[病毒样本] X27

显示全部楼层 · 发表于 2008-7-24 22:54:24

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/7/24
开始时间： 2008/7/24 22:53
引擎：引擎A (AVK 18.4619), 引擎B (AVKB 18.362)
启发式：开启
档案文件：开启
系统区域：开启

检测系统区域...
检测以下目录和文件：
检测执行时间： 2008/7/24 22:53
40个文件已检测
37个受感染文件
0个可疑文件被发现

显示全部楼层 · 发表于 2008-7-24 22:59:16

信息 2008-07-24  22:58:35 您此次查毒隔离了18个文件
信息 2008-07-24  22:58:35 您此次查毒清除了4个病毒
信息 2008-07-24  22:58:35 您此次查毒共查出22个病毒以及危险代码
信息 2008-07-24  22:58:35 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件51个
信息 2008-07-24  22:58:35 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

显示全部楼层 · 发表于 2008-7-24 23:32:16

Begin scan in 'C:\Documents and Settings\Administrator\桌面\excllent'
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-10vir
[DETECTION] Is the TR/Dldr.Aqtemp.U Trojan
[NOTE]    A backup was created as '48f1a0d9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-11vir
[DETECTION] Contains recognition pattern of the DR/Drop.Agent.qoa.55 dropper
[NOTE]    A backup was created as '497fc602.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-12vir
[DETECTION] Is the TR/Drop.Nsis.E Trojan
[NOTE]    A backup was created as '48f1a0db.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-13vir
[DETECTION] Contains recognition pattern of the DR/Cinmus.gey.2 dropper
[NOTE]    A backup was created as '497fc604.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-14vir
[DETECTION] Contains recognition pattern of the DR/BHO.agy.14 dropper
[NOTE]    A backup was created as '48f1a0dd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-15vir
[DETECTION] Contains recognition pattern of the DR/IEHlpr.NT dropper
[NOTE]    A backup was created as '497fc606.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-16vir
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Click.Small.SN Trojan
      --> Object
      [DETECTION] Is the TR/Click.Agent.aam Trojan
      --> Object
      [DETECTION] Contains recognition pattern of the RKIT/Agent.WV.1 root kit
      --> Object
      [DETECTION] Is the TR/Click.Small.UH Trojan
[NOTE]    A backup was created as '48f1a0df.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-17vir
[DETECTION] Contains recognition pattern of the DR/Boran.EL.25 dropper
[NOTE]    A backup was created as '497fc638.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-18vir
[DETECTION] Is the TR/Dldr.Aqtemp.U Trojan
[NOTE]    A backup was created as '48f1a0e1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-19vir
[DETECTION] Contains recognition pattern of the DR/Drop.Agent.qoa.45 dropper
[NOTE]    A backup was created as '497fc63a.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-1vir
[DETECTION] Contains recognition pattern of the ADSPY/Bho.aeq adware or spyware
[NOTE]    A backup was created as '48f1a0e3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-20vir
[DETECTION] Is the TR/Drop.Nsis.E Trojan
[NOTE]    A backup was created as '497fc63c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-21vir
[DETECTION] Contains recognition pattern of the DR/Cinmus.gey.2 dropper
[NOTE]    A backup was created as '48f1a0e5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-22vir
[DETECTION] Contains recognition pattern of the DR/BHO.agy.14 dropper
[NOTE]    A backup was created as '497fc63e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-23vir
[DETECTION] Is the TR/BHO.dnl.2 Trojan
[NOTE]    A backup was created as '48f1a0e7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-24vir
[DETECTION] Is the TR/Spy.Small.bua Trojan
[NOTE]    A backup was created as '497fc630.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-26vir
[DETECTION] Contains recognition pattern of the ADSPY/BDSearch.1.57 adware or spyware
[NOTE]    A backup was created as '48f1a0e9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-27vir
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '497fc632.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-28vir
[DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
[NOTE]    A backup was created as '48f1a0eb.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-29vir
[DETECTION] Is the TR/BHO.dxy.7 Trojan
[NOTE]    A backup was created as '497fc634.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-2vir
[DETECTION] Is the TR/Dldr.Losabel.OF Trojan
[NOTE]    A backup was created as '48f1a0ed.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-30vir
[DETECTION] Is the TR/Agent.69738 Trojan
[NOTE]    A backup was created as '497fc636.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-31vir
[DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    A backup was created as '48f1a0ef.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-34vir
[DETECTION] Contains recognition pattern of the ADSPY/BDSearch.1.57 adware or spyware
[NOTE]    A backup was created as '497fc628.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-37vir
[DETECTION] Is the TR/Agent.36864.188 Trojan
[NOTE]    A backup was created as '48f1a0f1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-38vir
[DETECTION] Is the TR/Spy.Zapchast.D.1 Trojan
[NOTE]    A backup was created as '497fc62a.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-3vir
[DETECTION] Is the TR/Gendal.65576 Trojan
[NOTE]    A backup was created as '48f1a0f3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-4vir
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48f1a0da.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-5vir
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '497fc603.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-6vir
[0] Archive type: RAR
--> TMZ_xinhuang.w1.aolai.com_daoyan_js.asp.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48f1a0dc.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-7vir
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '497fc62c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-8vir
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48f1a0f5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\excllent\excllent\excllent\Spicalhook-9vir
[DETECTION] Contains recognition pattern of the DR/Boran.EL.25 dropper
[NOTE]    A backup was created as '497fc62e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年7月24日  23:31
Used time: 00:05 Minute(s)

