下载者 下的马

tanlimo

ESS扫描日志
病毒库版本: 2958 (20080318)
日期: 2008-3-19  时间: 12:52:48
已扫描的磁盘、文件夹和文件: G:\Autorun[1]\Autorun\Autorun.rar
G:\Autorun[1]\Autorun\Autorun.rar > RAR > 2.exe - Win32/StartPage.NHW 特洛伊木马 的变种
G:\Autorun[1]\Autorun\Autorun.rar > RAR > 4.exe > NSIS > InsShell.exe - Win32/Adware.Boran 应用程序
G:\Autorun[1]\Autorun\Autorun.rar > RAR > 6.exe > NSIS > 286.exe - 读取压缩文件时出错
G:\Autorun[1]\Autorun\Autorun.rar > RAR > cool.exe - 可能是 Win32/TrojanDownloader.Delf.OBY 特洛伊木马 的变种
G:\Autorun[1]\Autorun\Autorun.rar > RAR > mselk.sys - Win32/PSW.OnLineGames.MYG 特洛伊木马
G:\Autorun[1]\Autorun\Autorun.rar > RAR > msyecp.sys - Win32/PSW.OnLineGames.MYG 特洛伊木马
G:\Autorun[1]\Autorun\Autorun.rar > RAR > tempaq - Win32/TrojanDownloader.QQHelper.NDW 特洛伊木马 的变种
已扫描的对象数: 17
发现的威胁数: 6
完成时间: 12:52:53  总扫描时间: 5 秒 (00:00:05)

啊弥陀佛

微点砍掉

sjducker

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.php?aid=221900
Information:  Is the Trojan horse TR/Crypt.XPACK.Gen  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.10.0, AVE 8.1.0.19, VDF 7.0.3.49

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\autorun.part1.rar<RAR>:cool.exe <- Worm.Autorun.Czx : No action
C:\Documents and Settings\All Users\Documents\Test\autorun.part1.rar<RAR>:2.exe <- Trojan.Downloader.Agent.Lbb : No action
C:\Documents and Settings\All Users\Documents\Test\autorun.part1.rar<RAR>:4.exe<NSIS>:InsShell.exe<DLLRES>:res2.exe <- Trojan.Elitebar.F : No action
C:\Documents and Settings\All Users\Documents\Test\autorun.part1.rar<RAR>:4.exe<NSIS>:InsShell.exe<DLLRES>:res4.exe <- Trojan.Elitebar.F : No action
C:\Documents and Settings\All Users\Documents\Test\autorun.part2.rar<RAR>:msyecp.sys <- Trojan.Psw.Onlinegames.Rji : No action
C:\Documents and Settings\All Users\Documents\Test\autorun.part2.rar<RAR>:syschc.exe <- Trojan.Downloader.Agent.Lgo : No action



Scanned objects : 20

Infected objects : 6

allinwonderi

Scan started: 2008-3-19, 22:19:45
--------------------------------------------------------------------
[Found possible virus]         <W32/CrazyCrunch-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\autorun.part1.rar->Autorun\2.exe->(UPack)
[Found security risk]         <W32/OnlineGames.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\autorun.part2.rar->Autorun\msyecp.sys
[Found security risk]         <W32/OnlineGames.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\autorun.part2.rar->Autorun\mselk.sys
[Found downloader]         <W32/Downloader.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\autorun.part2.rar->Autorun\3.exe
---------------------------------------------------------------------
Scan ended:        2008-3-19, 22:19:48
Duration:        0:00:03

Scan result:

Scanned files:                 7
Infected objects:         4
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.GameHack.GEN
病毒： Trojan.DL.Win32.Mnless.zp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.22