18个

wangjay1980

18
detected: Trojan program Backdoor.Win32.Hupigon.cir        File: E:\Ñù±¾\083102\virus (10).exe//SimplePack
detected: Trojan program Trojan-Downloader.Win32.Agent.cnm        File: E:\Ñù±¾\083102\virus (11).exe//PE_Patch//UPack
detected: Trojan program Trojan.BAT.TimeReset.c        File: E:\Ñù±¾\083102\virus (12).exe/hackxi.bat
detected: Trojan program Backdoor.Win32.Hupigon.cks        File: E:\Ñù±¾\083102\virus (12).exe/hackxi.exe//PE_Patch
detected: Trojan program Trojan-Downloader.Win32.Small.ege        File: E:\Ñù±¾\083102\virus (13).exe
detected: Trojan program Backdoor.Win32.Hupigon.cir        File: E:\Ñù±¾\083102\virus (14).exe//SimplePack
detected: Trojan program Backdoor.Win32.Hupigon.exc        File: E:\Ñù±¾\083102\virus (15).exe//PE-Armor//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
detected: Trojan program Trojan-Downloader.Win32.Agent.bpp        File: E:\Ñù±¾\083102\virus (16).exe
detected: Trojan program Trojan-PSW.Win32.Delf.qc        File: E:\Ñù±¾\083102\virus (17).exe//UPX
detected: Trojan program Backdoor.Win32.Hupigon.cks        File: E:\Ñù±¾\083102\virus (18).exe//PE_Patch
detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\083102\virus (2).exe
detected: Trojan program Trojan-PSW.Win32.Nilage.blg        File: E:\Ñù±¾\083102\virus (3).exe//PE_Patch//NSPack//PE_Patch
detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\083102\virus (4).exe
detected: Trojan program Backdoor.Win32.Hupigon.dsx        File: E:\Ñù±¾\083102\virus (5).exe
detected: Trojan program Backdoor.Win32.Hupigon.exc        File: E:\Ñù±¾\083102\virus (6).exe//PE-Armor//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
detected: Trojan program Backdoor.Win32.Banito.br        File: E:\Ñù±¾\083102\virus (7).exe//VPacker
detected: Trojan program Trojan-PSW.Win32.Delf.wh        File: E:\Ñù±¾\083102\virus (8).exe//#//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.Delf.wh        File: E:\Ñù±¾\083102\virus (9).exe//PE_Patch.UPX//UPX

The EQs

Scan performed at: 2007-8-31 23:10:19
Scanning Log
NOD32 version 2493 (20070831) NT
Command line: C:\Documents and Settings\Don johnson\桌面\083102
Operating memory - is OK

Date: 31.8.2007  Time: 23:10:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\083102\
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (10).exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (11).exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (12).exe ?ZIP ?hackxi.exe - Win32/Hupigon trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (13).exe - Win32/TrojanDownloader.Delf.NQX trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (14).exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (15).exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (16).exe - Win32/Delf.NDF worm - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (17).exe - Win32/PSW.Delf.NGO trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (18).exe - Win32/Hupigon trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (2).exe - a variant of Win32/PSW.Delf.NIY trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (3).exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (4).exe - a variant of Win32/PSW.Delf.NIY trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (5).exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (6).exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (7).exe - probably a variant of Win32/Pacex.Gen virus(NewHeur_PE) [7]
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (8).exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\083102\083102\virus (9).exe - probably a variant of Win32/PSW.Delf.NHI trojan
Number of scanned files: 21
Number of threats found: 17
Number of files cleaned: 17
Time of completion: 23:10:42 Total scanning time: 19 sec (00:00:19)

Notes:
[7] File is probably infected with an unknown virus.

zzm3145

费尔

[ 本帖最后由 zzm3145 于 2007-8-31 23:24 编辑 ]

hj5abc

eset将paceX.GEN又升级了？？？

Pacex.gen..还是未知的. 而且这个文件ess解压卡死..

