.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\GUNDAM\桌面\Malware3.rar » RAR » gdnOT2904.exe - Win32/Dialer.NAD trojan
C:\Documents and Settings\GUNDAM\桌面\Malware3.rar » RAR » comload.dll - Win32/TrojanDownloader.Small.ON trojan