嘿嘿,但它是毒,只是红伞查出10来

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Zlob.gbp
病毒： Trojan.DL.Win32.Zlob.gbo
病毒： Trojan.Win32.Undef.int   
病毒： Trojan.Win32.Vapsup.enb  
病毒： Trojan.Win32.Undef.gub   
病毒： Trojan.Win32.Undef.guc   
病毒： Trojan.Win32.Undef.inu   
病毒： Trojan.Win32.VUNDO.bfz   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.50.52

醉一生爱妍

已发现病毒数量: 8

sam.to

原帖由 qigang 于 2008-6-28 20:00 发表
帮你上传！

有勞

sam.to

已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fmn        檔案: C:\Documents and Settings\kato9096\桌面\10\elsq.exe2
已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fmo        檔案: C:\Documents and Settings\kato9096\桌面\10\gktxaspm.dll2
已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fmq        檔案: C:\Documents and Settings\kato9096\桌面\10\gnowmebk.dll2
已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fmr        檔案: C:\Documents and Settings\kato9096\桌面\10\mdtgkswr.exe3
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.rux        檔案: C:\Documents and Settings\kato9096\桌面\10\msprint.exe2//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fms        檔案: C:\Documents and Settings\kato9096\桌面\10\nldfmtapnvb.dll2
已刪除: 特洛伊木馬程式 Trojan.Win32.Vapsup.fmt        檔案: C:\Documents and Settings\kato9096\桌面\10\pxgdslro.d2ll
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.ConHook.sm        檔案: C:\Documents and Settings\kato9096\桌面\10\vtUKBqoo.dl2l

8，这包中只有８个，沒有不报！

[ 本帖最后由 kato9096 于 2008-6-28 20:11 编辑 ]

sam.to

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\10'
C:\Documents and Settings\kato9096\桌面\10\elsq.exe2
      [DETECTION] Is the Trojan horse TR/Vapsup.fmn
      [NOTE]      The file was deleted!
C:\Documents and Settings\kato9096\桌面\10\gnowmebk.dll2
      [DETECTION] Is the Trojan horse TR/Vapsup.fmq
      [NOTE]      The file was deleted!
C:\Documents and Settings\kato9096\桌面\10\mdtgkswr.exe3
      [DETECTION] Is the Trojan horse TR/Vapsup.fmr
      [NOTE]      The file was deleted!
C:\Documents and Settings\kato9096\桌面\10\msprint.exe2
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Agent.qpa
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Agent.qht
      [DETECTION] Is the Trojan horse TR/BHO.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\kato9096\桌面\10\vtUKBqoo.dl2l
      [DETECTION] Is the Trojan horse TR/Dldr.ConHook.SM
      [NOTE]      The file was deleted!


End of the scan: Saturday,28 June 2008  20:11
Used time: 00:07 min

The scan has been done completely.

      1 Scanning directories
      8 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes


有３个不报，已上报．


Filename         Result
gktxaspm.dll2          MALWARE

The file 'gktxaspm.dll2' has been determined to be 'MALWARE'. This malware is detected by a special detection routine from the engine module.
Filename         Result
nldfmtapnvb.dll2          MALWARE

The file 'nldfmtapnvb.dll2' has been determined to be 'MALWARE'. This malware is detected by a special detection routine from the engine module.
Filename         Result
pxgdslro.d2ll          MALWARE

The file 'pxgdslro.d2ll' has been determined to be 'MALWARE'. Detection is added to our virus definition file (VDF) starting with version 7.00.00.112. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: ADSPY/Agent.PB.

[ 本帖最后由 kato9096 于 2008-6-28 20:13 编辑 ]

allinwonderi

[Found possible virus]         <W32/Adware-Vapsup!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\10.rar->gktxaspm.dll
[Found security risk]         <W32/Agent.Z.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\10.rar->msprint.exe
[Found possible virus]         <W32/Adware-RegBHO-based.1!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\10.rar->nldfmtapnvb.dll
[Found possible virus]         <W32/Adware-Vapsup!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\10.rar->pxgdslro.dll
[Found downloader]         <W32/Downldr2.CAJP (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\10.rar->vtUKBqoo.dll

---------------------------------------------------------------------
Scan ended:        2008-6-28, 21:05:26
Duration:        0:00:05

Scan result:

Scanned files:                 6
Infected objects:         5
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\10.rar<RAR>:msprint.exe<PECompact2>:msprint.exe<DLLRES>:res1.exe<PECompact2>:res1.exe <- Downloader.Agent.Qht : No action
C:\Documents and Settings\All Users\Documents\Test\10.rar<RAR>:msprint.exe<PECompact2>:msprint.exe<DLLRES>:res2.exe<UPX>:res2.exe<DLLRES>:res0.exe<UPX>:res0.exe <- Adware.E404.bb : No action



Scanned objects : 17

Infected objects : 2

lan

C:\Documents and Settings\lan\桌面\10.rar <elsq.exe> - Win32/Pripecs!generic 特洛伊木马。已隔离。
C:\Documents and Settings\lan\桌面\10.rar <gktxaspm.dll> - Win32/Pripecs!generic 特洛伊木马。已隔离。
C:\Documents and Settings\lan\桌面\10.rar <gnowmebk.dll> - Win32/Pripecs.AGT 特洛伊木马。已隔离。
C:\Documents and Settings\lan\桌面\10.rar <mdtgkswr.exe> - Win32/Pripecs!generic 特洛伊木马。已隔离。
C:\Documents and Settings\lan\桌面\10.rar <nldfmtapnvb.dll> - Win32/Pripecs!generic 特洛伊木马。已隔离。
C:\Documents and Settings\lan\桌面\10.rar <pxgdslro.dll> - Win32/Pripecs!generic 特洛伊木马。已隔离。

已扫描的文件数: 9
受感染的文件数: 6

starv6

不见样本怎么测试