昨天adware继续..

显示全部楼层 · 发表于 2008-5-31 10:16:29

扫描系统区域...
扫描所选择的目录和文件...
对象: ??????????\100866.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.AAF (BD 引擎)
对象: ??????????\DownLoadPig.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.WSearch.K (BD 引擎)
对象: ??????????\hztk0822.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.CDN (BD 引擎)
对象: ??????????\mUin.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.Wsearch.G (BD 引擎)
对象: ??????????\SearchM.dll
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.Wsearch.A (BD 引擎)
对象: ??????????\setup.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.CDN (BD 引擎)
对象: ??????????\setup1209.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.Wsearch.CD (BD 引擎)
对象: ??????????\zsup.exe
在压缩档案里: F:\u.rar
Status: 已发现病毒
病毒: Adware.Wsearch.D (BD 引擎)
。。
马上用TF运行看看了。。。

显示全部楼层 · 发表于 2008-5-31 10:16:35

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹\100866.exe'
E:\AV\新建文件夹\100866.exe
   [DETECTION] Is the Trojan horse TR/Drop.DMSec.A.6
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\cents80.exe'
Begin scan in 'E:\AV\新建文件夹\DownLoadPig.exe'
E:\AV\新建文件夹\DownLoadPig.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.I.6.A
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\hztk0822.exe'
E:\AV\新建文件夹\hztk0822.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.KW
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\Mouse1.dll'
E:\AV\新建文件夹\Mouse1.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.B
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\mUin.exe'
E:\AV\新建文件夹\mUin.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.G.8
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\SearchM.dll'
E:\AV\新建文件夹\SearchM.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.A.2
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\setup1209.exe'
E:\AV\新建文件夹\setup1209.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.I.6.B
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\setup.exe'
E:\AV\新建文件夹\setup.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.KW
   [NOTE]    The file was deleted!
Begin scan in 'E:\AV\新建文件夹\zsup.exe'
E:\AV\新建文件夹\zsup.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.D.2
   [NOTE]    The file was deleted!

End of the scan: 2008年5月31日  10:18
Used time: 00:20 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   9 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   9 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   9 Notes

显示全部楼层 · 发表于 2008-5-31 10:18:04

漏一个上报
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\新建文件夹'
C:\Documents and Settings\morgan\My Documents\新建文件夹\
  100866.exe
   [DETECTION] Is the Trojan horse TR/Drop.DMSec.A.6
   [NOTE]    The file was deleted!
  cents80.exe
  DownLoadPig.exe
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.I.6.A
   [NOTE]    The file was deleted!
  hztk0822.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.KW
   [NOTE]    The file was deleted!
  Mouse1.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.B
   [NOTE]    The file was deleted!
  mUin.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.G.8
   [NOTE]    The file was deleted!
  SearchM.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.A.2
   [NOTE]    The file was deleted!
  setup.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.KW
   [NOTE]    The file was deleted!
  setup1209.exe
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.I.6.B
   [NOTE]    The file was deleted!
  zsup.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Wsearch.D.2
   [NOTE]    The file was deleted!

End of the scan: 2008年5月30日  19:17
Used time: 00:04 min

The scan has been done completely.

   1 Scanning directories
   10 Files were scanned
   9 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   9 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   0 Archives were scanned
   0 Warnings
   9 Notes

显示全部楼层 · 发表于 2008-5-31 10:18:47

cents80.exe
不是病毒不是广告，不上报了

显示全部楼层 · 发表于 2008-5-31 10:23:21

MCAFEE检测7，AVK扫描9

显示全部楼层 · 发表于 2008-5-31 10:24:53

诺顿7个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Agent.htu
病毒： Adware.Win32.WSearch.i

用户来源：互联网

软件版本：20.46.42

显示全部楼层 · 发表于 2008-5-31 10:42:09

Kaspersky

已检测到: 木马程序 Trojan-Downloader.Win32.Agent.ajf 文件: F:\Virus\u.rar/新建文件夹\100866.exe
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.i 文件: F:\Virus\u.rar/新建文件夹\DownLoadPig.exe//ASPack
已检测到: 木马程序 Trojan-Dropper.Win32.Agent.jcs 文件: F:\Virus\u.rar/新建文件夹\hztk0822.exe
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.b 文件: F:\Virus\u.rar/新建文件夹\Mouse1.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.g 文件: F:\Virus\u.rar/新建文件夹\mUin.exe
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.a 文件: F:\Virus\u.rar/新建文件夹\SearchM.dll
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.g 文件: F:\Virus\u.rar/新建文件夹\setup1209.exe//ASPack
已检测到: 广告软件 not-a-virus:AdWare.Win32.WSearch.d 文件: F:\Virus\u.rar/新建文件夹\zsup.exe

