[MD5: 41371A 5B22EE F2A3C5 F68B38 DC6F59]

qianwenxiang

servciese.exe\[eXPressor] | Win32:Agent-GZY [Wrm]
servciesa.exe | Win32:Klone-CB [Trj]
serivcesb.exe\[eXPressor] | Win32:Delf-DNR [Trj]

The EQs

Scan performed at: 2007-8-14 12:19:59
Scanning Log
NOD32 version 2458 (20070813) NT
Command line: C:\Documents and Settings\EQ2\桌面\0801405.rar
Operating memory - is OK

Date: 14.8.2007  Time: 12:20:05
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\0801405.rar
C:\Documents and Settings\EQ2\桌面\0801405.rar ?RAR ?sevricesc.exe - a variant of Win32/Agent.NEJ trojan
C:\Documents and Settings\EQ2\桌面\0801405.rar ?RAR ?servciese.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\0801405.rar ?RAR ?servciesa.exe - Win32/Small.OO trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\0801405.rar ?RAR ?serivcesb.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 6
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 12:20:15 Total scanning time: 10 sec (00:00:10)

Notes:
[7] File is probably infected with an unknown virus.

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.bvi        File: C:\Documents and Settings\Owner\×ÀÃæ\0801405.rar/sevricesc.exe
detected: riskware not-a-virus:Downloader.Win32.WinFixer.u        File: C:\Documents and Settings\Owner\×ÀÃæ\0801405.rar/serviecsd.exe//PE_Patch
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\0801405.rar/servciese.exe//Expressor
detected: Trojan program Backdoor.Win32.Agent.ajq        File: C:\Documents and Settings\Owner\×ÀÃæ\0801405.rar/servciesa.exe
detected: riskware not-a-virus:Downloader.Win32.WinFixer.u        File: C:\Documents and Settings\Owner\×ÀÃæ\0801405.rar/serivcesb.exe//PE_Patch

残缺的唯美

--> sevricesc.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> serviecsd.exe
        [DETECTION] Contains signature of the Windows virus W32/Henky.Tanzen
        [WARNING]   Infected files in archives cannot be repaired!
    --> servciese.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> servciesa.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> serivcesb.exe
        [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '46f12fea.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!
5个

碧水寒潭

红伞:5个Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\0801405.rar
  [0] Archive type: RAR
  --> sevricesc.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> serviecsd.exe
      [DETECTION] Contains signature of the Windows virus W32/Henky.Tanzen
  --> servciese.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> servciesa.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> serivcesb.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!

woai_jolin

Scan duration: 00:00:03

Scan areas:
F:\v\n\0801405.rar  - recursive

Objects
-------------------
Scanned          6         Disinfected      0
Infected         0         Deleted          0
Suspicious       1         Quarantined      0

Error(s) occurred during the scan: 0

tracydk

3个

tracydk

有一个毒看来是猛壳啊,杀软门都脱不鸟

tracydk

红伞又是这样的报壳/...

微点卫士

微点：
木马名称:Trojan-Downloader.Win32.Agent.jcj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SEVRICESC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Small.lv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVCIESA.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bhf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERIVCESB.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVCIESE.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SERVCIESE.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERVIECSD.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\BRC_SERVER.EXE
是否删除木马程序及其衍生物?