两只病毒而已

Anycall-D908

好困啊～～去午休下先！你们慢慢玩。

The EQs

Scan performed at: 2007-3-21 15:11:49
Scanning Log
NOD32 version 2130 (20070321) NT
Command line: C:\Documents and Settings\EQ2\桌面\两个病毒.rar
Operating memory - is OK

Date: 21.3.2007  Time: 15:11:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\两个病毒.rar
C:\Documents and Settings\EQ2\桌面\两个病毒.rar ?RAR ?新建文件夹\flash.exe - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\两个病毒.rar ?RAR ?新建文件夹\o.js - JS/TrojanDownloader.IstBar.B trojan - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 15:11:56 Total scanning time: 1 sec (00:00:01)

闪电战

金山毒霸 不报

观弈书童

nod32通杀

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
    [0] Archive type: RAR
    --> н¨Îļþ¼Ð\flash.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\o.js
        [DETECTION] Contains signature of the Java script virus JS/Click.Agent
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

小邪邪

通杀

dabaocai

运行后，下了一堆病毒，多得无法列举。

鼻耳盖子

:\WINNT\SYSTEM32\88F4C3FF.DLL C:\WINNT\SYSTEM32\88F4C3FF.EXE
:\WINNT\SYSTEM32\88F4C3FFT.EXE I:\TEST\070321\6\两个病毒\新建文件夹\FLASH.EXE
:\WINNT\SYSTEM32\88F4C3FF.EXE I:\TEST\070321\6\两个病毒\新建文件夹\FLASH.EXE

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\88F4C3FF\ IMAGEPATH  C:\WINNT\SYSTEM32\88F4C3FF.EXE -SERVICE I:\TEST\070321\6\两个病毒\新建文件夹

Anycall-D908

在这里顺便请教个问题：“刚才我老觉得自己的系统不对劲，于是在影子系统下转到安全模（安全模式中没启动影子）式去启动了NOD32的高级只能侦察模式。用了好长时间弄到两个未知病毒，可是进入正常模式后发现日志没有了，样本也找不到。是不是影子系统的缘故？安全模式下的操作影子也还原吗？

zzh161

费尔杀一个，启发报一个