next 3

qianwenxiang

挪威的冬天

今天第 n 个沙发

信息        2008-05-09  23:08:36        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-05-09  23:08:36        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件4个                       
信息        2008-05-09  23:08:36        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-05-09  23:08:36        D:\Desktop\3.rar\SecureInstall_LOFS020701Inst.exe        Win32.Adware.WhenU.a.101376        跳过，未处理

wangjay1980

KL

Kitman

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.rar'
C:\Documents and Settings\Administrator\桌面\3.rar
  [0] Archive type: RAR
  --> e82996b7-e0a6-4c38-9a3e-c5e6709aedd8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> install_cb.exe
      [DETECTION] Contains detection pattern of the dropper DR/Vapsup.avw.11
  --> SecureInstall_LOFS020701Inst.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Whenu.A.9
      [NOTE]      A backup was created as '489669f0.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!

qigang

Trojan.DL.Win32.QQHelper.bcy
Trojan.DL.Win32.QQHelper.bdf
Trojan.DL.Win32.Mnless.zfu

hj5abc

解 ...

Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\3.rar\e82996b7-e0a6-4c38-9a3e-c5e6709aedd8.exe" file.  

Sign of "Win32:Vapsup-CE [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\edfqvrw.dll" file.  
Sign of "Win32:Vapsup-CH [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\afxlspw.dll" file.  
Sign of "Win32:Vapsup-CM [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\dwrmntsdrt.dll" file.  
Sign of "Win32:Vapsup-BQ [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\efnt.exe" file.  
Sign of "Win32:Vapsup-B [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\bfrgnos.dll" file.  
Sign of "Win32:Vapsup-CK [Adw]" has been found in "F:\3.rar\install_cb.exe\$1\frplprg.exe" file.  

Sign of "Win32:Adware-gen [Adw]" has been found in "F:\3.rar\SecureInstall_LOFS020701Inst.exe\VVSN.exe" file.  

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:e82996b7-e0a6-4c38-9a3e-c5e6709aedd8.exe <- Downloader.Zlob.Lch : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:edfqvrw.dll <- Adware.Vapsup.Ats : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:afxlspw.dll <- Variant:Adware.Agent.Bn : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:dwrmntsdrt.dll <- Adware.Vapsup.Ats : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:efnt.exe <- Adware.Vapsup.Ats : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:bfrgnos.dll <- Adware.Vapsup.Aul : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:install_cb.exe<NSIS>:frplprg.exe <- Adware.Vapsup.Ats : No action
C:\Documents and Settings\All Users\Documents\Test\3.rar<RAR>:SecureInstall_LOFS020701Inst.exe<DLLRES>:VVSNCAB0.cab<CAB>:VVSN.exe <- Adware.Whenu.A19 : No action



Scanned objects : 15

Infected objects : 8

allinwonderi

TO Frisk

微点第一个不认识。。

但是nab拦截了

好强大。。。

Palkia

在 C:\Documents and Settings\Administrator\桌面\3.rar->install_cb.exe->$1\efnt.exe 中发现 Adware/Agent.gen 病毒, 已删除