金山报4

显示全部楼层 · 发表于 2007-3-8 16:08:39

快杀

[ 本帖最后由 kp2006 于 2007-3-8 16:09 编辑 ]

显示全部楼层 · 发表于 2007-3-8 16:10:30

Scan performed at: 2007-3-8 16:09:41
Scanning Log
NOD32 version 2101 (20070307) NT
Command line: C:\Documents and Settings\EQ2\桌面\wow.rar
Operating memory - is OK

Date: 8.3.2007 Time: 16:09:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wow.rar
C:\Documents and Settings\EQ2\桌面\wow.rar ?RAR ?~temp786.exe - Win32/PSW.LdPinch.BIT trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\wow.rar ?RAR ?windhcp.ocx - a variant of Win32/Agent.ABF trojan
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 16:09:45 Total scanning time: 0 sec (00:00:00)

显示全部楼层 · 发表于 2007-3-8 16:12:12

Scan performed at: 2007-3-8 16:11:56
Scanning Log
NOD32 version 2101 (20070307) NT
Command line: C:\Documents and Settings\EQ2\桌面\command.rar
Operating memory - is OK

Date: 8.3.2007 Time: 16:12:01
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\command.rar
C:\Documents and Settings\EQ2\桌面\command.rar ?RAR ?commond.pif - Win32/PSW.Agent.NCN trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\command.rar ?RAR ?logon.scr - probably unknown NewHeur_PE virus [7]
Number of scanned files: 6
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 16:12:02 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-3-8 16:16:56

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-8 16:16
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: commond.pif
In archive: C:\Documents and Settings\Administrator\桌面\command.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.Nilage.bet (KAV engine), MemScan:Trojan.PWS.Agent.EH (BD-Engine)
Object: logon.scr
In archive: C:\Documents and Settings\Administrator\桌面\command.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.Nilage.bet (KAV engine), DeepScan:Generic.Malware.PBPk.E80205E3 (BD-Engine)
Object: command.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.Nilage.bet (2x) (KAV engine), MemScan:Trojan.PWS.Agent.EH, DeepScan:Generic.Malware.PBPk.E80205E3 (BD-Engine)
Object: CelInDriver.sys
In archive: C:\Documents and Settings\Administrator\桌面\wow.rar
Status: Virus detected
Virus: Trojan.Win32.Agent.abf (KAV engine)
Object: ~temp786.exe
In archive: C:\Documents and Settings\Administrator\桌面\wow.rar
Status: Virus detected
Virus: Trojan.Win32.Agent.abr (KAV engine), Trojan.Agent.ALQ (BD-Engine)
Object: windhcp.ocx
In archive: C:\Documents and Settings\Administrator\桌面\wow.rar
Status: Virus detected
Virus: Trojan.Win32.Agent.abf (KAV engine), Trojan.Liunxdi.A (BD-Engine)
Object: wow.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan.Win32.Agent.abf (2x), Trojan.Win32.Agent.abr (KAV engine), Trojan.Agent.ALQ, Trojan.Liunxdi.A (BD-Engine)
Analysis complete: 2007-3-8 16:16
2 files checked
2 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-3-8 16:42:23

微点

显示全部楼层 · 发表于 2007-3-8 16:51:57

FS7.0
Result: 5 malware found
Trojan.Win32.Agent.abf (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wow.rar\CelInDriver.sys
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wow.rar\windhcp.ocx
Trojan.Win32.Agent.abr (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\wow.rar\~temp786.exe
Trojan-PSW.Win32.Nilage.bet (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\command.rar\commond.pif
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\command.rar\logon.scr

显示全部楼层 · 发表于 2007-3-8 23:57:54

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\command.rar'
C:\Documents and Settings\Administrator\My Documents\
  command.rar
[0] Archive type: RAR
--> 122D23.dmp
--> 122DA0.dmp
--> 125413.tmp
--> commond.pif
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> logon.scr
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\wow.rar'
C:\Documents and Settings\Administrator\My Documents\
  wow.rar
[0] Archive type: RAR
--> CelInDriver.sys
      [DETECTION] Is the Trojan horse TR/Agent.abf.181.C
      [WARNING] Infected files in archives cannot be repaired!
--> ~temp786.exe
      [DETECTION] Is the Trojan horse TR/Agent.abr.57
      [WARNING] Infected files in archives cannot be repaired!
--> windhcp.ocx
      [DETECTION] Is the Trojan horse TR/Agent.abf.501
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年3月8日  07:57
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   5 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   2 Archives were scanned
   7 Warnings
   0 Notes

金山报4

本帖子中包含更多资源

本帖子中包含更多资源