3只【be29be 3c166c 1da8a5】

欠妳緈諨

The EQs

Scan performed at: 2007-8-24 10:50:57
Scanning Log
NOD32 version 2481 (20070823) NT
Command line: C:\Documents and Settings\Don johnson\桌面\3.rar
Operating memory - is OK

Date: 24.8.2007  Time: 10:51:01
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\3.rar
C:\Documents and Settings\Don johnson\桌面\3.rar ?RAR ?vedxg3am1et3.exe - a variant of Win32/Nuwar.AJ worm
C:\Documents and Settings\Don johnson\桌面\3.rar ?RAR ?li01.exe ?NSIS ?Local.dll - Win32/TrojanDownloader.Agent.NQH trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\3.rar ?RAR ?load1.exe - Win32/Virut.NAJ virus - was a part of the deleted object
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 10:51:02 Total scanning time: 1 sec (00:00:01)

sb

NOD32通杀   Win32/Nuwar.AJ 蠕虫 变种   Win32/TrojanDownloader.Agent.NQH 木马       Win32/Virut.NAJ 病毒

promised

C:\ABC\3\li01.exe - 特征码 'not-a-virus:AdWare.Win32.NewWeb.i' 被发现
C:\ABC\3\load1.exe - 特征码 'Backdoor.Win32.IRCBot.adb' 被发现
C:\ABC\3\vedxg3am1et3.exe - 特征码 'Email-Worm.Win32.Zhelatin.gm' 被发现

        3 文件被扫描
          (0 压缩档 0 文件)
        3 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.016

微点卫士

微点：
蠕虫名称:Email-Worm.Win32.Zhelatin.zf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VEDXG3AM1ET3.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.IRCBot.ajz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LOAD1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Agent.jaj

程序:
C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\LOCAL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LI01.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\LOCALSERVICE\LOCAL SETTINGS\APPLICATION DATA\MICROSOFT\WINDOWS\LOCAL.DLL
是否删除木马程序及其衍生物?

taihuxian

Result: 3 malware found
Email-Worm.Win32.Zhelatin.gm (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\3.rar\vedxg3am1et3.exe
AdWare.Win32.NewWeb.i (adware)
C:\Documents and Settings\Administrator\×ÀÃæ\3.rar\li01.exe
Backdoor.Win32.IRCBot.adb (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\3.rar\load1.exe

woai_jolin

2007-8-24 11:13:24        Scanning Log
2007-8-24 11:13:24        Version of virus signature database: 2481 (20070823)
2007-8-24 11:13:24        Date: 24.8.2007  Time: 11:13:24
2007-8-24 11:13:24        Scanned disks, folders and files: F:\v\3.rar
2007-8-24 11:13:27        F:\v\3.rar » RAR » vedxg3am1et3.exe - a variant of Win32/Nuwar.AJ worm
2007-8-24 11:13:27        F:\v\3.rar » RAR » li01.exe » NSIS » Local.dll - Win32/TrojanDownloader.Agent.NQH trojan
2007-8-24 11:13:27        F:\v\3.rar » RAR » load1.exe - Win32/Virut.NAJ virus
2007-8-24 11:13:27        Number of scanned files: 5
2007-8-24 11:13:27        Number of threats found: 3
2007-8-24 11:13:27        Time of completion: 11:13:27  Total scanning time: 3 sec (00:00:03)

Love=卡巴+费尔

KIS7

king6808

AhnLab-V3 2007.8.22.0 2007.08.24 -
AntiVir 7.4.1.63 2007.08.23 TR/Crypt.ULPM.Gen
Authentium 4.93.8 2007.08.23 W32/Worm.FRZ
Avast 4.7.1029.0 2007.08.24 -
AVG 7.5.0.484 2007.08.23 Win32/PEPatch
BitDefender 7.2 2007.08.24 Trojan.Peed.IDQ
CAT-QuickHeal 9.00 2007.08.23 (Suspicious) - DNAScan
ClamAV 0.91 2007.08.24 W32.Virut.Gen.B-50
DrWeb 4.33 2007.08.23 -
eSafe 7.0.15.0 2007.08.23 Win32.Zhelatin.gm
eTrust-Vet 31.1.5083 2007.08.24 -
Ewido 4.0 2007.08.23 Downloader.QQHelper.es
FileAdvisor 1 2007.08.24 -
Fortinet 2.91.0.0 2007.08.24 Adware/NewWeb
F-Prot 4.3.2.48 2007.08.23 W32/Worm.FRZ
F-Secure 6.70.13030.0 2007.08.24 Backdoor.Win32.IRCBot.adb
Ikarus T3.1.1.12 2007.08.24 Email-Worm.Win32.Zhelatin.gm
Kaspersky 4.0.2.24 2007.08.24 Email-Worm.Win32.Zhelatin.gm
McAfee 5104 2007.08.23 New Malware.fa
Microsoft 1.2803 2007.08.24 Virus:Win32/Virut.I
NOD32v2 2481 2007.08.24 a variant of Win32/Nuwar.AJ
Norman 5.80.02 2007.08.23 -
Panda 9.0.0.4 2007.08.24 Trj/Alanchum.MV
Prevx1 V2 2007.08.24 -
Rising 19.37.41.00 2007.08.24 Trojan.Win32.Agent.ld
Sophos 4.20.0 2007.08.24 Mal/HckPk-A
Sunbelt 2.2.907.0 2007.08.24 Trojan.Vxgame.z
Symantec 10 2007.08.24 -
TheHacker 6.1.8.172 2007.08.24 W32/Zhelatin.gm
VBA32 3.12.2.3 2007.08.23 Email-Worm.Win32.Zhelatin.gm
VirusBuster 4.3.26:9 2007.08.23 Backdoor.IRCBot.BDY
Webwasher-Gateway 6.0.1 2007.08.24 Trojan.Crypt.ULPM.Gen

碧水寒潭

Start of the scan: 2007年8月24日  14:27

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\3.rar
  [0] Archive type: RAR
  --> vedxg3am1et3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> load1.exe
      [DETECTION] Contains code of the Windows virus W32/Virut.P
      [INFO]      The file was deleted!


End of the scan: 2007年8月24日  14:27
Used time: 00:13 min