转绅博一个

显示全部楼层 · 发表于 2007-4-11 16:41:00

1111111111

显示全部楼层 · 发表于 2007-4-11 16:52:02

Begin scan in 'C:\Documents and Settings\ICECOOL\桌面\23409134.rar'
C:\Documents and Settings\ICECOOL\桌面\23409134.rar
  [0] Archive type: RAR
  --> zfnefll.exe
   [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.RC
  --> 1[2].jpg
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> 2.pif
   [DETECTION] The file name contains an executable file extension disguised as a harmless one HEUR-DBLEXT/Crypted
  --> 2[1].jpg
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> fuck.pif
   [DETECTION] The file name contains an executable file extension disguised as a harmless one HEUR-DBLEXT/Crypted
   [INFO]    The file was deleted!

End of the scan: 2007年4月11日  16:52
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   8 Files were scanned
   5 viruses and/or unwanted programs were found
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-11 17:20:35

怎么样本区用红伞的越来越多了,我想找下杀毒的感觉也慢了半拍.

显示全部楼层 · 发表于 2007-4-11 17:26:57

没办法～实在很好用～虽然难免有误报的时候～不过大多数那些东西也确实有问题～

显示全部楼层 · 发表于 2007-4-11 17:55:20

用红伞的多了，没意思，所以我用avast!

显示全部楼层 · 发表于 2007-4-11 18:02:18

beta蜘蛛还没找回来....先用AVK练练~~

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-11
Start time: 2007-4-11 17:59
Engine(s): KAV engine (AVK 17.3907), BD-Engine (BD 17.5838)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: lfrmewrk.exe
In archive: C:\Documents and Settings\Administrator\桌面\23409134.rar
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.BHO.cf (KAV engine)
Object: 1[2].jpg
In archive: C:\Documents and Settings\Administrator\桌面\23409134.rar
Status: Virus detected
Virus: Exploit.Win32.IMG-ANI.gen (KAV engine), Exploit.Win32.MS05-002.Gen (BD-Engine)
Object: 2.pif
In archive: C:\Documents and Settings\Administrator\桌面\23409134.rar
Status: Virus detected
Virus: Worm.Win32.Delf.br (KAV engine), Trojan.Downloader.Delf.AIS (BD-Engine)
Object: 2[1].jpg
In archive: C:\Documents and Settings\Administrator\桌面\23409134.rar
Status: Virus detected
Virus: Exploit.Win32.IMG-ANI.q (KAV engine)
Object: fuck.pif
In archive: C:\Documents and Settings\Administrator\桌面\23409134.rar
Status: Virus detected
Virus: Worm.Win32.Delf.br (KAV engine), Trojan.Downloader.Delf.AIS (BD-Engine)
Object: 23409134.rar
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: not-a-virus:AdWare.Win32.BHO.cf, Exploit.Win32.IMG-ANI.gen, Worm.Win32.Delf.br (2x), Exploit.Win32.IMG-ANI.q (KAV engine), Exploit.Win32.MS05-002.Gen, Trojan.Downloader.Delf.AIS (2x) (BD-Engine)
Analysis complete: 2007-4-11 17:59
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-11 18:03:34

Scan performed at: 2007-4-11 18:01:04
Scanning Log
NOD32 version 2179 (20070411) NT
Command line: E:\23409134.rar
Operating memory - is OK

Date: 11.4.2007 Time: 18:01:10
Anti-Stealth technology is enabled.
Scanned disks, folders and files: E:\23409134.rar
E:\23409134.rar ?RAR ?zfnefll.exe - a variant of Win32/TrojanDownloader.QQHelper.KX trojan
E:\23409134.rar ?RAR ?1[2].jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
E:\23409134.rar ?RAR ?2.pif - probably unknown NewHeur_PE virus [7]
E:\23409134.rar ?RAR ?fuck.pif - probably unknown NewHeur_PE virus [7]
Number of scanned files: 8
Number of threats found: 4
Number of active threats: 1
Time of completion: 18:01:13 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-4-11 18:53:29

瑞星报毒
Hack.SuspiciousAni

显示全部楼层 · 发表于 2007-4-11 22:57:46

驱逐舰报三个

显示全部楼层 · 发表于 2007-4-11 23:05:30

卡巴报6个.
MSRUNDLL没反应

已删除: 木马程序 Trojan-Downloader.Win32.QQHelper.of 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/zfnefll.exe//PE_Patch.UPX//UPX
已删除: 广告程序 not-a-virus:AdWare.Win32.BHO.cf 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/lfrmewrk.exe
已删除: 恶意程序 Exploit.Win32.IMG-ANI.gen (修改) 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/1[2].jpg
已删除: 病毒 Worm.Win32.Delf.br 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/2.pif//PE_Patch//UPack
已删除: 恶意程序 Exploit.Win32.IMG-ANI.q 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/2[1].jpg
已删除: 病毒 Worm.Win32.Delf.br 文件: C:\Documents and Settings\Deric Yeoh\桌面\23409134.rar/fuck.pif//PE_Patch//UPack

[病毒样本] 转绅博一个

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源