The scan has been done completely.

   3 Scanning directories
   41 Files were scanned
   35 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   33 files were deleted
   0 files were repaired
   33 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   1 Archives were scanned
   0 Warnings
   33 Notes

显示全部楼层 · 发表于 2008-7-24 23:33:33

扫描系统区域...
扫描所选择的目录和文件...
对象: Spicalhook-0vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.BHO.fff (KAV 引擎)
对象: Spicalhook-10vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Aqtemp.u (KAV 引擎)
对象: data0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-11vir
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.qoa (KAV 引擎)
对象: data0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-11vir
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.tpa (KAV 引擎)
对象: Spicalhook-11vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.qoa, Trojan-Downloader.Win32.Agent.tpa (KAV 引擎), Dropped:Trojan.Generic.273620 (BD 引擎)
对象: Spicalhook-12vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.NSIS.e (KAV 引擎), Trojan.Generic.266116 (BD 引擎)
对象: stream/data0002 data0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-13vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ile (KAV 引擎)
对象: stream/data0002 data0004
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-13vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.gey (KAV 引擎)
对象: Spicalhook-13vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ile, not-a-virus:AdWare.Win32.Cinmus.gey (KAV 引擎), Dropped:Adware.Cinmus.XZ (BD 引擎)
对象: data0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-14vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.agy (KAV 引擎)
对象: Spicalhook-14vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.agy (KAV 引擎), Dropped:Adware.Cpush.S (BD 引擎)
对象: stream/data0002 data0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.IEHlpr.nt (KAV 引擎)
对象: stream/data0003 data0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ilf (KAV 引擎)
对象: stream/data0003 data0004
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ibd (KAV 引擎)
对象: (NSIS o) lzma_solid_nsis0000
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: Adware.Cinmus.XY (BD 引擎)
对象: (NSIS o)=>lzma_solid_nsis0002=>(NSIS o) lzma_nsis0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: Generic.Adware.Cinmus.C1C1C205 (BD 引擎)
对象: (NSIS o)=>lzma_solid_nsis0003=>(NSIS o) lzma_nsis0000
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: Adware.Cinmus.XY (BD 引擎)
对象: (NSIS o)=>lzma_solid_nsis0003=>(NSIS o) lzma_nsis0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: Adware.Cinmus.Gen (BD 引擎)
对象: (NSIS o)=>lzma_solid_nsis0003=>(NSIS o) lzma_nsis0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-15vir
Status: 已发现病毒
病毒: Trojan.Packed.9982 (BD 引擎)
对象: Spicalhook-15vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.IEHlpr.nt, not-a-virus:AdWare.Win32.Cinmus.ilf, not-a-virus:AdWare.Win32.Cinmus.ibd (KAV 引擎), Adware.Cinmus.XY (2x), Generic.Adware.Cinmus.C1C1C205, Adware.Cinmus.Gen, Trojan.Packed.9982 (BD 引擎)
对象: Spicalhook-16vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Small.bkq (KAV 引擎)
对象: stream data0001
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-17vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.el (KAV 引擎)
对象: (NSIS o) lzma_solid_nsis0001
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-17vir
Status: 已发现病毒
病毒: Adware.Generic.18814 (BD 引擎)
对象: Spicalhook-17vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.el (KAV 引擎), Adware.Generic.18814 (BD 引擎)
对象: Spicalhook-18vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Aqtemp.u (KAV 引擎)
对象: data0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-19vir
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.qoa (KAV 引擎)
对象: Spicalhook-19vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.qoa (KAV 引擎), Dropped:Trojan.Delf.PED (BD 引擎)
对象: Spicalhook-1vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.BHO.efy (KAV 引擎), Trojan.Generic.321598 (BD 引擎)
