两样本

显示全部楼层 · 发表于 2007-4-8 21:49:25

咖啡通殺

McAfee 已自動封鎖潛在無用程式，防止該程式在您的電腦上執行。
詳細資料
名稱: Adware-MaxSearch
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\te122[1].exe

詳細資料
名稱: ProcKill-DJ
檔案路徑: C:\Documents and Settings\all.HOME-\桌面\rgkueobcmi[1].html

显示全部楼层 · 发表于 2007-4-9 00:08:41

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.1
Virus signature file from: 2007-4-5, 2:50

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\桌面.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-4-9, 0:07:59
---------------------------------------------------------------------

[Found downloader] <W32/Downloader2.ADZ (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\桌面.rar->te122[1].exe
[Found security risk] <W32/Rootkit.IU (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\桌面.rar->rgkueobcmi[1].html
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\桌面.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\桌面.rar->rgkueobcmi[1].html

---------------------------------------------------------------------
Scan ended: 2007-4-9, 0:08:01
Duration: 0:00:02

Scan result:

Scanned files:    1
Infected objects:    2
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-4-9 01:11:27

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\��.rar'
C:\Documents and Settings\morgan\My Documents\
  ��.rar
[0] Archive type: RAR
--> te122[1].exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Softomate.AM
      [WARNING] Infected files in archives cannot be repaired!
--> rgkueobcmi[1].html
      [DETECTION] Is the Trojan horse TR/Zapchast.CP
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

[病毒样本] 两样本