今日的31个

mofunzone

质量下滑？
antivir及格了
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\collection'
C:\Documents and Settings\morgan\My Documents\collection\
  9kgen1_up.int
  9kgen1_up.int:Zone.Identifier
  9kgen_up.int
  9kgen_up.int:Zone.Identifier
  atfxqogp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
  boqnrwdmmfv.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
  c-setup.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48b00acf.qua'!
  crack.exe
  ctfmona.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [NOTE]      The file was deleted!
  egao.exe
  keygen.exe
  MediaTubeCodec_ver1.971.45.exe
  MediaTubeCodec_ver1.971.45.exe:Zone.Identifier
  mooncodec1345.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HL
      [NOTE]      The file was deleted!
  mooncodec4049.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HM
      [NOTE]      The file was deleted!
  mooncodec4192.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HN
      [NOTE]      The file was deleted!
  msprint.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.Y
      [NOTE]      The file was deleted!
  nnnnkhET.dll
  notepad.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.HM
      [NOTE]      The file was deleted!
  notepad1.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.abv
      [NOTE]      The file was deleted!
  notepad3.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.abv
      [NOTE]      The file was deleted!
  nyps4.exe
  pmnnOGXO.dll
  setup1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  sn_pkz.int
  sn_pkz.int:Zone.Identifier
  sn_pkz1.int
  sn_pkz1.int:Zone.Identifier
  ssqQkjhE.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
  vltdfabw.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [NOTE]      The file was deleted!
  vregfwlx.dll
  winhab32.dll
  xmpstean.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月28日  00:32
Used time: 00:11 min

The scan has been done completely.

      1 Scanning directories
     36 Files were scanned
     17 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     17 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     19 Files not concerned
      0 Archives were scanned
      0 Warnings
     18 Notes

yunhan123

信息        2008-05-28  15:40:00        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-05-28  15:40:00        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件35个                       
信息        2008-05-28  15:40:00        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-28  15:40:00        C:\Documents and Settings\Administrator\桌面\collection.rar\collection\collection\ctfmona.exe        Win32.Troj.Agent.96256        跳过，未处理       
病毒        2008-05-28  15:40:00        C:\Documents and Settings\Administrator\桌面\collection.rar\collection\collection\c-setup.exe        Win32.TrojDownloader.Delf.204800        跳过，未处理

挪威的冬天

标记一下

信息        2008-05-28  15:44:50        您此次查毒隔离了2个文件                       
信息        2008-05-28  15:44:50        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-05-28  15:44:50        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件34个                       
信息        2008-05-28  15:44:50        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-28  15:44:50        D:\Desktop\collection\collection\ctfmona.exe        Win32.Troj.Agent.96256        隔离成功       
病毒        2008-05-28  15:44:50        D:\Desktop\collection\collection\c-setup.exe        Win32.TrojDownloader.Delf.204800        隔离成功

25030427  9kgen1_up.int  459 KB  MALWARE
25030428  9kgen_up.int  430.5 KB  MALWARE
25030289  crack.exe  43.5 KB  MALWARE
25030436  c-setup.exe  89.88 KB  MALWARE
25030429  egao.exe  156 KB  MALWARE
25030275  keygen.exe  93 KB  MALWARE
25030067  MediaTubeCodec_ve...45.exe  118.5 KB  MALWARE
25029987  pmnnOGXO.dll  33.63 KB  MALWARE
25030369  nyps4.exe  43.38 KB  MALWARE
25030431  sn_pkz1.int  425.5 KB  MALWARE
25030430  sn_pkz.int  467 KB  MALWARE
25030432  vregfwlx.dll  320 KB  MALWARE
25030433  winhab32.dll  31.5 KB  MALWARE

25029987  nnnnkhET.dll  33.63 KB  MALWARE

[ 本帖最后由 Exia 于 2008-5-28 21:17 编辑 ]

csliss

检测到
------
状态        对象
----        ----
已删除：木马程序 Trojan-Downloader.Win32.Zlob.nyy        文件: D:\病毒樣本\collection.rar/collection\collection\MediaTubeCodec_ver1.971.45.exe
已删除：木马程序 Trojan-Downloader.Win32.Delf.gki        文件: D:\病毒樣本\collection.rar/collection\collection\c-setup.exe//ASPack
已删除：木马程序 Trojan.Win32.Agent.qnp        文件: D:\病毒樣本\collection.rar/collection\collection\ctfmona.exe
已删除：木马程序 Trojan.Win32.DNSChanger.dlc        文件: D:\病毒樣本\collection.rar/collection\collection\mooncodec1345.exe//data0001
已删除：木马程序 Trojan.Win32.DNSChanger.dja        文件: D:\病毒樣本\collection.rar/collection\collection\mooncodec4049.exe//data0001
已删除：木马程序 Trojan.Win32.DNSChanger.dja        文件: D:\病毒樣本\collection.rar/collection\collection\mooncodec4192.exe//data0001
已删除：木马程序 Trojan-Dropper.Win32.Agent.rzj        文件: D:\病毒樣本\collection.rar/collection\collection\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan.Win32.DNSChanger.dnj        文件: D:\病毒樣本\collection.rar/collection\collection\notepad.exe
已删除：木马程序 Trojan.Win32.DNSChanger.dni        文件: D:\病毒樣本\collection.rar/collection\collection\notepad1.exe
已删除：木马程序 Trojan.Win32.DNSChanger.dni        文件: D:\病毒樣本\collection.rar/collection\collection\notepad3.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.nxz        文件: D:\病毒樣本\collection.rar/collection\collection\setup1.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.nxz        文件: D:\病毒樣本\collection.rar/collection\collection\setup2.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.nxz        文件: D:\病毒樣本\collection.rar/collection\collection\setup3.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.nxz        文件: D:\病毒樣本\collection.rar/collection\collection\setup4.exe

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\CTFMONA.EXE
蠕虫程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\CTFMONA.EXE
是否删除蠕虫程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\KEYGEN.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\YAYAXRPN.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\NYPS4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\HGGWUOMJ.DLL
是否删除木马程序及其衍生物?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\NOTEPAD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\NNNNKHET.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\SETUP2.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\KMQ1.EXE
2) C:\WINDOWS\SYSTEM32\KDBWN.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\SETUP1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\KMQ0.EXE
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\WINHAB32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\SETUP3.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\OD2RS5IV\1014[1].EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\KMQ2.EXE
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\SSQQKJHE.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\COLLECTION[1]\COLLECTION\SETUP4.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\KMQ3.EXE
是否删除木马程序及其衍生物?

sums2001

ESS 3.0 ................... 0

傻猪猪米走鸡

2008-5-28 17:00:23        文件系统实时防护        文件        D:\firefox download\collection\collection\MediaTubeCodec_ver1.971.45.exe        可能是 Win32/Nuwar 蠕虫 的变种        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在被应用程序修改的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

qianwenxiang

又见许多ZLOB
avast 0528-0  Found 12

palfan

这个够伟大的 更加坚定了我无视Nod32的决心

PS.开启发了么？