对象: Spicalhook-20vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.NSIS.e (KAV 引擎), Trojan.Generic.266116 (BD 引擎)
对象: stream/data0002 data0003
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-21vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ile (KAV 引擎)
对象: stream/data0002 data0004
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-21vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.gey (KAV 引擎)
对象: Spicalhook-21vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Cinmus.ile, not-a-virus:AdWare.Win32.Cinmus.gey (KAV 引擎), Dropped:Adware.Cinmus.XZ (BD 引擎)
对象: data0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-22vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.agy (KAV 引擎)
对象: Spicalhook-22vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.agy (KAV 引擎), Dropped:Adware.Cpush.S (BD 引擎)
对象: data0002
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-23vir
Status: 已发现病毒
病毒: Trojan.Win32.BHO.dnl (KAV 引擎)
对象: Spicalhook-23vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.BHO.dnl (KAV 引擎), Dropped:Trojan.Agent.AIVG (BD 引擎)
对象: Spicalhook-24vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Spy.Win32.Small.bua (KAV 引擎)
对象: Spicalhook-25vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.cbw (KAV 引擎), Adware.BDSearch.1 (BD 引擎)
对象: Spicalhook-26vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.bpc (KAV 引擎), Adware.BDSearch.1 (BD 引擎)
对象: Spicalhook-27vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ygb (KAV 引擎), Generic.PWS.Games.4.7B8B232C (BD 引擎)
对象: Spicalhook-28vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Backdoor.Win32.Delf.jaj (KAV 引擎), Backdoor.Generic.51993 (BD 引擎)
对象: Spicalhook-29vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.BHO.dxy (KAV 引擎)
对象: Spicalhook-2vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Losabel.of (KAV 引擎), Generic.Malware.P!dldPk!g.E3D620E4 (BD 引擎)
对象: Spicalhook-30vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.BHO.dxo (KAV 引擎), Trojan.Generic.311424 (BD 引擎)
对象: Spicalhook-31vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Spy.Win32.Small.btx (KAV 引擎), Trojan.Generic.312852 (BD 引擎)
对象: Spicalhook-34vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.bpc (KAV 引擎), Adware.BDSearch.1 (BD 引擎)
对象: Spicalhook-35vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.BHO.cbw (KAV 引擎), Adware.BDSearch.1 (BD 引擎)
对象: Spicalhook-36vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Win32.Agent.lai (KAV 引擎)
对象: Spicalhook-38vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-Spy.Win32.Zapchast.d (KAV 引擎), Trojan.Generic.308700 (BD 引擎)
对象: Spicalhook-3vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan.Generic.289960 (BD 引擎)
对象: Spicalhook-4vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.actb (KAV 引擎), Trojan.Generic.276914 (BD 引擎)
对象: Spicalhook-5vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ajrk (KAV 引擎), Trojan.PWS.OnlineGames.YXF (BD 引擎)
对象: TMZ_xinhuang.w1.aolai.com_daoyan_js.asp.exe
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-6vir
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.adkl (KAV 引擎), Trojan.PWS.OnlineGames.WNW (BD 引擎)
对象: Spicalhook-6vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.adkl (KAV 引擎), Trojan.PWS.OnlineGames.WNW (BD 引擎)
对象: Spicalhook-7vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.aiic (KAV 引擎), Trojan.PWS.OnlineGames.YXF (BD 引擎)
对象: Spicalhook-8vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.aeip (KAV 引擎), Trojan.Generic.278207 (BD 引擎)
对象: stream data0001
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-9vir
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.el (KAV 引擎)
对象: (NSIS o) lzma_solid_nsis0001
在压缩档案里: F:\excllent\excllent\excllent\Spicalhook-9vir
Status: 已发现病毒
病毒: Adware.Generic.18814 (BD 引擎)
对象: Spicalhook-9vir
路径: F:\excllent\excllent\excllent
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.el (KAV 引擎), Adware.Generic.18814 (BD 引擎)
扫描完成: 2008-7-24 23:32
已检查 40 个文件
已发现 36 个染毒文件

