一包

foxhound

原帖由 欠你幸福 于 2007-7-12 01:05 发表
AVGAS本来就不是杀软

你看咖啡报的全是木马啊~~~~~~~~

蓝色牛仔裤

d:\123\样本\1012.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
d:\123\样本\1093.exe - Signature 'Trojan-Downloader.Win32.Banload.ami' found
d:\123\样本\19008.exe - Signature 'Trojan-Downloader.26574' found
d:\123\样本\2209.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
d:\123\样本\62205.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
d:\123\样本\70172.exe - Signature 'Trojan-PWS.Win32.Nilage.bga' found
d:\123\样本\80325.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
d:\123\样本\cc_231.exe - Signature 'Trojan-PWS.Win32.Agent.BU' found
d:\123\样本\dodolook264.exe - Signature 'not-a-virus:AdWare.Win32.Cinmus.f' found
d:\123\样本\down.exe - Signature 'Trojan-PWS.Win32.QQPass.pb' found
d:\123\样本\down0.exe - Signature 'Trojan-PWS.Win32.Delf.mc' found
d:\123\样本\downloader1.exe - Signature 'Trojan-Downloader.Win32.Cryptic.c' found
d:\123\样本\go.exe - Signature 'Trojan-PWS.Win32.QQPass.pb' found
d:\123\样本\host.exe - Signature 'not-a-virus:AdWare.Win32.Agent.ck' found
d:\123\样本\pv0009.exe - Signature 'Backdoor.Win32.GrayBird.lc' found
d:\123\样本\pv0018.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
d:\123\样本\s.exe
d:\123\样本\sms.exe - Signature 'Trojan.Delf.NEB' found
d:\123\样本\soft.exe - Signature 'MalwareScope.Backdoor.Hupigon.3' found

        19 Files scanned
          (0 Archives with 0 files)
        18 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.391

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.part1.rar'
F:\病毒样本\样本.part1.rar
  [0] Archive type: RAR
  --> Ñù±¾\down0.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
  --> Ñù±¾\soft.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> Ñù±¾\sms.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27415
  --> Ñù±¾\pv0018.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> Ñù±¾\pv0009.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> Ñù±¾\host.exe
      [DETECTION] Contains signature of the dropper DR/Agent.BZ.7
  --> Ñù±¾\downloader1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!
Begin scan in 'F:\病毒样本\样本.part2.rar'
F:\病毒样本\样本.part2.rar
  [0] Archive type: RAR
  --> Ñù±¾\cc_231.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Ñù±¾\80325.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Ñù±¾\70172.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> Ñù±¾\62205.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.714 Backdoor server programs
  --> Ñù±¾\2209.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Ñù±¾\19008.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Ñù±¾\1093.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> Ñù±¾\1012.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Ñù±¾\down.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
  --> Ñù±¾\go.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
      [INFO]      The file was deleted!


End of the scan: 2007年7月12日  07:47
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     22 Files were scanned
     17 viruses and/or unwanted programs were found
      5 classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

jimmyleo

呵呵~ 用上了啊~

wangjay1980

detected: Trojan program Trojan-PSW.Win32.Delf.wh        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\down0.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\soft.exe//hmimys
detected: Trojan program Trojan-Spy.Win32.Delf.vr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\sms.exe//UPX
detected: Trojan program Trojan-Downloader.Win32.Obfuscated.bz        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\pv0009.exe//PV0009.EXE//PE_Patch//UPack
detected: adware not-a-virus:AdWare.Win32.Agent.ck        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\host.exe
detected: Trojan program Trojan-Downloader.Win32.Cryptic.gen        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\downloader1.exe
detected: adware not-a-virus:AdWare.Win32.Cinmus.j        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\dodolook264.exe//data0003//data0003
detected: adware not-a-virus:AdWare.Win32.Cinmus.j        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\dodolook264.exe//data0003//data0004
detected: Trojan program Trojan.BAT.KillAV.es        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\80325.exe//GGKB.BAT
detected: Trojan program Trojan-Downloader.Win32.Agent.bbb        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\70172.exe//IEXPLORER.EXE
detected: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\62205.exe
detected: Trojan program Trojan.BAT.KillAV.es        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\2209.exe//GGKB.BAT
detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\1093.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\1012.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\down.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾\go.exe

promised

s.exe不是有效的win32程序~

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Agent.idn   
病毒： Trojan.DL.Win32.Agent.wsg
病毒： Trojan.IMMSG.Win32.TBMSG.ht
病毒： Worm.Win32.Delf.ysg      
病毒： Trojan.DL.Win32.Delf.yqo
病毒： Worm.Win32.Delf.ysd      
病毒： Trojan.DL.Small.sdd      
病毒： Dropper.Win32.Agent.b   
病毒： Trojan.DL.Win32.Agent.wlr
病毒： Trojan.PSW.Win32.QQPass.qks
病毒： Worm.Win32.Agent.yu      

用户来源：互联网

软件版本：19.31.30

rasis

1012.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
1093.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING]   The file was ignored!
19008.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
2209.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
62205.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.714 Backdoor server programs
      [WARNING]   The file was ignored!
70172.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!
80325.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
cc_231.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
dodolook264.exe
      [DETECTION] Contains signature of the dropper DR/Cinmus.J.187
      [WARNING]   The file was ignored!
down.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
      [WARNING]   The file was ignored!
down0.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
      [WARNING]   The file was ignored!
downloader1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING]   The file was ignored!
go.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
      [WARNING]   The file was ignored!
host.exe
      [DETECTION] Contains signature of the dropper DR/Agent.BZ.7
      [WARNING]   The file was ignored!
pv0009.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
pv0018.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
      [WARNING]   The file was ignored!
sms.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27415
      [WARNING]   The file was ignored!
soft.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!


End of the scan: 2007年7月12日  14:04
Used time: 00:13 min

The scan has been done completely.

      1 Scanning directories
     19 Files were scanned
     18 viruses and/or unwanted programs were found
      5 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -4 Files not concerned
      0 Archives were scanned
     18 Warnings
      0 Notes
      0 Hidden objects were found

barth

费尔正常设置10个