金山报4

kp2006

快杀

[ 本帖最后由 kp2006 于 2007-3-8 17:20 编辑 ]

soul20010

FS7.0
Result: 4 malware found
AdWare.Win32.AdMoke.p (adware)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Temp.rar\SetupCaiXiu421.exe
Trojan-Downloader.Win32.Adload.cz (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Temp.rar\102112.exe
Virus.Win32.VB.cf (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\Claw.rar\Claw.exe
AdWare.Win32.AdMoke.m (adware)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\SVCHAST.rar\SVCHAST.exe

bridgewr

微点杀4，另外一个调用了ie打开一个网页后就退出，没有其他动作，上抱微点

zxy900906

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\桌面'
C:\Documents and Settings\user\桌面\桌面\SetupCaiXiu421.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      A backup was created as '4663dfb1.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\user\桌面\桌面\102112.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Dm.H.4
      [INFO]      A backup was created as '4621df7c.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\user\桌面\桌面\SVCHAST.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/AdMoke.M
      [INFO]      A backup was created as '4632dfa2.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\user\桌面\桌面\Claw.exe
      [DETECTION] Is the Trojan horse TR/VB.EI
      [INFO]      A backup was created as '4650dfb9.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-8 18:06
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: Claw.exe
        In archive: C:\Documents and Settings\Administrator\桌面\Claw.rar
        Status: Virus detected
        Virus: Virus.Win32.VB.cf (KAV engine)
Object: Claw.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Virus.Win32.VB.cf (KAV engine)
Object: SVCHAST.exe
        In archive: C:\Documents and Settings\Administrator\桌面\SVCHAST.rar
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.AdMoke.m (KAV engine), Adware.Mokead.B (BD-Engine)
Object: SVCHAST.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.AdMoke.m (KAV engine), Adware.Mokead.B (BD-Engine)
Object: SetupCaiXiu421.exe
        In archive: C:\Documents and Settings\Administrator\桌面\Temp.rar
        Status: Virus detected
        Virus: not-a-virus:AdWare.Win32.AdMoke.p (KAV engine)
Object: 102112.exe
        In archive: C:\Documents and Settings\Administrator\桌面\Temp.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Adload.cz (KAV engine), GenPack:Trojan.Downloader.Adload.BW (BD-Engine)
Object: Temp.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: not-a-virus:AdWare.Win32.AdMoke.p, Trojan-Downloader.Win32.Adload.cz (KAV engine), GenPack:Trojan.Downloader.Adload.BW (BD-Engine)
Analysis complete: 2007-3-8 18:06
    3 files checked
    3 infected files detected
    0 suspected files detected

[ 本帖最后由 jlennon 于 2007-3-8 18:08 编辑 ]

gggh

卡巴杀了

The EQs

Scan performed at: 2007-3-9 0:35:17
Scanning Log
NOD32 version 2102 (20070308) NT
Command line: C:\Documents and Settings\EQ2\桌面\SVCHAST.rar C:\Documents and Settings\EQ2\桌面\Temp.rar C:\Documents and Settings\EQ2\桌面\Claw.rar
Operating memory - is OK

Date: 9.3.2007  Time: 00:35:21
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\SVCHAST.rar; C:\Documents and Settings\EQ2\桌面\Temp.rar; C:\Documents and Settings\EQ2\桌面\Claw.rar
C:\Documents and Settings\EQ2\桌面\SVCHAST.rar ?RAR ?SVCHAST.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Temp.rar ?RAR ?SetupCaiXiu421.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Temp.rar ?RAR ?102112.exe - Win32/Adware.DM application - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\Claw.rar ?RAR ?Claw.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 8
Number of threats found: 4
Number of files cleaned: 3
Time of completion: 00:35:22 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.