25x

qianwenxiang

The EQs

C:\Documents and Settings\Don johnson\桌面\pack\AlbumdeFotos.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\pack\amorecarinho.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\pack\cartao_voxcard.exe - a variant of Win32/TrojanDownloader.Banload.BIW trojan
C:\Documents and Settings\Don johnson\桌面\pack\findx.exe - a variant of Win32/Spy.Bancos.ZE trojan
C:\Documents and Settings\Don johnson\桌面\pack\ftpdll.dll - a variant of Win32/PSW.Agent.NHG trojan
C:\Documents and Settings\Don johnson\桌面\pack\gr.dll - probably a variant of Win32/PSW.Agent.NHG trojan
C:\Documents and Settings\Don johnson\桌面\pack\inetin.exe - Win32/AutoRun.JH worm
C:\Documents and Settings\Don johnson\桌面\pack\Mensagem23.exe - a variant of Win32/Spy.Bancos.ZE trojan
C:\Documents and Settings\Don johnson\桌面\pack\Mess.exe - Win32/AutoRun.JH worm
C:\Documents and Settings\Don johnson\桌面\pack\msmnsgr.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\pack\pula_cerca.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\pack\QdrPack9.exe - probably a variant of Win32/Adware.Agent application
C:\Documents and Settings\Don johnson\桌面\pack\qufapy.dll - Win32/Adware.ZQuest application
C:\Documents and Settings\Don johnson\桌面\pack\rdshost32.exe - a variant of Win32/Spy.Bancos.ZE trojan
C:\Documents and Settings\Don johnson\桌面\pack\RESSDT.exe - Win32/VB.NMG trojan
C:\Documents and Settings\Don johnson\桌面\pack\RESSDT.sys - Win32/VB.NMG trojan
C:\Documents and Settings\Don johnson\桌面\pack\svcdll.exe - Win32/TrojanDownloader.Agent.AUI trojan
C:\Documents and Settings\Don johnson\桌面\pack\sysave.exe - Win32/TrojanDownloader.Small.OAL trojan
C:\Documents and Settings\Don johnson\桌面\pack\tourupd.exe » NSIS » QdrPack14.exe - error reading archive
C:\Documents and Settings\Don johnson\桌面\pack\win32dlll.exe - a variant of Win32/Spy.Bancos.ZE trojan

醉一生爱妍

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-03-29
        更新日期 2008-03-15

扫描目标 d:\我的文档\桌面\pack[1].part2.rar

扫描目标 d:\我的文档\桌面\pack[1].part1.rar

开始时间 2008-03-15 11:20:12

在 d:\我的文档\桌面\pack[1].part1.rar->SysWFGwd2.dll 中发现 VirTool.MaskPE.f 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part2.rar->gr.dll 中发现 Backdoor/Agent.bbei 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->amorecarinho.exe 中发现 TrojanDownloader.Banload.dip 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->AlbumdeFotos.exe 中发现 TrojanDownloader.Banload.dip 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->cartao_voxcard.exe 中发现 TrojanDownloader.Banload.ji 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->pula_cerca.exe 中发现 TrojanDownloader.Banload.bl 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->Mensagem23.exe 中发现 TrojanSpy.Bancos.ge 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part2.rar->msmnsgr.exe 中发现 TrojanDownloader.VB.euw 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part2.rar->qufapy.dll 中发现 Trojan/BHO.aqq 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part2.rar->sysave.exe 中发现 TrojanDownloader.Agent.adfq 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->rdshost32.exe 中发现 TrojanSpy.Bancos.ge 病毒, 已删除
在 d:\我的文档\桌面\pack[1].part1.rar->svcdll.exe 中发现 Rootkit.Vanti.ejn 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :26                                  病毒体 :12        
                   删除 :12                                    解毒 :0         
    扫描速度(千字节/秒) :365                               扫描时间 :00:00:16
    扫描文件速度(个/秒) :1

    - - - - -   - - - - - - -   - - - - - - -    - - - - - - -    - - - - - - -     - - - - - - -   - - - - -

Starting the file scan:

Begin scan in 'D:\新建文件夹'
D:\新建文件夹\SysWFGwd2.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
      [INFO]      The file was deleted!
D:\新建文件夹\amorecarinho.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.TI.37
      [INFO]      The file was deleted!
D:\新建文件夹\AlbumdeFotos.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.TI.37
      [INFO]      The file was deleted!
D:\新建文件夹\cartao_voxcard.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\pula_cerca.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.bun
      [INFO]      The file was deleted!
D:\新建文件夹\Mensagem23.exe
      [DETECTION] Is the Trojan horse TR/Spy.Banker.CIL
      [INFO]      The file was deleted!
D:\新建文件夹\findx.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\rdshost32.exe
      [DETECTION] Is the Trojan horse TR/Spy.Banker.CIL
      [INFO]      The file was deleted!
D:\新建文件夹\svcdll.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banlo.akc.1
      [INFO]      The file was deleted!
D:\新建文件夹\win32dlll.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\ftpdll.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Small.ths
      [INFO]      The file was deleted!
D:\新建文件夹\gr.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Small.ivx
      [INFO]      The file was deleted!
D:\新建文件夹\BndDrive4.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdBand.A
      [INFO]      The file was deleted!
D:\新建文件夹\inetin.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.dbm
      [INFO]      The file was deleted!
D:\新建文件夹\ISMModule4.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Antica.A
      [INFO]      The file was deleted!
D:\新建文件夹\Mess.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dgw
      [INFO]      The file was deleted!
D:\新建文件夹\msmnsgr.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\QdrPack14.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/SpeedMonitor
      [INFO]      The file was deleted!
D:\新建文件夹\QdrPack9.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Trarch.A
      [INFO]      The file was deleted!
D:\新建文件夹\qufapy.dll
      [DETECTION] Is the Trojan horse TR/BHO.AB.6
      [INFO]      The file was deleted!
D:\新建文件夹\RESSDT.exe
      [DETECTION] Is the Trojan horse TR/Agent.lxc
      [INFO]      The file was deleted!
D:\新建文件夹\RESSDT.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.LO
      [INFO]      The file was deleted!
D:\新建文件夹\sysave.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '48614f85.qua'!


