山丽在线

显示全部楼层 · 发表于 2007-5-9 18:29:49

快杀

显示全部楼层 · 发表于 2007-5-9 18:31:13

又是广告

还有一个脚本

显示全部楼层 · 发表于 2007-5-9 18:31:31

Scanning Log
NOD32 version 2251 (20070509) NT
Command line: C:\Documents and Settings\fengyeyin\桌面\桌. ?
?rar
Checking CRC of NOD32.EXE: Status OK
d:\Program Files\Eset\nod32.exe - is OK
Scanning memory: Not performed (option disabled)
Scanning MBR and boot sectors: Not performed (option  ?
?disabled)
Date: 9.5.2007  Time: 18:31:15
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and  ?
?Settings\fengyeyin\桌面\桌.rar
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??windows[1].js - JS/TrojanDownloader.IstBar.G trojan
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??KSCOnline.INI - is OK
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??KAEMalDt.DLL - is OK
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??bxei.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??dzgk.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\桌.rar ?RAR  ?
??gcjn.dll - is OK
C:\Documents and Settings\fengyeyin\桌面\桌.rar:Zone. ?
?Identifier - is OK
Number of scanned files: 7
Number of threats found: 1
Time of completion: 18:31:15 Total scanning time: 0 sec  ?
?(00:00:00)

显示全部楼层 · 发表于 2007-5-9 18:32:17

nod只报了一个脚本
TrojanDownloader

显示全部楼层 · 发表于 2007-5-9 18:33:19

显示全部楼层 · 发表于 2007-5-9 18:35:15

BitDefender Antivirus Plus v10
桌.rar=>windows[1].js Infected: Trojan.Downloader.JS.Istbar.B

显示全部楼层 · 发表于 2007-5-9 18:40:01

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年5月9日18时39分54秒开始查杀C:\Documents and Settings\Administrator\桌面\0705XX\桌
威胁性文件：C:\Documents and Settings\Administrator\桌面\0705XX\桌\bxei.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\0705XX\桌\dzgk.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\0705XX\桌\gcjn.dll
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年5月9日18时39分57秒收起线程…100% 查杀完毕！
扫描文件：4查杀病毒：3

显示全部楼层 · 发表于 2007-5-9 19:16:42

Begin scan in 'D:\Documents and Settings\dell\桌面\桌.rar'
D:\Documents and Settings\dell\桌面\桌.rar
  [0] Archive type: RAR
  --> windows[1].js
   [DETECTION] Contains signature of the exploits EXP/Agent.B
  --> bxei.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
  --> dzgk.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
  --> gcjn.dll
   [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.XSS.2
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-9 19:31:10

4个

显示全部楼层 · 发表于 2007-5-9 19:42:42

detected: adware not-a-virus:AdWare.Win32.Boran.z File: C:\Documents and Settings\Owner\×ÀÃæ\×À.rar/bxei.dll
detected: adware not-a-virus:AdWare.Win32.Boran.z File: C:\Documents and Settings\Owner\×ÀÃæ\×À.rar/dzgk.dll
detected: adware not-a-virus:AdWare.Win32.Boran.z File: C:\Documents and Settings\Owner\×ÀÃæ\×À.rar/gcjn.dll

山丽在线

本帖子中包含更多资源

MCAFEE报：Adware-Boran.gen (Adware)

本帖子中包含更多资源