5个

显示全部楼层 · 发表于 2008-4-7 12:30:37

木马名称:Trojan-Dropper.Win32.Agent.hde
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\64.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Pakes.bgh
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\INST250.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\BHO.EXE
木马程序生成以下文件:
1) C:\AUTOEX.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\EAGLE.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\SPOOLS.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\CFTMON.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-4-7 12:33:21

mark 一下

信息 2008-04-07  12:33:04 您此次查毒共查出2个病毒以及危险代码
信息 2008-04-07  12:33:04 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个
信息 2008-04-07  12:33:04 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-04-07  12:33:04 D:\Desktop\×àÃæ.zip\bho.exe Win32.Adware.BHO.569344 跳过，未处理
病毒 2008-04-07  12:33:01 D:\Desktop\×àÃæ.zip\64.exe Win32.VirInstaller.Agent.96499 清除成功

显示全部楼层 · 发表于 2008-4-7 12:40:11

在 C:\Documents and Settings\Administrator\桌面\桌面.zip->64.exe 中发现 TrojanDropper.Agent.uh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\桌面.zip->eagle.exe 中发现 Worm/Socks.n 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\桌面.zip->inst250.exe 中发现 Trojan/Pakes.asv 病毒, 已删除

显示全部楼层 · 发表于 2008-4-7 13:06:43

C:\Documents and Settings\Administrator\桌面\桌面.zip>>0304.exe Trojan.Inject.apd.xsec 木马还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>64.exe TrojanDropper.Agent.NIK.cgob 木马还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>bho.exe Adware.BHO.ajs.ndkf 广告程序还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>eagle.exe Worm.Socks.au.tuig 病毒还未处理
C:\Documents and Settings\Administrator\桌面\桌面.zip>>inst250.exe Trojan.Pakes.cjt.xxpx 木马还未处理

显示全部楼层 · 发表于 2008-4-7 19:48:07

rising20.39.01未杀！

显示全部楼层 · 发表于 2008-4-7 21:57:14

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:0304.exe <- Trojan.Inject.Apd : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:64.exe <- Trojan.Dropper.Agent.Fcu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:bho.exe<UPX>:bho.exe <- Adware.Bho.Ajs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:bho.exe<UPX>:bho.exe<DLLRES>:FILE10.exe <- Adware.Bho.Ajq : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:eagle.exe <- Worm.Socks.Au : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.zip<ZIP>:inst250.exe <- Trojan.Pakes.Cjt : No action

Scanned objects : 10

Infected objects : 6

显示全部楼层 · 发表于 2008-4-7 21:58:01

[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->0304.exe->rsrcPE
[Found Trojan] <W32/Trojan2.AFTK (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->64.exe
[Found Trojan] <W32/Trojan2.AIYN (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\桌面.zip->inst250.exe

---------------------------------------------------------------------
Scan ended: 2008-4-7, 21:57:54
Duration: 0:00:04

Scan result:

Scanned files:    6
Infected objects:    3
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 5个

本帖子中包含更多资源

kv

11/0