svrhost.dll [MD5: 08f367]

显示全部楼层 · 发表于 2008-12-2 10:21:28

File:	svrhost.dll.重命名
Status:	INFECTED/MALWARE
MD5:	08f36751e800b2233a5b4898123d882e
Packers detected:	PE_PATCH.PECOMPACT, PECBUNDLE, PECOMPACT

Scanner results
Scan taken on 02 Dec 2008 02:14:57 (GMT)
A-Squared	Found nothing
AntiVir	Found ADSPY/Navi.A.1
ArcaVir	Found Adware.Navi
Avast	Found Win32:Trojan-gen {Other}
AVG Antivirus	Found Generic2.ANQ
BitDefender	Found Trojan.Downloader.CQU
ClamAV	Found Adware.Navi
CPsecure	Found AdWare.W32.Navi
Dr.Web	Found Trojan.DownLoader.11683
F-Prot Antivirus	Found W32/Adware.JVJ
F-Secure Anti-Virus	Found not-a-virus:AdWare.Win32.Navi (4, 1, 400)
G DATA	Found nothing
Ikarus	Found not-a-virus:AdWare.Win32.Navi
Kaspersky Anti-Virus	Found not-a-virus:AdWare.Win32.Navi
NOD32	Found nothing
Norman Virus Control	Found W32/DLoader.dam
Panda Antivirus	Found nothing
Sophos Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found Trojan.DownLoader.11683

显示全部楼层 · 发表于 2008-12-2 10:25:50

再加个微点的：广告软件名称:AdWare.Win32.Navi.y

显示全部楼层 · 发表于 2008-12-2 11:38:46

BHO浏览器

显示全部楼层 · 发表于 2008-12-2 11:59:37

显示全部楼层 · 发表于 2008-12-2 16:32:23

TO ESET

显示全部楼层 · 发表于 2008-12-2 17:34:14

扫描统计:
扫描时间: 1秒
扫描选项:
扫描目标: C:\Documents and Settings\Administrator\桌面\svrhost.rar
计数:
  扫描的项目总数: 2
  - 文件和目录: 2
  - 注册表条目: 0
  - 进程和启动项目: 0
  - 网络和浏览器项目: 0
  - 其他: 0
  - 受信任文件: 0
  - 跳过的文件: 0

  检测到的安全风险总数: 1
  已解决的项目总数: 1
  需要注意的项目总数: 0

已解决的威胁数:
Trojan Horse
类型: 异常
风险: 高 (高隐蔽性，高清除，高性能，高隐私)
类别: 病毒
状态: 完全解决
-----------
1 文件
c:\documents and settings\administrator\桌面\svrhost.rar - 已删除

显示全部楼层 · 发表于 2008-12-2 18:18:33

2008-12-2 18:18:30 检测到威胁: not-a-virus:AdWare.Win32.Navi C:\Documents and Settings\Administrator\桌面\svrhost.rar/svrhost.dll/PE_Patch.PECompact/PecBundle/PECompact

显示全部楼层 · 发表于 2008-12-2 20:43:44

McAfee Generic PUP

显示全部楼层 · 发表于 2008-12-2 23:27:37

ESET 报
C:\Documents and Settings\GUNDAM\桌面\svrhost.rar » RAR » svrhost.dll - Win32/Adware.Agent.NJW application

[ 本帖最后由 leonfg 于 2008-12-2 23:28 编辑 ]

显示全部楼层 · 发表于 2008-12-3 00:52:00

[病毒样本] svrhost.dll [MD5: 08f367]

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块