继续一堆

碧水寒潭

红伞:10个Start of the scan: 2007年8月14日  21:35

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\Suspicious1.rar
  [0] Archive type: RAR
  --> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 79D9F6B8.DLL
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> 1228dd.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Agent.bys.4
  --> 51416FFE.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> aabb.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bys
  --> cc_231[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> cdnprh.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.HU.2
  --> D777DBD0.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> downloader1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> ga.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.15671.B
      [INFO]      The file was deleted!


End of the scan: 2007年8月14日  21:36
Used time: 00:20 min

The scan has been done completely.

      1 Scanning directories
     18 Files were scanned
     10 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

hj5abc

Scan performed at: 2007-8-14 22:59:03
Scanning Log
NOD32 version 2459 (20070814) NT
Command line: F:\Suspicious1.rar
Operating memory - is OK

Date: 14.8.2007  Time: 22:59:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\Suspicious1.rar
F:\Suspicious1.rar ?RAR ?0.exe - probably a variant of Win32/Agent.NEO trojan
F:\Suspicious1.rar ?RAR ?79D9F6B8.DLL - probably a variant of Win32/Agent.NEO trojan
F:\Suspicious1.rar ?RAR ?1228dd.exe ?NSIS ?aabb.exe - Win32/TrojanDownloader.Agent.BYS trojan
F:\Suspicious1.rar ?RAR ?51416FFE.EXE - probably a variant of Win32/Agent.NEO trojan
F:\Suspicious1.rar ?RAR ?aabb.exe - Win32/TrojanDownloader.Agent.BYS trojan
F:\Suspicious1.rar ?RAR ?cc_231[1].exe - probably a variant of Win32/Genetik trojan
F:\Suspicious1.rar ?RAR ?D777DBD0.EXE - probably a variant of Win32/Agent.NEO trojan
F:\Suspicious1.rar ?RAR ?downloader1.exe - Win32/TrojanDownloader.VB.APY trojan
F:\Suspicious1.rar ?RAR ?ga.exe - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 19
Number of threats found: 9
Number of files cleaned: 1
Time of completion: 22:59:08 Total scanning time: 2 sec (00:00:02)

uhthn2002

C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\0.exe : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\79D9F6B8.DLL : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\51416FFE.EXE : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\aabb.exe : infected Trojan-Downloader.Win32.Agent.bys
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\D777DBD0.EXE : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\downloader1.exe : infected Trojan-Downloader.Win32.Cryptic.gen
C:\Documents and Settings\uhthn\Desktop\Suspicious1.rar:<RAR>\ga.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 17      - total       : 1     
- scanned         : 1       -  scanned    : 17      - scanned     : 1     
- contain viruses : 1       -  infected   : 2       - infected    : 1     
- deleted         : 0       -  suspicious : 5       - suspicious  : 0

英仔

woai_jolin

===================================================================================================
Norman Virus Control On-demand scanner 7.0.0.9

NSE revision 5.91.04
nvcbin.def revision 5.90.00 of 2007/08/09 20:07:15 (824384 variants)
nvcmacro.def revision 5.90.00 of 2007/08/06 19:46:49 (20358 variants)
Total number of variants: 844742
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: F:\
- Scanning system areas of drive: F:\
- Scanning files in the directory: F:\v\v1\
       16 ms F:\v\v1\0.exe                                                Trojan Hupigon.gen66 ()
- File F:\v\v1\0.exe quarantined.
- File F:\v\v1\0.exe deleted.
       15 ms F:\v\v1\1228dd.exe                                           Trojan W32/Agent.AMIS ()
- File F:\v\v1\1228dd.exe quarantined.
- File F:\v\v1\1228dd.exe deleted.
        0 ms F:\v\v1\51416FFE.EXE                                         Trojan Hupigon.gen66 ()
- File F:\v\v1\51416FFE.EXE quarantined.
- File F:\v\v1\51416FFE.EXE deleted.
        0 ms F:\v\v1\79D9F6B8.DLL                                       
      250 ms F:\v\v1\aabb.exe                                            
        0 ms F:\v\v1\cc_231[1].exe                                        Trojan Hupigon.gen66 ()
- File F:\v\v1\cc_231[1].exe quarantined.
- File F:\v\v1\cc_231[1].exe deleted.
       15 ms F:\v\v1\cdnprh.dll                                           Trojan W32/Tiny.ALQ ()
- File F:\v\v1\cdnprh.dll quarantined.
- File F:\v\v1\cdnprh.dll deleted.
        0 ms F:\v\v1\cnprov.dat                                          
        0 ms F:\v\v1\concmd.dll                                          
        0 ms F:\v\v1\D777DBD0.EXE                                         Trojan Hupigon.gen66 ()
- File F:\v\v1\D777DBD0.EXE quarantined.
- File F:\v\v1\D777DBD0.EXE deleted.
       16 ms F:\v\v1\de89_appcompat.txt                                 
      125 ms F:\v\v1\downloader1.exe                                    
      141 ms F:\v\v1\ga.exe                                             
        0 ms F:\v\v1\ga.vbs                                             
       47 ms F:\v\v1\idnaux.sys                                          
        0 ms F:\v\v1\idnreg.dll                                          
        0 ms F:\v\v1\_Ms.bat                                             

===================================================================================================

The scanning started: 2007/08/15 08:41:15
               ended: 2007/08/15 08:41:16
Logged on as        : Administrator
on hostname         : 2FF87FC2B9AB46F

Scanning results:
   Total number of files found..............................:      17
   Number of files scanned..................................:      17
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       6

Copyright (c) 1993-2005 Norman ASA.

gho

已删除: 木马程序 Trojan-Downloader.Win32.Cryptic.gen        文件: C:\Documents and Settings\gho\桌面\downloader1.exe
已删除: 木马程序 Trojan.VBS.Runner.w        文件: C:\Documents and Settings\gho\桌面\ga.vbs
已删除: 木马程序 Trojan-Downloader.Win32.Agent.bys        文件: C:\Documents and Settings\gho\桌面\aabb.exe
2007-8-15        13:22:11        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\0.exe        New Malware.dm (Trojan)
2007-8-15        13:22:11        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\79D9F6B8.DLL        BackDoor-DKA (Trojan)
2007-8-15        13:22:11        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\51416FFE.EXE        New Malware.dm (Trojan)
2007-8-15        13:22:11        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\cc_231[1].exe        New Malware.dm (Trojan)
2007-8-15        13:22:12        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\D777DBD0.EXE        New Malware.dm (Trojan)
2007-8-15        13:22:12        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\ga.exe        PWS-QQPass.dll (Trojan)

taihuxian

Virus: Win32:Agent-HFX [Trj] (3x), Win32:Agent-JOF [Trj] (2x), Win32:Trojan-gen. {Other}, Win32:Agent-JQL [Trj], Win32:Cryptic-OV [Trj], Win32:Nilage-AI [Trj], Win32:Adware-gen. [Adw] (2x)

Virus found while downloading Web content.

Address: bbs.kafan.cn

398566384

RS2008 10个

rslw1996

金山７个

goodfish2002

kv2008 8个，费尔报10个