一包病毒

fzz8848

Begin scan in 'E:\Download\Virus\$SYSDIR.zip'
E:\Download\Virus\$SYSDIR.zip
    [0] Archive type: ZIP
    --> $SYSDIR/mco2/ADI5MDi2.exe
      [DETECTION] Is the TR/Dldr.CWS.gen.2 Trojan
      --> $SYSDIR/pi/NTc326i.exe
          [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> $SYSDIR/sys3/ZPU560I/webhdll.dll
      [DETECTION] Contains recognition pattern of the ADSPY/Webhancer.390.25 adware or spyware
    --> $SYSDIR/sys3/ZPU560I/whAgent.exe
      [DETECTION] Contains recognition pattern of the ADSPY/Webhancer.F.1 adware or spyware
    --> $SYSDIR/sys3/ZPU560I/whiehlpr.dll
      [DETECTION] Contains recognition pattern of the ADSPY/Webhancer.2 adware or spyware
    --> $SYSDIR/sys3/ZPU560I/whInstaller.exe
      [DETECTION] Contains recognition pattern of the ADSPY/AdSpy.Gen adware or spyware
    [NOTE]      The file was deleted!

huiqing

卡巴KIS2009阻止下载

欠妳緈諨

Virus check with G DATA AntiVirus
Version 18.7.8155.555
Virus signature dated 10/15/2008
Start time: 10/15/2008 12:15
Engine(s): Engine A (AVK 19.1045), Engine B (BD 19.688)
Heuristics: On
Archive: On
System areas: On

Check system areas...
Check the following directories and files:
  S:\$SYSDIR\

Object: ADI5MDi2.exe
        Path: S:\$SYSDIR\mco2
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Small.buy (Engine A)
Object: NTc326i.exe
        Path: S:\$SYSDIR\pi
        Status: Virus detected
        Virus: Trojan.Win32.Agent.lom (Engine A)
Object: webhdll.dll
        Path: S:\$SYSDIR\sys3\ZPU560I
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.WebHancer.390 (Engine A)
Object: whAgent.exe
        Path: S:\$SYSDIR\sys3\ZPU560I
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.WebHancer.f (Engine A)
Object: whiehlpr.dll
        Path: S:\$SYSDIR\sys3\ZPU560I
        Status: Virus detected
        Virus: Application.Generic.9457 (Engine B)
Object: whInstaller.exe
        Path: S:\$SYSDIR\sys3\ZPU560I
        Status: Virus detected
        Virus: Spyware.1091 (Engine B)

Analysis performed in full: 10/15/2008 12:15
    10 files checked
    6 infected files detected
    0 suspicious files found

zdw2041

原帖由 Nerazzurri 于 2008-10-15 10:51 发表
2008/10/15 10:50:07 1224039007 Silhouette 3792 Sign of "Win32:Trojano-2873 " has been found in "C:\Users\Silhouette\Desktop\$SYSDIR.zip\$SYSDIR\mco2\ADI5MDi2.exe" file.  
2008/10/15 10:50:11 12240390 ...

windows defender 还不错的说

无尽藏海

Scan Stats:
  Scan Time: 2 seconds
  Scan Options:
  Scan Targets: D:\Virus\$SYSDIR.zip
  Counts:
   Total items scanned: 12
   - Files & Directories: 12
   - Registry Entries: 0
   - Processes & Start-up Items: 0
   - Network & Browser Items: 0
   - Other: 0
   - Trusted Files: 0
   - Skipped Files: 0

   Total security risks detected: 6
   Total items resolved: 6
   Total items that require attention: 0

Resolved Threats:
Spyware.ISearch
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Spyware
Status: Fully Resolved
-----------
1 File
[adi5mdi2.exe] inside of [d:\virus\$sysdir.zip] - Deleted


Trojan.Garntet
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[ntc326i.exe] inside of [d:\virus\$sysdir.zip] - Deleted


Trackware.Webhancer
Type: Compressed
Risk: Low (Medium Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Trackware
Status: Fully Resolved
-----------
1 File
[webhdll.dll] inside of [d:\virus\$sysdir.zip] - Deleted


Trackware.Webhancer
Type: Compressed
Risk: Low (Medium Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Trackware
Status: Fully Resolved
-----------
1 File
[whagent.exe] inside of [d:\virus\$sysdir.zip] - Deleted


Trackware.Webhancer
Type: Compressed
Risk: Low (Medium Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Trackware
Status: Fully Resolved
-----------
1 File
[whiehlpr.dll] inside of [d:\virus\$sysdir.zip] - Deleted


Trackware.Webhancer
Type: Compressed
Risk: Low (Medium Stealth, Low Removal, Low Performance, Low Privacy)  
Categories: Trackware
Status: Fully Resolved
-----------
1 File
[whinstaller.exe] inside of [d:\virus\$sysdir.zip] - Deleted

kingmuro

诺顿10.1版本查杀

hzyw

nis2009不重复上面的了哦

北山精灵

大蜘蛛6个

北山精灵

安天防线报了4个

北山精灵

超级巡警报了一个