木马

显示全部楼层 · 发表于 2007-5-18 16:12:19

木马木马木马木马木马木马木马木马木马木马木马

显示全部楼层 · 发表于 2007-5-18 16:13:54

Starting the file scan:

Begin scan in 'F:\样本\末知1.zip'
F:\样本\末知1.zip
  [0] Archive type: ZIP
  --> Ä©Öª/d9.exe
   [DETECTION] Is the Trojan horse TR/Agent.ATK
  --> Ä©Öª/svchost.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.EB.3
   [INFO]    The file was deleted!
Begin scan in 'F:\样本\末知2.zip'
F:\样本\末知2.zip
  [0] Archive type: ZIP
--> Ä©Öª/1000zmg.rar
   [1] Archive type: RAR
   --> 1000zmg\ÂÌÈí»ùµØ×£¸£Äã£Ê¥µ®½Ú¿ìÀÖ.EXE
      [DETECTION] Contains code of the Windows virus W32/Downloader.c
   [INFO]    The file was deleted!
Begin scan in 'F:\样本\末知22.zip'
F:\样本\末知22.zip
  [0] Archive type: ZIP
  --> Ä©Öª/system/logo_1.exe
   [DETECTION] Is the Trojan horse TR/Agent.15620
  --> Ä©Öª/01/7.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.120
   [INFO]    The file was deleted!

End of the scan: 2007年5月18日  16:13
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   39 Files were scanned
   5 viruses and/or unwanted programs were found
   0 classified as suspicious:
   3 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   34 Files not concerned
   4 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-5-18 16:45:11

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-5-17
开始时间: 2007-5-18 16:44
引擎: KAV 引擎 (AVK 17.3590), BD 引擎 (BD 17.3393)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 末知 nlww.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\末知1.zip
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: 末知 qoss.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\末知1.zip
Status: 已发现病毒
病毒: not-a-virus:AdWare.Win32.Boran.z (KAV 引擎)
对象: 末知 svchost.exe
在压缩档案里: C:\Documents and Settings\Administrator\桌面\末知1.zip
Status: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.gm (KAV 引擎)
对象: 末知1.zip
路径: C:\Documents and Settings\Administrator\桌面
Status: 病毒文件已删除
病毒: not-a-virus:AdWare.Win32.Boran.z (2x), Trojan-PSW.Win32.OnLineGames.gm (KAV 引擎)
扫描完成: 2007-5-18 16:44
已检查 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-5-17
开始时间: 2007-5-18 16:44
引擎: KAV 引擎 (AVK 17.3590), BD 引擎 (BD 17.3393)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 末知/system logo_1.exe
在压缩档案里: C:\Documents and Settings\Administrator\桌面\末知22.zip
Status: 已发现病毒
病毒: Virus.Win32.Delf.bl (KAV 引擎)
对象: 末知22.zip
路径: C:\Documents and Settings\Administrator\桌面
Status: 病毒文件已删除
病毒: Virus.Win32.Delf.bl (KAV 引擎)
扫描完成: 2007-5-18 16:44
已检查 1 个文件
已发现 1 个染毒文件

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-5-17
开始时间: 2007-5-18 16:44
引擎: KAV 引擎 (AVK 17.3590), BD 引擎 (BD 17.3393)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 末知/1000zmg.rar/1000zmg 绿软基地祝福你－圣诞节快乐.EXE
在压缩档案里: C:\Documents and Settings\Administrator\桌面\末知2.zip
Status: 已发现病毒
病毒: Virus.Win32.Downloader.c (KAV 引擎)
对象: 末知2.zip
路径: C:\Documents and Settings\Administrator\桌面
Status: 病毒文件已删除
病毒: Virus.Win32.Downloader.c (KAV 引擎)
扫描完成: 2007-5-18 16:44
已检查 1 个文件
已发现 1 个染毒文件

显示全部楼层 · 发表于 2007-5-18 16:45:49

nod32全灭

显示全部楼层 · 发表于 2007-5-18 16:46:45

显示全部楼层 · 发表于 2007-5-18 17:34:32

已检测到: 广告软件 not-a-virus:AdWare.Win32.Boran.z URL: http://bbs.kafan.cn/attachment.php?aid=72080//末知/nlww.dll
已检测到: 病毒 Virus.Win32.Delf.bl URL: http://bbs.kafan.cn/attachment.php?aid=72079//末知/system/logo_1.exe//UPack
已检测到: 病毒 Virus.Win32.Downloader.c URL: http://bbs.kafan.cn/attachment.php?aid=72078//末知/1000zmg.rar//1000zmg/绿软基地祝福你－圣诞节快乐.EXE

显示全部楼层 · 发表于 2007-5-18 18:11:17

NOD32 4个 ..

[ 本帖最后由 hj5abc 于 2007-5-18 18:30 编辑 ]

显示全部楼层 · 发表于 2007-5-18 18:13:07

卡巴全杀

显示全部楼层 · 发表于 2007-5-18 18:31:28

MCAFEE干掉5个，有广告，有木马，还有报熊猫烧香病毒的呢

显示全部楼层 · 发表于 2007-5-18 18:33:48

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-5-17, 2:20

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\末知22.zip|C:\Documents and Settings\Administrator\桌面\末知2.zip|C:\Documents and Settings\Administrator\桌面\末知1.zip

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-5-18, 18:32:11
---------------------------------------------------------------------

[Found possible virus] <W32/Threat-HLLSI-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\末知22.zip->末知/system/logo_1.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\末知22.zip
[Quarantined] C:\Documents and Settings\Administrator\桌面\末知22.zip->末知/01/SVCHOST1.EXE　
[Found adware] <W32/Adware.JIF (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\末知1.zip->末知/nlww.dll
[Found adware] <W32/Adware.JLR (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\末知1.zip->末知/qoss.dll
[Found password stealer] <W32/PWStealer.IRG (exact, not disinfectable)> C:\Documents and Settings\Administrator\桌面\末知1.zip->末知/svchost.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\末知1.zip
[Quarantined] C:\Documents and Settings\Administrator\桌面\末知1.zip->末知/svchost.exe

---------------------------------------------------------------------
Scan ended: 2007-5-18, 18:32:12
Duration: 0:00:01

Scan result:

Scanned files:    3
Infected objects:    4
Disinfected objects:    0
Quarantined files:    2
---------------------------------------------------------------------

[病毒样本] 木马

本帖子中包含更多资源

5个

本帖子中包含更多资源