HEUR/MALWARE（添加附件）

gho

deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: E:\Documents and Settings\Administrator\×ÀÃæ\A0070483.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: E:\Documents and Settings\Administrator\×ÀÃæ\A0070504.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: E:\Documents and Settings\Administrator\×ÀÃæ\A0070518.dll

wangjay1980

20  剩下2个，KL..........
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected7.zip/A0083880.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected7.zip/A0084887.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected7.zip/A0084898.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected2.zip/A0071509.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected2.zip/A0071541.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected3.zip/A0071584.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected3.zip/A0071585.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected3.zip/A0071674.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bdr        File: C:\Documents and Settings\Owner\×ÀÃæ\infected4.zip/A0071713.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected4.zip/A0077785.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected4.zip/A0078791.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected5.zip/A0081806.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected5.zip/A0081817.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected5.zip/A0081832.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected6.zip/A0081869.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected6.zip/A0082876.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected6.zip/A0082887.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected8.zip/A0084909.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected8.zip/A0084920.dll
detected: Trojan program Trojan-Spy.Win32.Agent.bed        File: C:\Documents and Settings\Owner\×ÀÃæ\infected8.zip/A0084953.dll

[ 本帖最后由 wangjay1980 于 2008-2-5 22:27 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.PopHot.hp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.30

Graybird

23个启发~

Starting the file scan:

Begin scan in 'E:\A0071509.rar'
E:\A0071509.rar
  [0] Archive type: RAR
  --> A0071509.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071521.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071541.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071584.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071585.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071674.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0071713.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0077785.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0078791.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0081806.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0081817.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0081832.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0081869.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0082876.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0082887.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0083880.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0084887.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0084898.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0084909.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0084920.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0084953.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0088114.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> A0088115.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!


End of the scan: 2008年2月5日  22:29
Used time: 00:21 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
      0 viruses and/or unwanted programs were found
     23 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     24 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

qigang

31/8

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.PopHot.hp
病毒： Trojan.Win32.Undef.cmv   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.30

Graybird

The file 'A0070518.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.Agent.bdr.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'A0070483.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.Agent.bdr.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'A0070504.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.Agent.bdr.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

yitp

全部启发？

傻猪猪米走鸡

2008-2-5 22:56:40        Kernel        File  'E:\virus\infected1.zip' was sent to ESET for analysis.

ALEXBLAIR

deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0070483.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0070504.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0070518.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071509.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071541.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071584.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071585.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071674.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bdr        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0071713.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0077785.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0078791.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0081806.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0081817.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0081832.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0081869.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0082876.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0082887.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0083880.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0084887.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0084898.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0084909.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0084920.dll
deleted: Trojan program Trojan-Spy.Win32.Agent.bed        File: F:\ZHANGQIUREN\DESKTOP\DESKTOP\A0084953.dll
卡巴留下一个

wangjay1980

Hello,

A0071521.exe_

This file is corrupted.

A0088114.dll - Trojan-Downloader.Win32.Delf.enc,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.