9

tonger2003

Sebastian

miss1
Starting the file scan:

Begin scan in 'D:\new\55.exe'
D:\new\55.exe
    [DETECTION] Is the TR/Drop.Trew.1 Trojan
    [NOTE]      A backup was created as '49ed6d84.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\ko.exe'
D:\new\ko.exe
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      A backup was created as '49ed6dbe.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\ldr.exe'
D:\new\ldr.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4a316db3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\ldrtp.exe'
D:\new\ldrtp.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4b428a4c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\programa.exe'
D:\new\programa.exe
    [DETECTION] Is the TR/Dldr.VB.lbu Trojan
    [NOTE]      A backup was created as '4a2e6dc1.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\promo.exe'
Begin scan in 'D:\new\svchost.exe'
D:\new\svchost.exe
    [DETECTION] Is the TR/Fake.Antivirus.2010.K Trojan
    [NOTE]      A backup was created as '4a226dc6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\updata.exe'
D:\new\updata.exe
    [DETECTION] Contains recognition pattern of the SPR/AutoIt.Gen program
    [NOTE]      A backup was created as '4a236dc0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\new\vap.exe'
D:\new\vap.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a2f6db1.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年3月17日  17:28
Used time: 00:01 Minute(s)

The scan has been done completely.

      0 Scanned directories
      9 Files were scanned
      8 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      8 files were deleted
      0 Viruses and unwanted programs were repaired
      8 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      8 Notes

wcj20236

微点kill 8         miss  1
miss 的传上来。

wcj20236

ledled

VB Kill 7

fengliuyedao

2009-3-17 17:47:59 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\vap.exe Win32/TrojanDropper.Agent.NJV 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:57 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\updata.exe Win32/StartPage.NIZ 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:55 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\svchost.exe Win32/Adware.AntiVirus1 应用程序 的变种 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:49 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\programa.exe Win32/Spy.Zbot.JF 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:47 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\ldrtp.exe Win32/Spy.Zbot.IB 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:45 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\ldr.exe Win32/Spy.Zbot.IB 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:43 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\ko.exe Win32/TrojanDownloader.Agent.OVM 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2009-3-17 17:47:41 文件系统实时防护 文件 C:\Documents and Settings\Administrator\桌面\桌面\55.exe Win32/Agent.NZZ 特洛伊木马 已删除 - 已隔离 NT AUTHORITY\SYSTEM 在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

[ 本帖最后由 fengliuyedao 于 2009-3-17 17:52 编辑 ]

黑衣~魂

DR.WEB
55.exe - is an adware program Adware.ThunderAdvise.1
ko.exe - probably infected with DLOADER.Trojan
ldr.exe - infected with Trojan.Packed.139
ldrtp.exe - infected with Trojan.Packed.139
programa.exe - infected with BackDoor.Poison.686

揍敌客

ik kill 7

尤金卡巴斯基

Kill All

2009/3/18 0:39:24        已清除        病毒 not-a-virus:FraudTool.Win32.Antivirus2010.k        G:\Temp\Virus\桌面.rar/svchost.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan-Downloader.Win32.Agent.wxq        G:\Temp\Virus\桌面.rar/55.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan-Downloader.Win32.VB.lbu        G:\Temp\Virus\桌面.rar/programa.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan-GameThief.Win32.Magania.awvl        G:\Temp\Virus\桌面.rar/vap.exe//PE-Crypt.CF               
2009/3/18 0:39:24        已清除        木马程序 Trojan-Spy.Win32.Zbot.gen        G:\Temp\Virus\桌面.rar/ldr.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan-Spy.Win32.Zbot.oyb        G:\Temp\Virus\桌面.rar/ldrtp.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan.Win32.Agent.btbn        G:\Temp\Virus\桌面.rar/ko.exe//PE_Patch//UPack               
2009/3/18 0:39:24        已清除        木马程序 Trojan.Win32.StartPage.djy        G:\Temp\Virus\桌面.rar/updata.exe               
2009/3/18 0:39:24        已清除        木马程序 Trojan.Win32.Subster.l        G:\Temp\Virus\桌面.rar/promo.exe               
2009/3/18 0:39:23        已清除        木马程序 Trojan.Win32.Subster.l        G:\Temp\Virus\promo.rar/promo.exe

xppara

http://www.virustotal.com/zh-tw/ ... 0c46a94334bac32214c