下载者 3个

显示全部楼层 · 发表于 2008-7-28 18:50:48

G:\v\system32\lphc9kbj0e55t.exe - Win32/TrojanDownloader.FakeAlert.EU trojan
G:\v\system32\phc9kbj0e55t.bmp - Win32/TrojanDownloader.FakeAlert.DJ trojan
G:\v\system32\pphc9kbj0e55t.exe - Win32/Adware.WinFixer application

显示全部楼层 · 发表于 2008-7-28 18:53:39

C:\Documents and Settings\asus\桌面\system32.rar > RAR > phc9kbj0e55t.bmp - Win32/TrojanDownloader.FakeAlert.DJ 特洛伊木马
C:\Documents and Settings\asus\桌面\system32.rar > RAR > pphc9kbj0e55t.exe - Win32/Adware.WinFixer 应用程序
C:\Documents and Settings\asus\桌面\system32.rar > RAR > lphc9kbj0e55t.exe - Win32/TrojanDownloader.FakeAlert.EU 特洛伊木马

显示全部楼层 · 发表于 2008-7-28 19:50:13

Begin scan in 'C:\Documents and Settings\haha\桌面\system32.rar'
C:\Documents and Settings\haha\桌面\system32.rar
[0] Archive type: RAR
--> pphc9kbj0e55t.exe
[DETECTION] Is the TR/Fakealert.AG Trojan
--> lphc9kbj0e55t.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan

显示全部楼层 · 发表于 2008-7-28 19:51:16

Starting the file scan:
Begin scan in 'F:\病毒样本\system32.rar'
F:\病毒样本\system32.rar
[0] Archive type: RAR
--> pphc9kbj0e55t.exe
   [DETECTION] Is the TR/Fakealert.AG Trojan
--> lphc9kbj0e55t.exe
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was moved to '4900b32b.qua'!

显示全部楼层 · 发表于 2008-7-28 19:58:37

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\system32.rar'
C:\Documents and Settings\Administrator\桌面\system32.rar
[0] Archive type: RAR
--> pphc9kbj0e55t.exe
   [DETECTION] Is the TR/Fakealert.AG Trojan
--> lphc9kbj0e55t.exe
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '4900b4cc.qua'  ( QUARANTINE )
[NOTE]    Attempting to perform action using the ARK lib.
[NOTE]    A backup was created as '48abdeed.qua'  ( QUARANTINE

显示全部楼层 · 发表于 2008-7-28 20:00:44

显示全部楼层 · 发表于 2008-7-28 20:01:00

McAfee 报了2个。。。

显示全部楼层 · 发表于 2008-7-28 20:24:29

[Scanning : C:\Download Files]

C:\Download Files\system32.rar<RAR>:pphc9kbj0e55t.exe <- Trojan.Downloader.Agent.Ki : No action
C:\Download Files\system32.rar<RAR>:lphc9kbj0e55t.exe <- Trojan.Agent.Vie : No action

Scanned objects : 4

Infected objects : 2

显示全部楼层 · 发表于 2008-7-28 20:25:32

显示全部楼层 · 发表于 2008-7-28 22:01:36

已删除：风险软件 not-a-virus:FraudTool.Win32.MalwareProtector.d 文件　: G:\Temp\Virus\system32.rar/pphc9kbj0e55t.exe
已删除：木马程序 Trojan.Win32.Agent.vie 文件　: G:\Temp\Virus\system32.rar/lphc9kbj0e55t.exe

[病毒样本] 下载者 3个

ArcaVir2008

Norman Virus Control 5.99