Trojan-Downloader.Win32.Small.ivd

sam.to

卡巴：
Trojan-Downloader.Win32.Small.ivd

solcroft

woai_jolin

===================================================================================================
On-demand scanner 7.0.0.10

NSE revision 5.91.10
nvcbin.def revision 5.90.00 of 2008/03/07 16:10:27 (1356064 variants)
nvcmacro.def revision 5.90.00 of 2008/02/04 16:47:24 (20430 variants)
Total number of variants: 1376494
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files matching: G:\v\explorer.rar
        3 ms G:\v\explorer.rar : explorer\explorer.exe2                   Security Risk W32/Suspicious_U.gen ()
- File G:\v\explorer.rar quarantined.
        1 ms G:\v\explorer.rar                                          
        2 ms G:\v\explorer.rar:Zone.Identifier                           

===================================================================================================

The scanning started: 2008/03/09 01:21:04
               ended: 2008/03/09 01:21:04
Logged on as        : Jason
on hostname         : JASON-PC

Scanning results:
   Total number of files found..............................:       3
   Number of files scanned..................................:       3
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2007 Norman ASA.

微点卫士

木马名称:Trojan.Win32.KillAV.ji

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\5.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXPLORER\EXPLORER.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ALL USERS\「开始」菜单\程序\启动\EXPLORER.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\5.SYS
是否删除木马程序及其衍生物?

llgiggs

C:\Documents and Settings\Administrator\桌面\explorer\explorer.exe2
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Mnless.zbh

用户来源：互联网

软件版本：20.34.52

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.zbh

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.34.60

挪威的冬天

信息 1984-03-09  17:09:25 您此次查毒清除了1个病毒   
信息 1984-03-09  17:09:25 您此次查毒共查出1个病毒以及危险代码   
信息 1984-03-09  17:09:25 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个   
信息 1984-03-09  17:09:25 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒   
病毒 1984-03-09  17:09:25 D:\Desktop\explorer.rar\explorer\explorer.exe2 Win32.Troj.OnlineGamesT.90112 清除成功

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-9, 2:48

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\explorer

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-9, 17:17:27
---------------------------------------------------------------------

[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\Administrator\桌面\explorer\explorer.exe2->(UPack)
[Quarantined]        C:\Documents and Settings\Administrator\桌面\explorer\explorer.exe2->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-3-9, 17:17:39
Duration:        0:00:12

Scan result:

Scanned files:                 1
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

Palkia

C:\Documents and Settings\Administrator\桌面\explorer.rar>>explorer\explorer.exe2        TrojanDownloader.Mnless.zbh.wyxe        木马        还未处理