6个

qianwenxiang

Win32:Agent-MEB [Trj]  runtime.sys
Win32:Agent-MET [Rtk] symavc32.sys
- kprof
- diskcdriver.sys
- centersafe.dll
- ssymman.dll

woai_jolin

扫描报告
2008年2月1日 18:06:01 - 18:06:02
计算机名称: BA98EBFDBC7C489
扫描类型: 扫描目标
目标: G:\v\CENTER.rar


--------------------------------------------------------------------------------

结果: 找到 4 恶意软件
Trojan-Proxy.Win32.Wopla.as (病毒)
G:\v\CENTER.rar\kprof
Trojan-Downloader.Win32.Agent.dpe (病毒)
G:\v\CENTER.rar\runtime.sys
Trojan-Spy.Win32.Banker.hta (病毒)
G:\v\CENTER.rar\ssymman.dll
Rootkit.Win32.Agent.wp (病毒)
G:\v\CENTER.rar\symavc32.sys




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 7
未扫描: 0
结果:
病毒: 4
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2008-01-31_05
间谍软件: 2008-02-01_03
扫描引擎:
F-Secure AVP: 7.00.171, 2008-01-31
F-Secure Hydra: 2.06.7470, 2008-02-01
扫描选项:
扫描所有文件
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

llgiggs

Begin scan in 'C:\Documents and Settings\Administrator\桌面\CENTER.rar'
C:\Documents and Settings\Administrator\桌面\CENTER.rar
  [0] Archive type: RAR
  --> kprof
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> runtime.sys
      [DETECTION] Contains detection pattern of the worm WORM/Ntech.Z.2
  --> ssymman.dll
      [DETECTION] Is the Trojan horse TR/Spy.Banker.Gen
  --> symavc32.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen

Graybird

The file 'diskcdriver.sys' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'centersafe.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.Agent.rpa. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

冷冷

IKARUS
I:\virus\CENTER.rar:\centersafe.dll
I:\virus\CENTER.rar:\diskcdriver.sys
I:\virus\CENTER.rar:\kprof - Signature 'Trojan-Proxy.Win32.Wopla.as' found
I:\virus\CENTER.rar:\runtime.sys - Signature 'Rootkit.Win32.Agent.dw' found
I:\virus\CENTER.rar:\ssymman.dll - Signature 'Trojan-Spy.Win32.BZub.dl' found
I:\virus\CENTER.rar:\symavc32.sys - Signature 'Rootkit.Win32.Agent.ea' found
I:\virus\CENTER.rar

        7 Files scanned
          (1 Archiv with 6 files)
        4 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.563

spaceplane

蜘蛛3个
AVAST 2个
低迷

sharkkong

已检测到: 木马程序 Trojan-Proxy.Win32.Wopla.as        URL: http://bbs.kafan.cn/attachment.php?aid=194222//kprof
已检测到: 木马程序 Trojan-Downloader.Win32.Agent.dpe        URL: http://bbs.kafan.cn/attachment.php?aid=194222//runtime.sys
已检测到: 木马程序 Trojan-Spy.Win32.Banker.hta        URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX
已检测到: 木马程序 Rootkit.Win32.Agent.wp        URL: http://bbs.kafan.cn/attachment.php?aid=194222//symavc32.sys

leonfg

ESET  3
C:\Documents and Settings\GUNDAM\桌面\CENTER.rar » RAR » kprof - Win32/TrojanProxy.Wopla.AS trojan
C:\Documents and Settings\GUNDAM\桌面\CENTER.rar » RAR » runtime.sys - Win32/Rootkit.Agent.NDF trojan
C:\Documents and Settings\GUNDAM\桌面\CENTER.rar » RAR » symavc32.sys - Win32/Rootkit.Agent.HU trojan

挪威的冬天

holy shit

信息        2008-02-01  18:36:44        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-02-01  18:36:44        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件8个                       
信息        2008-02-01  18:36:44        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-01  18:36:44        C:\Users\挪威的冬天\Desktop\CENTER.rar\runtime.sys        Win32.TrojDownloader.Agent.5504        跳过，未处理

醉一生爱妍

费尔2