HOST.exe 更新 x 9

cbz107

1、2、4、5、9
费尔托斯特
扫描：不报
动态防御：不敢运行
执行：上报

其余，全杀！

ssy275

Result: 2 malware found
Trojan-PSW.Win32.Agent.nr (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082804.rar\host8.exe
Trojan-PSW.Win32.OnLineGames.aqv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082804.rar\host3.exe

浪滔天

原帖由 wangjay1980 于 2007-8-28 17:43 发表
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\082804.rar/host5.exe//PE_Patch.UPX
detected: Trojan program Trojan-PSW.Win32.Agent.nr         ...

剩下三个没报的卡巴7.0.0.125主动防御全部拦截：

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\host5.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\host8.exe : infected Trojan.MulDrop.8433
C:\Documents and Settings\uhthn\Desktop\virus\host9.exe : infected Trojan.MulDrop.5969
C:\Documents and Settings\uhthn\Desktop\virus\host2.exe : infected MalwareScope.Trojan-PSW.Game.7


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 9     
- scanned         : 0       -  scanned    : 0       - scanned     : 9     
- contain viruses : 0       -  infected   : 0       - infected    : 4     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0     


Uhthn Anti-Spyware V3 Alpha 漏了一只

C:\Documents and Settings\uhthn\Desktop\virus\host5.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\virus\host6.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\host7.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\host8.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\host9.exe - OK
C:\Documents and Settings\uhthn\Desktop\virus\host1.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\host2.exe - Suspicious of Trojan-Downloader.Win32.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\host3.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\host4.exe - Suspicious of Trojan-Spy.Win32.Delf.2

9 - scanned
0 - infected
8 - suspicious
0 - cured
0 - deleted

悠悠Ｗǒ╭心

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.XYOnline.gi
病毒： Trojan.PSW.Win32.WoWar.vd
病毒： Trojan.PSW.Win32.JHOnline.faq
病毒： Trojan.Win32.Agent.vul   
病毒： Trojan.PSW.Win32.XYOnline.gh

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.38.12

l784588

已删除: 木马程序 Trojan-PSW.Win32.Agent.nr        文件: C:\Documents and Settings\Administrator\桌面\082804.rar/host8.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.aqv        文件: C:\Documents and Settings\Administrator\桌面\082804.rar/host3.exe

碧水寒潭

Start of the scan: 2007年8月28日  21:53

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\082804.rar
  [0] Archive type: RAR
  --> host5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> host6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> host7.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> host8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.BBF.2
  --> host9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> host1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.YS
  --> host2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.43638
  --> host3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> host4.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年8月28日  21:53
Used time: 00:11 min

The scan has been done completely.

      1 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

微点卫士

驱逐舰9个

我自逍遥

用AntiVirusKit扫描病毒
版本 16.0.7
病毒库签名
开始时间: 2007-8-29 1:00
引擎: BD  引擎 (BD 17.4904)
启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: host5.exe
        在压缩档案里: D:\Documents and Settings\Administrator\桌面\082804.rar
        Status: 已发现病毒
        病毒: Generic.PWS.Games.4.CA5F75BB (BD  引擎)
对象: host9.exe
        在压缩档案里: D:\Documents and Settings\Administrator\桌面\082804.rar
        Status: 已发现病毒
        病毒: Packer.Malware.NSAnti.H (BD  引擎)
对象: host1.exe
        在压缩档案里: D:\Documents and Settings\Administrator\桌面\082804.rar
        Status: 已发现病毒
        病毒: DeepScan:Generic.Dld.Agent.1823EEA1 (BD  引擎)
对象: host2.exe
        在压缩档案里: D:\Documents and Settings\Administrator\桌面\082804.rar
        Status: 已发现病毒
        病毒: Generic.PWStealer.CC60C67D (BD  引擎)
对象: host4.exe
        在压缩档案里: D:\Documents and Settings\Administrator\桌面\082804.rar
        Status: 已发现病毒
        病毒: DeepScan:Generic.Dld.Agent.011BB943 (BD  引擎)
对象: 082804.rar
        路径: D:\Documents and Settings\Administrator\桌面
        Status: 已发现病毒
        病毒: Generic.PWS.Games.4.CA5F75BB, Packer.Malware.NSAnti.H, DeepScan:Generic.Dld.Agent.1823EEA1, Generic.PWStealer.CC60C67D, DeepScan:Generic.Dld.Agent.011BB943 (BD  引擎)
分析完毕: 2007-8-29 1:00
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件

capsshift

红伞报了。
Found a virus or unwanted program 'TR/SPY.Delf.AB' [trojan]
in file 'C:\Documents and Settings\****\桌面\082804.rar'.
Action taken:
The file was moved to "47084921.qua"!