ADx10 +1 trj

qianwenxiang

frplprg.exe Adware.Vapsup.aeg.nmkg 广告程序 还未处理
bfrgnos.dll Adware.Vapsup.ael.egas.dll 广告程序 还未处理
win32xp.exe TrojanDownloader.Delf.axb.yifa 木马 还未处理

xxwpk007

风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


[F:\Data03.rar]
                    …………引擎[2]发现病毒:Win32.NkHack.BDX.A
OK  扫描完毕！

xxwpk007

木马名称:Trojan-Downloader.Win32.Delf.dji

程序:
F:\WIN32XP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

woai_jolin

扫描进行于：2008-2-3 18:02:10
扫描日志
NOD32版本 2845 (20080202) NT
命令行： G:\v\Data03.rar
C:\Program Files\ESET\nod32.exe - 是正常的

日期： 3.2.2008  时间：18:02:11
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：G:\v\Data03.rar
G:\v\Data03.rar >>RAR >>dwrmntssfd.dll - 是正常的
G:\v\Data03.rar >>RAR >>edfqvrw.dll - 是正常的
G:\v\Data03.rar >>RAR >>frplprg.exe - 是正常的
G:\v\Data03.rar >>RAR >>crsowkxrkv.exe - 是正常的
G:\v\Data03.rar >>RAR >>win32xp.exe - Win32/TrojanDownloader.Delf.AXB 木马的变种
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall.exe - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>Entries.bin - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>Strings.txt - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>System.dll - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>install.ico - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>imex.bat - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>crsowkxrkv.exe - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>NSISdl.dll - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>Uninstall.exe >>NSIS >>Entries.bin - 是正常的
G:\v\Data03.rar >>RAR >>VideoAccessCodecInstall2.exe >>NSIS >>Uninstall.exe >>NSIS >>Strings.txt - 是正常的
G:\v\Data03.rar >>RAR >>MediaEntertainmentCodec.ocx - 是正常的
G:\v\Data03.rar >>RAR >>ust.dll >>NSIS >>Entries.bin - 是正常的
G:\v\Data03.rar >>RAR >>ust.dll >>NSIS >>Strings.txt - 是正常的
G:\v\Data03.rar >>RAR >>afxlspw.dll - 是正常的
G:\v\Data03.rar >>RAR >>bfrgnos.dll - 是正常的
G:\v\Data03.rar:Zone.Identifier - 是正常的
已扫描的文件数目：21
已发现的病毒数目：1
完成时间： 18:02:21 总扫描时间：10 秒 (00:00:10)

Palkia

小红伞MISS~

CZH

f-prot

[Found downloader]         <W32/Downloader.K.gen!Eldorado (not disinfectable, generic)>        D:\TDDownload\Data03.rar->win32xp.exe->(NSPack)
[Contains infected objects]        D:\TDDownload\Data03.rar
[Quarantined]        D:\TDDownload\Data03.rar->bfrgnos.dll

-------------------------------------------------------------------

[ 本帖最后由 CZH 于 2008-2-3 18:53 编辑 ]

spaceplane

avast 2

Graybird

Starting the file scan:

Begin scan in 'E:\Data03.rar'
E:\Data03.rar
  [0] Archive type: RAR
  --> dwrmntssfd.dll
      [DETECTION] Is the Trojan horse TR/Zlob.DIN
  --> crsowkxrkv.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> win32xp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> VideoAccessCodecInstall2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> bfrgnos.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [WARNING]   The file was ignored!


End of the scan: 2008年2月3日  18:21
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
      4 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

冷冷

IK
I:\virus\Data03.rar:\dwrmntssfd.dll - Signature 'Generic.NetAdware' found
I:\virus\Data03.rar:\edfqvrw.dll - Signature 'not-a-virus:AdWare.Win32.Vapsup.aoi' found
I:\virus\Data03.rar:\frplprg.exe - Signature 'not-a-virus:AdWare.Win32.Vapsup.tz' found
I:\virus\Data03.rar:\crsowkxrkv.exe
I:\virus\Data03.rar:\win32xp.exe - Signature 'Backdoor.Win32.Agent.ahj' found
I:\virus\Data03.rar:\VideoAccessCodecInstall.exe - Signature 'Trojan-Downloader.Zlob.VM' found
I:\virus\Data03.rar:\VideoAccessCodecInstall2.exe
I:\virus\Data03.rar:\MediaEntertainmentCodec.ocx
I:\virus\Data03.rar:\ust.dll
I:\virus\Data03.rar:\afxlspw.dll - Signature 'AdWare.NetAdware.S' found
I:\virus\Data03.rar:\bfrgnos.dll - Signature 'Virus.Win32.Agent.LTS' found
I:\virus\Data03.rar

        12 Files scanned
          (1 Archiv with 11 files)
        7 Signatures found
        0 Suspect code-parts found
        Used time: 0:11.140

hj5abc

Sign of "Win32:Agent-LTS [Trj]" has been found in "F:\Data03.rar\bfrgnos.dll" file.  

Sign of "Win32:Delf-DNR [Trj]" has been found in "F:\Data03.rar\win32xp.exe\[NsPack]" file.