显示全部楼层 · 发表于 2008-7-24 23:58:35

卡巴直接秒了rar包。。。。。

显示全部楼层 · 发表于 2008-7-25 10:23:06

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Dropper.Win32.Agent.zjs
病毒： Trojan.DL.Win32.Mnless.aiu
病毒： AdWare.Win32.Agent.bzo
病毒： Trojan.PSW.Win32.GameOL.nsq
病毒： Trojan.Win32.Attack.aa
病毒： Trojan.Win32.BHO.dgr
病毒： Trojan.DL.Win32.Undef.mk
病毒： Trojan.Win32.Undef.hzv
病毒： AdWare.Win32.Zhongsou.aq
病毒： Trojan.Win32.AvKiller.br
病毒： Trojan.DL.Win32.QQHelper.bit
病毒： RootKit.Win32.RESSDT.cs
病毒： RootKit.Win32.RESSDT.cs
病毒： Trojan.PSW.Win32.GamesOnline.ada
病毒： Trojan.PSW.Win32.GameOL.nrv
病毒： Trojan.PSW.Win32.GameOL.nij
病毒： Trojan.PSW.Win32.GameOL.nns

用户来源：互联网

软件版本：20.54.32

40个

显示全部楼层 · 发表于 2008-7-25 11:12:29

木马名称:Trojan-Downloader.Win32.Losabel.gl
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-2VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Boran.cq
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-9VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.QQHelper.gil
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-10VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Dropper.Win32.NSIS.d
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-12VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Cinmus.dak
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-13VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.BHO.amm
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-14VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Boran.cq
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-17VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.QQHelper.gil
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-18VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Dropper.Win32.Agent.rbe
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-19VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Dropper.Win32.NSIS.d
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-20VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Cinmus.dak
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-21VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.BHO.amm
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-22VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.BHO.aij
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-23VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.Downloader.bw
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-24VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.BHO.bpc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-26VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

木马名称:Backdoor.Win32.Delf.deh
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-28VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.BHO.agq
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-30VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

广告软件名称:AdWare.Win32.BHO.bpc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-34VIR
是广告软件!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Spy.Win32.Zapchast.b
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\EXCLLENT[1]\EXCLLENT\EXCLLENT\SPICALHOOK-38VIR
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-7-25 14:37:15

bitdefender 发现35只， 5只剩余

显示全部楼层 · 发表于 2008-7-26 17:51:58

Symantec Endpoint Protection11.0.2010
19只剩余

[病毒样本] X27

本帖子中包含更多资源

本帖子中包含更多资源