End of the scan: 2008年3月29日  22:15
Used time: 00:08 min

The scan has been done completely.

      1 Scanning directories
     25 Files were scanned
     22 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     22 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

爱过昙花

FS 23只

The file 'tourupd.exe' has been determined to be 'UNDER ANALYSIS'.
The file 'ggl.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

红心王子

时间        处理结果        木马名称        木马进程名        木马文件创建者
2008-03-29 22:18:16        处理成功        Trojan-Downloader.Win32.Agent.rll        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SYSAVE.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        Trojan-Downloader.Win32.Agent.quj        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\RESSDT.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        Trojan.Win32.BHO.gb        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\QUFAPY.DLL        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        AdWare.Win32.Agent.bos        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\QDRPACK9.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        Trojan-Downloader.Win32.VB.eig        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\MESS.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        AdWare.Win32.Agent.bpk        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\ISMMODULE4.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        Worm.Win32.AutoRun.bfa        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\INETIN.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:16        处理成功        AdWare.Win32.AdBand.a        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\BNDDRIVE4.DLL        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:15        处理成功        Trojan-Downloader.Win32.Small.nsl        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\FTPDLL.DLL        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:15        处理成功        Trojan-Spy.Win32.Bancos.awp        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\RDSHOST32.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:15        处理成功        Trojan-Spy.Win32.Bancos.awp        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\MENSAGEM23.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:15        处理成功        Trojan-Downloader.Win32.Banload.dke        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\PULA_CERCA.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-03-29 22:18:15        处理成功        Trojan-Downloader.Win32.Banload.dna        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\CARTAO_VOXCARD.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE

wangjay1980

to kl

wangjay1980

23

detected: Trojan program Trojan-Downloader.Win32.Agent.mgj        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\SysWFGwd2.dll
detected: Trojan program Trojan-Downloader.Win32.Banload.ti        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\amorecarinho.exe//Cryptocrack
detected: Trojan program Trojan-Downloader.Win32.Banload.ti        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\AlbumdeFotos.exe//Cryptocrack
detected: Trojan program Trojan-Downloader.Win32.Banload.aqo        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\cartao_voxcard.exe
detected: Trojan program Trojan-Downloader.Win32.Banload.bun        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\pula_cerca.exe//PE_Patch.UltraProtect//UltraProtect
detected: Trojan program Trojan-Spy.Win32.Bancos.zm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\Mensagem23.exe//PE_Patch//UPack
detected: Trojan program Trojan-Spy.Win32.Bancos.zm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\findx.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Spy.Win32.Bancos.zm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\rdshost32.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.aui        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\svcdll.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Spy.Win32.Bancos.zm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\win32dlll.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Downloader.Win32.Small.ths        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\ftpdll.dll
detected: Trojan program Trojan-Downloader.Win32.Small.ivx        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\gr.dll
detected: adware not-a-virus:AdWare.Win32.AdBand.c        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\BndDrive4.dll
detected: virus Worm.Win32.AutoRun.dbm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\inetin.exe//FSG
detected: adware not-a-virus:AdWare.Win32.Agent.jn        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\ISMModule4.exe
detected: Trojan program Trojan-Downloader.Win32.VB.dgw        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\Mess.exe//FSG
detected: Trojan program Trojan-Downloader.Win32.VB.aro        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\msmnsgr.exe//PE_Patch//UPack
detected: adware not-a-virus:AdWare.Win32.AdBand.n        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\QdrPack14.exe
detected: adware not-a-virus:AdWare.Win32.Agent.vu        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\QdrPack9.exe
detected: Trojan program Trojan.Win32.BHO.ab        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\qufapy.dll
detected: Trojan program Trojan-Downloader.Win32.Agent.lrm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\RESSDT.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.lrm        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\RESSDT.sys
detected: Trojan program Trojan-Downloader.Win32.Agent.llv        File: C:\Documents and Settings\Owner\×ÀÃæ\pack\sysave.exe

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Banload.ti
病毒： AdWare.Win32.AdBand.c   
病毒： Trojan.DL.Win32.Banload.aqo
病毒： Trojan.Spy.Bancos.dsr   
病毒： Trojan.Spy.Bancos.fuj   
病毒： Trojan.DL.VB.nbm         
病毒： Trojan.DL.Banload.mpo   
病毒： AdWare.Win32.Agent.vu   
病毒： Trojan.Win32.BHO.ab      
病毒： Trojan.DL.Banload.kih   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.52