一个貌似excel文件的毒（外2个）

一派胡言

在朋友的手机中发现的，有一个貌似excel文件，感染后在每个盘下都产生。各位看看。

tonger2003

已检测到: 病毒 Worm.Win32.Delf.bg        文件: C:\Documents and Settings\Administrator\桌面\手机病毒.rar/手机病毒\ghost.exe//FSG
已检测到: 木马程序 Trojan.Win32.Agent.abt        文件: C:\Documents and Settings\Administrator\桌面\手机病毒.rar/手机病毒\RavMon.exe//NPack
已检测到: 病毒 Worm.Win32.VB.el        文件: C:\Documents and Settings\Administrator\桌面\手机病毒.rar/手机病毒\sal.xls.exe

jimmyleo

--> ÊÖ»ú²¡¶¾\ghost.exe
      [DETECTION] Contains signature of the worm WORM/Delf.BG.1
  --> ÊÖ»ú²¡¶¾\RavMon.exe
      [DETECTION] Is the Trojan horse TR/Agent.abt.3
  --> ÊÖ»ú²¡¶¾\sal.xls.exe
      [DETECTION] Contains signature of the worm WORM/VB.EL.1

黑衣~魂

咖啡全殺~

McAfee 已自動封鎖並移除 特洛伊病毒。

詳細資料
偵測: PWS-QQPass.gen (特洛伊病毒), PWS-QQPass.gen (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\手机病毒\ghost.exe

偵測: Generic BackDoor.u (特洛伊病毒), Generic BackDoor.u (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\手机病毒\RavMon.exe

偵測: W32/Generic!worm (病毒), W32/Generic!worm (病毒)
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\手机病毒\sal.xls.exe

gggh

卡巴杀了

hddgmon

pcc检测3个

The EQs

Scan performed at: 2007-3-25 16:38:01
Scanning Log
NOD32 version 2143 (20070325) NT
Command line: C:\Documents and Settings\EQ2\桌面\手机病毒.rar
Operating memory - is OK

Date: 25.3.2007  Time: 16:38:05
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\手机病毒.rar
C:\Documents and Settings\EQ2\桌面\手机病毒.rar ?RAR ?手机病毒\ghost.exe - Win32/Delf.BG worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\手机病毒.rar ?RAR ?手机病毒\RavMon.exe - Win32/Agent.NAV worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\手机病毒.rar ?RAR ?手机病毒\sal.xls.exe - Win32/VB.EL worm - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 16:38:05 Total scanning time: 0 sec (00:00:00)

蓝色牛仔裤

Check system areas...
Check selected directories and files...
Object: 手机病毒 ghost.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Worm.Win32.Delf.bg (KAV engine)
Object: 手机病毒 RavMon.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Trojan.Win32.Agent.abt (KAV engine)
Object: 手机病毒 sal.xls.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Worm.Win32.VB.el (KAV engine)
Object: 手机病毒\ghost.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Win32.Worm.Delf.BB (BD-Engine)
Object: 手机病毒\RavMon.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Trojan.Agent.AIQ (BD-Engine)
Object: 手机病毒\sal.xls.exe
        In archive: D:\掃描\手机病毒.rar
        Status: Virus detected
        Virus: Win32.Almsfir.VB.A (BD-Engine)
Object: 手机病毒.rar
        Path: D:\掃描
        Status: Virus detected
        Virus: Worm.Win32.Delf.bg, Trojan.Win32.Agent.abt, Worm.Win32.VB.el (KAV engine), Win32.Worm.Delf.BB, Trojan.Agent.AIQ, Win32.Almsfir.VB.A (BD-Engine)

hzq277284

大蜘蛛

蓝色牛仔裤

結果都一樣...

[ 本帖最后由 蓝色牛仔裤 于 2007-3-25 16:45 编辑 ]