病毒之三

bjfhj

G DATA AntiVirus检测
版本 18.7.8155.555
病毒特征库日期 2008/8/31
开始时间： 2008/8/31 10:57
引擎： 引擎A (AVK 19.225), 引擎B (AVB 19.11)
启发式： 开启
档案文件： 开启
系统区域： 开启
检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\Administrator\桌面\3.rar
对象： csrss.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\3.rar
状态： 发现病毒
病毒： not-a-virus:AdWare.Win32.BHO.cah (引擎A)
对象： 3.rar
路径: C:\Documents and Settings\Administrator\桌面
状态： 发现病毒
病毒： not-a-virus:AdWare.Win32.BHO.cah (引擎A)
扫描完成于： 2008/8/31 10:57
    1个文件已检测
    1个受感染文件已发现
    0个可疑文件被发现

fzz8848

Begin scan in 'E:\Download\Virus\3.rar'
E:\Download\Virus\3.rar
    [0] Archive type: RAR
    --> csrss.exe
      [DETECTION] Contains recognition pattern of the ADSPY/Bho.cah.2 adware or spyware
    --> expl.exe
      [DETECTION] Is the TR/Downloader.Gen Trojan
    --> ha_80044.exe
      [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!

woai_jolin

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-31  Time: 11:50:16
Scanned disks, folders and files: G:\v\3.rar
G:\v\3.rar » RAR » csrss.exe - is OK
G:\v\3.rar » RAR » expl.exe - probably a variant of Win32/TrojanDownloader.QQHelper.NHD trojan - was a part of the deleted object
G:\v\3.rar » RAR » ha_80044.exe - a variant of Win32/TrojanDownloader.QQHelper.NHD trojan - was a part of the deleted object
Number of scanned objects: 3
Number of threats found: 2
Number of cleaned objects: 2
Time of completion: 11:50:16  Total scanning time: 0 sec (00:00:00)

kkgh

费尔全杀

Palkia

病毒        2008-08-31  15:37:21        C:\Documents and Settings\Administrator\桌面\3.rar\ha_80044.exe        Win32.TrojDownloader.Mnless.18477        跳过，未处理       
病毒        2008-08-31  15:37:21        C:\Documents and Settings\Administrator\桌面\3.rar\expl.exe        Win32.Troj.JunkUndefT.hj.24576        跳过，未处理

浪滔天

卡巴杀 1 个，剩余两个应用程序过滤 kill

尤金卡巴斯基

2008/8/31 19:53:54        已清除        风险软件 not-a-virus:AdWare.Win32.BHO.cah        G:\Temp\Virus\3.rar/csrss.exe

黑白君

panda2009下载前干掉

iCeSnaker

Symantec SEP11 全部清除

hzyw

Begin scan in 'C:\3.rar'
C:\3.rar
    [0] Archive type: RAR
    --> csrss.exe
      [DETECTION] Contains recognition pattern of the ADSPY/Bho.cah.2 adware or spyware
    --> expl.exe
      [DETECTION] Is the TR/Downloader.Gen Trojan
    --> ha_80044.exe
      [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was moved to '492d69e3.qua'!


End of the scan: 2008年9月1日  12:04
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      3 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes