8X

电影结束了

生成物

IllusionWing

...倒5个

woai_jolin

Scan Log
Version of virus signature database: 3233 (20080701)
Date: 2008-7-2  Time: 11:32:16
Scanned disks, folders and files: G:\v\tt.zip
G:\v\tt.zip » ZIP » 1.exe - is OK
G:\v\tt.zip » ZIP » 2.exe - Win32/Nuwar worm
G:\v\tt.zip » ZIP » 3.exe - Win32/TrojanDownloader.Tiny.NDI trojan
G:\v\tt.zip » ZIP » 4.exe - Win32/Nulprot trojan
G:\v\tt.zip » ZIP » 5.exe - Win32/Nuwar worm
G:\v\tt.zip » ZIP » 6.exe - Win32/Nuwar worm
G:\v\tt.zip » ZIP » 7.exe - Win32/Nuwar worm
G:\v\tt.zip » ZIP » PCIDump.sys - Win32/Nulprot.A worm
G:\v\tt.zip:Zone.Identifier - is OK
Number of scanned objects: 9
Number of threats found: 7
Number of cleaned objects: 0
Time of completion: 11:32:16  Total scanning time: 0 sec (00:00:00)

barbara

nod32 2.7剩下 1.exe

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.93.01
nvcbin.def revision 5.93.00 of 2008/06/26 16:35:31 (1804179 variants)
nvcmacro.def revision 5.93.00 of 2008/06/26 13:48:30 (20430 variants)
Total number of variants: 1824609
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD31E.tmp"
===================================================================================================


*** Possible virus found ***
*** G:\v\tt.zip : 3.exe -> Trojan W32/Tibs.BPSQ ()
*** G:\v\tt.zip : 7.exe -> Trojan Suspicious_F.gen ()

===================================================================================================

The scanning started: 2008/07/02 11:32:49
               ended: 2008/07/02 11:32:53
Logged on as        : Administrator
on hostname         : 3A8AD2D60C484EE

Scanning results:
   Total number of files found..............................:      10
   Number of files scanned..................................:      10
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       2

Copyright (c) 1993-2007 Norman ASA.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\tt.zip'
C:\Documents and Settings\morgan\My Documents\
  tt.zip
    [0] Archive type: ZIP
    --> 1.exe
    --> 2.exe
        [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Tibs.WW
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> 6.exe
        [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> PCIDump.sys
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
  tt.zip:Zone.Identifier


End of the scan: 2008年7月1日  20:33
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

woai_jolin

02:07:2008 11:34:00 SEARCHTASK "USER_DEFINED" started...
scan item: G:\v\7.exe
scan item: G:\v\PCIDump.sys
scan item: G:\v\1.exe
scan item: G:\v\2.exe
scan item: G:\v\3.exe
scan item: G:\v\4.exe
scan item: G:\v\5.exe
scan item: G:\v\6.exe
File scanned: G:\v\7.exe - SIGNATURE FOUND "Trojan.Crypt.XPACK"
File scanned: G:\v\2.exe - SIGNATURE FOUND "Worm.Zhelatin"
File scanned: G:\v\4.exe - SIGNATURE FOUND "Trojan.Peed.JNB"
File scanned: G:\v\6.exe - SIGNATURE FOUND "Worm.Zhelatin"
02:07:2008 11:34:01 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 8
Virus found: 4
----------------------------------------------------

zwl2828

怎么都是这种病毒

ch00962610

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/7/2
开始时间： 2008/7/2 11:36
引擎： 引擎A (AVK 18.4348), 引擎B (AVKB 18.331)
启发式： 开启
档案文件： 开启
系统区域： 开启

检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\祝俊杰\桌面\新建文件夹\

对象： 2.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Packed.Win32.Tibs.jf (引擎A)
对象： 3.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Trojan-Downloader.Win32.Tibs.ww (引擎A)
对象： 4.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Packed.Win32.Tibs.jf (引擎A)
对象： 5.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Packed.Win32.Tibs.jf (引擎A)
对象： 6.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Packed.Win32.Tibs.jf (引擎A)
对象： 7.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹
        状态： 移动文件到隔离区
        病毒： Packed.Win32.Tibs.jf (引擎A)

检测执行时间： 2008/7/2 11:36
    8个文件已检测
    6个受感染文件

Palkia

病毒        2008-07-02  12:06:54        C:\Documents and Settings\Administrator\桌面\tt.zip\3.exe        Win32.TrojDownloader.Tibs.ww.5120        清除成功