一包

显示全部楼层 · 发表于 2008-7-31 15:01:38

..........

显示全部楼层 · 发表于 2008-7-31 15:07:27

Scan Log
Version of virus signature database: 3311 (20080730)
Date: 2008-7-31 Time: 15:07:23
Scanned disks, folders and files: G:\v\xx
G:\v\xx\1.exe - is OK
G:\v\xx\2.exe - Win32/TrojanDownloader.QQHelper.NGO trojan - cleaned by deleting - quarantined [1]
G:\v\xx\4.exe » NSIS » Entries.bin - is OK
G:\v\xx\4.exe » NSIS » Strings.txt - is OK
G:\v\xx\4.exe » NSIS » System.dll - is OK
G:\v\xx\4.exe » NSIS » 19.exe » NSIS » Entries.bin - is OK
G:\v\xx\4.exe » NSIS » 19.exe » NSIS » Strings.txt - is OK
G:\v\xx\4.exe » NSIS » 19.exe » NSIS » System.dll - is OK
G:\v\xx\4.exe » NSIS » 19.exe » NSIS » 龏

显示全部楼层 · 发表于 2008-7-31 15:18:52

费尔5个

显示全部楼层 · 发表于 2008-7-31 15:28:35

Starting the file scan:

Begin scan in 'E:\xx'
E:\xx\1.exe
   [DETECTION] Contains HEUR/Malware suspicious code
   [NOTE]    The detection was classified as suspicious.
   [NOTE]    A backup was created as '38d2efb2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\2.exe
   [DETECTION] Is the TR/Downloader.Gen Trojan
   [NOTE]    A backup was created as '395d9963.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\4.exe
   [DETECTION] Contains recognition pattern of the DR/Cinmus.kgp dropper
   [NOTE]    A backup was created as '38d2efb4.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\9.exe
   [DETECTION] Contains recognition pattern of the DR/BHO.cbt.54 dropper
   [NOTE]    A backup was created as '395d9965.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\ex32de.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   [NOTE]    A backup was created as '38a0effc.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\file.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   [NOTE]    A backup was created as '38d9efee.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\mm.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
   [NOTE]    A backup was created as '389beff2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
E:\xx\x.gif
   [0] Archive type: RAR
   --> ￕￕￆﾬ                                                                                                       .exe
      [DETECTION] Contains HEUR/Crypted suspicious code
   [NOTE]    A backup was created as '38d4efb4.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2000-01-01  20:13
Used time: 00:33 Minute(s)

The scan has been done completely.

      1 Scanning directories
   10 Files were scanned
      6 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      8 files were deleted
      0 files were repaired
      8 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      8 Notes

显示全部楼层 · 发表于 2008-7-31 15:55:37

卡巴杀4启发1漏4

已隔离：病毒 Heur.Trojan.Generic (修改) 文件　: D:\软件\其它\v\k\new\1\xx\1.exe
已删除：广告程序 not-a-virus:AdWare.Win32.Cinmus.kgp 文件　: D:\软件\其它\v\k\new\1\xx\4.exe//stream//data0002//data0003
已删除：广告程序 not-a-virus:AdWare.Win32.BHO.cbt 文件　: D:\软件\其它\v\k\new\1\xx\9.exe//data0002
已删除：木马程序 Trojan-Downloader.Win32.Mutant.aqt 文件　: D:\软件\其它\v\k\new\1\xx\ex32de.exe
已删除：木马程序 Rootkit.Win32.Clbd.gs 文件　: D:\软件\其它\v\k\new\1\xx\file.exe

TO KL

显示全部楼层 · 发表于 2008-7-31 17:45:17

NOD杀5个

显示全部楼层 · 发表于 2008-7-31 17:50:18

WebSoftCodecDrivern

这东西不知道有没有更新。。。

显示全部楼层 · 发表于 2008-7-31 17:53:12

IK 8

D:\病毒测试\临时解压\1.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
D:\病毒测试\临时解压\2.exe - 特征码 'Trojan-Downloader' 被发现
D:\病毒测试\临时解压\4.exe - 特征码 'Virus.Win32.AdWare' 被发现
D:\病毒测试\临时解压\9.exe - 特征码 'Virus.Win32.Trojan' 被发现
D:\病毒测试\临时解压\ex32de.exe - 特征码 'Trojan-Downloader.Win32.Mutant.aqt' 被发现
D:\病毒测试\临时解压\file.exe - 特征码 'Trojan.Fakealert.TK' 被发现
D:\病毒测试\临时解压\mm.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
D:\病毒测试\临时解压\WebSoftCodecDrivern(1).exe
D:\病毒测试\临时解压\x.gif:\照片 .exe - 特征码 'Trojan-Downloader.Win32.Banload.ams' 被发现
D:\病毒测试\临时解压\x.gif

10 文件被扫描
(2 压缩档 1 文件)
8 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.380

显示全部楼层 · 发表于 2008-7-31 17:55:13

avast！ 7

显示全部楼层 · 发表于 2008-7-31 17:59:53

已删除：病毒 Heur.Trojan.Generic (修改) 文件: C:\Documents and Settings\Administrator\桌面\xx[1]\1.exe
已删除：广告程序 not-a-virus:AdWare.Win32.Cinmus.kgp 文件: C:\Documents and Settings\Administrator\桌面\xx[1]\4.exe//stream//data0002//data0003
已删除：广告程序 not-a-virus:AdWare.Win32.BHO.cbt 文件: C:\Documents and Settings\Administrator\桌面\xx[1]\9.exe//data0002

[病毒样本] 一包