Temp文件夹发现的～～

显示全部楼层 · 发表于 2007-4-18 05:54:23

各位看看～～

显示全部楼层 · 发表于 2007-4-18 06:15:16

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-17
Start time: 2007-4-18 6:14
Engine(s): KAV engine (AVK 17.3590), BD-Engine (BD 17.3326)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: AtiCimUn.exe
Path: C:\Documents and Settings\Administrator\桌面\AtiCimUn
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.Agent.bkw (KAV engine), Dropped:Generic.Malware.SPBPkg.3A44090B (BD-Engine)
Object: byetmr.exe
Path: C:\Documents and Settings\Administrator\桌面\byetmr
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.WOW.ec (KAV engine)
Object: c0nime.exe
Path: C:\Documents and Settings\Administrator\桌面\c0nime
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.kw (KAV engine), DeepScan:Generic.PWS.Games.B06A32C0 (BD-Engine)
Object: IEXPL0RER.EXE
Path: C:\Documents and Settings\Administrator\桌面\IEXPL0RER
Status: Move file into quarantine
Virus: Trojan-Downloader.Win32.Agent.bkw (KAV engine), Generic.Malware.SPBPkg.3A44090B (BD-Engine)
Object: rundl132.exe
Path: C:\Documents and Settings\Administrator\桌面\rundl132
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.kw (KAV engine), Trojan.PWS.OnlineGames.DP (BD-Engine)
Analysis complete: 2007-4-18 6:14
7 files checked
5 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-18 06:52:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\UPX.rar'
C:\Documents and Settings\morgan\My Documents\
  UPX.rar
[0] Archive type: RAR
--> UPX.EXE
Begin scan in 'C:\Documents and Settings\morgan\My Documents\AtiCimUn.rar'
C:\Documents and Settings\morgan\My Documents\
  AtiCimUn.rar
[0] Archive type: RAR
--> AtiCimUn.exe
Begin scan in 'C:\Documents and Settings\morgan\My Documents\byetmr.rar'
C:\Documents and Settings\morgan\My Documents\
  byetmr.rar
[0] Archive type: RAR
--> byetmr.exe
      [DETECTION] Is the Trojan horse TR/PSW.WOW.EC.100
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\c0nime.rar'
C:\Documents and Settings\morgan\My Documents\
  c0nime.rar
[0] Archive type: RAR
--> c0nime.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.KW.2
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\IEXPL0RER.rar'
C:\Documents and Settings\morgan\My Documents\
  IEXPL0RER.rar
[0] Archive type: RAR
--> IEXPL0RER.EXE
      [DETECTION] Is the Trojan horse TR/Agent.8900
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\IEXPL0RER(1).rar'
C:\Documents and Settings\morgan\My Documents\
  IEXPL0RER(1).rar
[0] Archive type: RAR
--> IEXPL0RER(1).VBS
Begin scan in 'C:\Documents and Settings\morgan\My Documents\rundl132.rar'
C:\Documents and Settings\morgan\My Documents\
  rundl132.rar
[0] Archive type: RAR
--> rundl132.exe
      [DETECTION] Is the Trojan horse TR/Agent.34708.B
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年4月17日  15:52
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   14 Files were scanned
   4 viruses and/or unwanted programs were found
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   10 Files not concerned
   7 Archives were scanned
   8 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-4-18 06:54:30

IEXPL0RER(1).VBS
不能算病毒吧
UPX.EXE
这个是没问题的，正常upx
AtiCimUn.exe
运行后antivir搞定一个，但是觉得有问题，上报了

显示全部楼层 · 发表于 2007-4-18 07:29:13

原帖由 Oceanzd 于 2007-4-18 05:54 发表
各位看看～～

AVAST第一个没报
第二个报了

显示全部楼层 · 发表于 2007-4-18 07:29:47

原帖由 Oceanzd 于 2007-4-18 05:54 发表
各位看看～～

第三个

显示全部楼层 · 发表于 2007-4-18 07:30:20

原帖由 Oceanzd 于 2007-4-18 05:54 发表
各位看看～～

第四个

显示全部楼层 · 发表于 2007-4-18 07:31:34

原帖由 Oceanzd 于 2007-4-18 05:54 发表
各位看看～～

第5个没报,第6个报

显示全部楼层 · 发表于 2007-4-18 07:32:15

原帖由 Oceanzd 于 2007-4-18 05:54 发表
各位看看～～

7

显示全部楼层 · 发表于 2007-4-18 07:37:35

木马名称:Trojan-PSW.Win32.OnLineGames.azr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\C0NIME.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.WOW.anl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\BYETMR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.bww

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\IEXPL0RER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.Agent.byj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77169\RUNDL132.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] Temp文件夹发现的～～

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源