显示全部楼层 · 发表于 2008-5-31 10:51:12

E:\virus\u.rar > RAR > 新建文件夹\100866.exe - Win32/Adware.DM 应用程序
E:\virus\u.rar > RAR > 新建文件夹\cents80.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\DownLoadPig.exe - Win32/Adware.WSearch 应用程序
E:\virus\u.rar > RAR > 新建文件夹\hztk0822.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\Mouse1.dll - Win32/Adware.WSearch 应用程序
E:\virus\u.rar > RAR > 新建文件夹\mUin.exe - Win32/Adware.WSearch 应用程序
E:\virus\u.rar > RAR > 新建文件夹\SearchM.dll - Win32/Adware.WSearch 应用程序
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > Entries.bin - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > Strings.txt - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdn.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnaux.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnctr.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdndet.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdndisp.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnglo.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnhint.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdniehlp.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnins.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnns.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnprev.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnprh.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnprot.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnprot.sys - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnprot.vxd - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnspie.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdntdns.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdntran.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdntran.sys - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdntran.vxd - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnunins.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnup.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > cdnvers.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > client.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > idnconv.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > imaconv.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > imaoe.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > imaol.dll - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > setup.exe - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup.exe > NSIS > src.dat - 正常
E:\virus\u.rar > RAR > 新建文件夹\setup1209.exe - Win32/Adware.WSearch 应用程序
E:\virus\u.rar > RAR > 新建文件夹\zsup.exe - Win32/Adware.WSearch 应用程序

显示全部楼层 · 发表于 2008-5-31 11:19:31

Dr.Web(R)大蜘蛛反病毒扫描程序 v4.44.5 (4.44.5.05200)
[扫描路径] E:\VIRUS\u（5.31）
E:\VIRUS\u（5.31）\新建文件夹\100866.exe 是广告软件 Adware.Dmedia
E:\VIRUS\u（5.31）\新建文件夹\cents80.exe - 确定
>E:\VIRUS\u（5.31）\新建文件夹\DownLoadPig.exe 是广告软件 Adware.Zsearch
E:\VIRUS\u（5.31）\新建文件夹\hztk0822.exe 是广告软件 Adware.Cdn
E:\VIRUS\u（5.31）\新建文件夹\Mouse1.dll 是广告软件 Adware.Msearch
E:\VIRUS\u（5.31）\新建文件夹\mUin.exe 是广告软件 Adware.Zsearch
E:\VIRUS\u（5.31）\新建文件夹\SearchM.dll 是广告软件 Adware.Msearch
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data001 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data002 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data003 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data004 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data005 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data006 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data007 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data008 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data009 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data010 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data011 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data012 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data013 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data014 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data015 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data016 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data017 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data018 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data019 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data020 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data021 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data022 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data023 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data024 - 确定
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data025 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data026 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data027 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data028 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data029 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data030 是广告软件 Adware.Cdn
>>E:\VIRUS\u（5.31）\新建文件夹\setup.exe\data031 - 确定
>E:\VIRUS\u（5.31）\新建文件夹\setup.exe - 发现压缩文件中有被感染的对象
>E:\VIRUS\u（5.31）\新建文件夹\setup1209.exe 是广告软件 Adware.Websearch
E:\VIRUS\u（5.31）\新建文件夹\zsup.exe 是广告软件 Adware.Zsearch

-----------------------------------------------------------------------------
扫描统计
-----------------------------------------------------------------------------
已扫描对象: 42
发现受感染对象: 0
发现受变种感染对象: 0
发现可疑对象: 0
发现广告软件: 30
发现拨号软件: 0
发现恶作剧程序: 0
发现风险程序: 0
发现黑客工具: 0
已修复: 0
已删除: 0
已重命名: 0
已移动: 0
已忽略: 0
扫描速度: 3910 Kb/s
扫描时间: 00:00:01
-----------------------------------------------------------------------------

E:\VIRUS\u（5.31）\新建文件夹\100866.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\DownLoadPig.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\hztk0822.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\Mouse1.dll - 已删除
E:\VIRUS\u（5.31）\新建文件夹\mUin.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\SearchM.dll - 已删除
E:\VIRUS\u（5.31）\新建文件夹\setup.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\setup1209.exe - 已删除
E:\VIRUS\u（5.31）\新建文件夹\zsup.exe - 已删除

=============================================================================
综合统计
=============================================================================
已扫描对象: 42
发现受感染对象: 0
发现受变种感染对象: 0
发现可疑对象: 0
发现广告软件: 30
发现拨号软件: 0
发现恶作剧程序: 0
发现风险程序: 0
发现黑客工具: 0
已修复: 0
已删除: 9
已重命名: 0
已移动: 0
已忽略: 0
扫描速度: 3910 Kb/s
扫描时间: 00:00:01
===========================================================

[病毒样本] 昨天adware继续..

本帖子中包含更多资源

本帖子中包含更多资源

7

9