还是老毒

显示全部楼层 · 发表于 2007-3-7 22:30:02

555555555555555555555

显示全部楼层 · 发表于 2007-3-7 22:31:48

Scan performed at: 2007-3-7 22:30:55
Scanning Log
NOD32 version 2100 (20070307) NT
Command line: C:\Documents and Settings\EQ2\桌面\ZS917.rar C:\Documents and Settings\EQ2\桌面\myd.rar C:\Documents and Settings\EQ2\桌面\QQLogin.rar C:\Documents and Settings\EQ2\桌面\Z927.rar C:\Documents and Settings\EQ2\桌面\ZR917.rar
Operating memory - is OK

Date: 7.3.2007 Time: 22:31:00
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\ZS917.rar; C:\Documents and Settings\EQ2\桌面\myd.rar; C:\Documents and Settings\EQ2\桌面\QQLogin.rar; C:\Documents and Settings\EQ2\桌面\Z927.rar; C:\Documents and Settings\EQ2\桌面\ZR917.rar
C:\Documents and Settings\EQ2\桌面\myd.rar ?RAR ?myd.exe - Win32/TrojanDownloader.Adload.FR trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\QQLogin.rar ?RAR ?QQLogin.exe - Win32/GreyBird.MD trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\Z927.rar ?RAR ?Z927.exe - Win32/PSW.QQRob.NAH trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\ZR917.rar ?RAR ?ZR917.com - probably a variant of Win32/TrojanDownloader.VB.APY trojan
Number of scanned files: 11
Number of threats found: 4
Number of files cleaned: 4
Time of completion: 22:31:00 Total scanning time: 0 sec (00:00:00)

nod隔离了4个，干掉了4个

显示全部楼层 · 发表于 2007-3-8 00:02:13

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ZS917.rar'
C:\Documents and Settings\Administrator\My Documents\
  ZS917.rar
[0] Archive type: RAR
--> ZS917.exe
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\myd.rar'
C:\Documents and Settings\Administrator\My Documents\
  myd.rar
[0] Archive type: RAR
--> myd.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Adload.FR
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\QQLogin.rar'
C:\Documents and Settings\Administrator\My Documents\
  QQLogin.rar
[0] Archive type: RAR
--> QQLogin.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/GrayBird.MD Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Z927.rar'
C:\Documents and Settings\Administrator\My Documents\
  Z927.rar
[0] Archive type: RAR
--> Z927 (1).asp
--> Z927.exe
      [DETECTION] Contains signature of the exploits EXP/JS.ADODB.St.Y.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ZR917.rar'
C:\Documents and Settings\Administrator\My Documents\
  ZR917.rar
[0] Archive type: RAR
--> ZR917.com
      [DETECTION] Is the Trojan horse TR/Dldr.VB.aip.1
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年3月7日  08:01
Used time: 00:08 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   4 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   5 Archives were scanned
   8 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-3-8 08:04:40

Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 3/6/2007
Start time: 3/8/2007 08:03
Engine(s): Engine A (AVK 17.3103), Engine B (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: myd.exe
In archive: C:\Documents and Settings\Administrator\桌面\myd.rar
Status: Virus detected
Virus: Trojan-Downloader.Win32.Adload.fr (Engine A), Trojan.Downloader.Agent.AMS (Engine B)
Object: myd.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.Adload.fr (Engine A), Trojan.Downloader.Agent.AMS (Engine B)
Object: QQLogin.exe
In archive: C:\Documents and Settings\Administrator\桌面\QQLogin.rar
Status: Virus detected
Virus: Backdoor.Win32.GrayBird.md (Engine A), Backdoor.GrayBird.GA (Engine B)
Object: QQLogin.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Backdoor.Win32.GrayBird.md (Engine A), Backdoor.GrayBird.GA (Engine B)
Object: Z927.exe
In archive: C:\Documents and Settings\Administrator\桌面\Z927.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.QQPass.ms (Engine A), Trojan.Pws.Qqpass.MS (Engine B)
Object: Z927.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.QQPass.ms (Engine A), Trojan.Pws.Qqpass.MS (Engine B)
Object: ZR917.com
In archive: C:\Documents and Settings\Administrator\桌面\ZR917.rar
Status: Virus detected
Virus: Trojan-Downloader.Win32.VB.aip (Engine A), GenPack:Generic.Malware.Sdld!.29B7F7CF (Engine B)
Object: ZR917.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.VB.aip (Engine A), GenPack:Generic.Malware.Sdld!.29B7F7CF (Engine B)
Analysis complete: 3/8/2007 08:03
5 files checked
4 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-8 10:01:10

微点
木马名称:Trojan-Downloader.Win32.Adload.nv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEXA\MYD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Huigezi.efm

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEXB\QQLOGIN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.VB.gi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\TWIEXD\ZR917.COM
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-3-8 10:02:05

费尔右键扫描最后一个未报

显示全部楼层 · 发表于 2007-3-8 13:16:26

FS7.0
Result: 4 malware found
Trojan-Downloader.Win32.VB.aip (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\ZR917.rar\ZR917.com
Trojan-Downloader.Win32.Adload.fr (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\myd.rar\myd.exe
Backdoor.Win32.GrayBird.md (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\QQLogin.rar\QQLogin.exe
Trojan-PSW.Win32.QQPass.ms (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Z927.rar\Z927.exe

显示全部楼层 · 发表于 2007-3-8 13:19:37

瑞星报四个

[病毒样本] 还是老毒

本帖子中包含更多资源

本帖子中包含更多资源