3个,过瑞星

显示全部楼层 · 发表于 2007-4-3 06:23:30

扫扫

显示全部楼层 · 发表于 2007-4-3 06:45:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\wsttrs.rar'
C:\Documents and Settings\morgan\My Documents\
  wsttrs.rar
[0] Archive type: RAR
--> wsttrs.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> mppds.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> bar.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Baidu.N
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-4-3 06:59:00

Scan performed at: 2007-4-3 6:58:57
Scanning Log
NOD32 version 2164 (20070402) NT
Command line: C:\Documents and Settings\EQ2\桌面\wsttrs.rar
Operating memory - is OK

Date: 3.4.2007 Time: 06:59:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wsttrs.rar
C:\Documents and Settings\EQ2\桌面\wsttrs.rar ?RAR ?mppds.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\wsttrs.rar ?RAR ?bar.exe ?NSIS ?superutilbar.dll - Win32/Adware.Toolbar.Baidu application - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 06:59:08 Total scanning time: 2 sec (00:00:02)

显示全部楼层 · 发表于 2007-4-3 08:58:00

蜘蛛3个.. 最近才发现蜘蛛好像报壳的也挺多..

wsttrs.rar\wsttrs.exe;C:\Documents and Settings\Administrator\桌面\wsttrs.rar;BINARYRES;;
wsttrs.rar\mppds.exe;C:\Documents and Settings\Administrator\桌面\wsttrs.rar;BINARYRES;;
bar.exe\data001;C:\Documents and Settings\Administrator\桌面\wsttrs.rar\bar.exe;Adware.Baidu;;
bar.exe;C:\Documents and Settings\Administrator\桌面\wsttrs.rar;Archive contains infected objects;;
wsttrs.rar;C:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

显示全部楼层 · 发表于 2007-4-3 09:13:03

诺顿没查出来

显示全部楼层 · 发表于 2007-4-3 11:51:59

显示全部楼层 · 发表于 2007-4-3 12:06:42

原帖由 鼻耳盖子 于 2007-4-3 11:51 发表

和你跑的一样

显示全部楼层 · 发表于 2007-4-3 12:20:42

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-1
Start time: 2007-4-3 12:20
Engine(s): KAV engine (AVK 17.3690), BD-Engine (BD 17.2421)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: wsttrs.exe
In archive: C:\Documents and Settings\Administrator\桌面\wsttrs.rar
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.SdldgPWS.938F210A (BD-Engine)
Object: mppds.exe
In archive: C:\Documents and Settings\Administrator\桌面\wsttrs.rar
Status: Virus detected
Virus: Generic.Malware.SdldgPWS.18F18A30 (BD-Engine)
Object: bar.exe=>(NSIS o) bzip2_solid_nsis0001
In archive: C:\Documents and Settings\Administrator\桌面\wsttrs.rar
Status: Virus detected
Virus: Adware.Baidubar.P (BD-Engine)
Object: bar.exe=>(NSIS o) bzip2_solid_nsis0003
In archive: C:\Documents and Settings\Administrator\桌面\wsttrs.rar
Status: Virus detected
Virus: Adware.Baidubar.J (BD-Engine)
Object: wsttrs.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.SdldgPWS.938F210A, Generic.Malware.SdldgPWS.18F18A30, Adware.Baidubar.P, Adware.Baidubar.J (BD-Engine)
Analysis complete: 2007-4-3 12:20
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-3 12:31:17

2007-4-3 12:30:15 已删除 \wsttrs\bar.exe
Adware-Baidu (Adware)

显示全部楼层 · 发表于 2007-4-3 13:55:16

KIS 6.0
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es URL: http://bbs.kafan.cn/attachment.php?aid=51013/wsttrs.exe

[病毒样本] 3个,过瑞星

本帖子中包含更多资源

2个间谍，1个报可疑

本帖子中包含更多资源

MCAFEE