The EQs

研究一下再说。。。。。。希望eset不要解释成专门针对邮件蠕虫的动态启发。。。

qqq000@qq.com

[凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.8.31 23:28:12

文件:F:\070801\083102\virus (11).exe | 感染:Trojan.DownLoader.31193 [355>20070830_ny0012.axx]2(1.1)
操作:删除文件
文件:F:\070801\083102\virus (13).exe | 感染:Trojan.MulDrop.5969 [5053>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\083102\virus (15).exe | 感染:virus [12597>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\083102\virus (16).exe | 感染:Trojan.PWS.Maran [367>20070816_ny0006.axx]3(2.2)
操作:删除文件
文件:F:\070801\083102\virus (17).exe | 感染:Trojan.PWS.Gamania [409>20070830_ny0012.axx]3(2.2)
操作:删除文件
文件:F:\070801\083102\virus (3).exe | 感染:Trojan.PSW.GamePass.ugx [28>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\083102\virus (6).exe | 感染:virus [12597>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\083102\virus (9).exe | 感染:Win32.HLLW.Autoruner.295 [106>20070819_ny0008.axx]3(5.6)
操作:清除病毒

扫描完成|病毒:8 文件:18|耗时:3545
----------

欠妳緈諨

15只

yashoo

已删除: 木马程序 Backdoor.Win32.Hupigon.cir        文件: E:\test\083102\083102\virus (10).exe//SimplePack
已删除: 木马程序 Trojan-Downloader.Win32.Agent.cnm        文件: E:\test\083102\083102\virus (11).exe//PE_Patch//UPack
已删除: 木马程序 Trojan.BAT.TimeReset.c        文件: E:\test\083102\083102\virus (12).exe/hackxi.bat
已删除: 木马程序 Backdoor.Win32.Hupigon.cks        文件: E:\test\083102\083102\virus (12).exe/hackxi.exe//PE_Patch
没有找到: 木马程序 Trojan-Downloader.Win32.Small.ege        文件: E:\test\083102\083102\virus (13).exe
没有找到: 木马程序 Backdoor.Win32.Hupigon.cir        文件: E:\test\083102\083102\virus (14).exe//SimplePack
没有找到: 木马程序 Backdoor.Win32.Hupigon.exc        文件: E:\test\083102\083102\virus (15).exe//PE-Armor//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
没有找到: 木马程序 Trojan-Downloader.Win32.Agent.bpp        文件: E:\test\083102\083102\virus (16).exe
没有找到: 木马程序 Trojan-PSW.Win32.Delf.qc        文件: E:\test\083102\083102\virus (17).exe//UPX
没有找到: 木马程序 Backdoor.Win32.Hupigon.cks        文件: E:\test\083102\083102\virus (18).exe//PE_Patch
已删除: 病毒 Heur.Downloader (变种)        文件: E:\test\083102\083102\virus (2).exe
没有找到: 木马程序 Trojan-PSW.Win32.Nilage.blg        文件: E:\test\083102\083102\virus (3).exe//PE_Patch//NSPack//PE_Patch
已删除: 病毒 Heur.Downloader (变种)        文件: E:\test\083102\083102\virus (4).exe
没有找到: 木马程序 Backdoor.Win32.Hupigon.dsx        文件: E:\test\083102\083102\virus (5).exe
没有找到: 木马程序 Backdoor.Win32.Hupigon.exc        文件: E:\test\083102\083102\virus (6).exe//PE-Armor//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
没有找到: 木马程序 Backdoor.Win32.Banito.br        文件: E:\test\083102\083102\virus (7).exe//VPacker
已检测到: 木马程序 Trojan-PSW.Win32.Delf.wh        文件: E:\test\083102\083102\virus (8).exe//#//PE_Patch.UPX//UPX
没有找到: 木马程序 Trojan-PSW.Win32.Delf.wh        文件: E:\test\083102\083102\virus (9).exe//PE_Patch.UPX//UPX

碧水寒潭

Start of the scan: 2007年9月1日  10:21

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\083102[1].part1.rar
  [0] Archive type: RAR
  --> 083102\virus (1).exe
      [DETECTION] Contains signature of the dropper DR/PcClient.Gen
  --> 083102\virus (10).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 083102\virus (11).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 083102\virus (12).exe
      [1] Archive type: ZIP SFX (self extracting)
      --> hackxi.exe
          [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.GU Backdoor server programs
  --> 083102\virus (13).exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 083102\virus (14).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 083102\virus (15).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 083102\virus (16).exe
      [DETECTION] Is the Trojan horse TR/Agent.28829
  --> 083102\virus (17).exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.25812
  --> 083102\virus (18).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.GU Backdoor server programs
  --> 083102\virus (2).exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 083102\virus (3).exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.blg
  --> 083102\virus (4).exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
H:\AV-TEST\083102[1].part2.rar
  [0] Archive type: RAR
  --> 083102\virus (6).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 083102\virus (7).exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 083102\virus (8).exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.10
  --> 083102\virus (9).exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.10
      [INFO]      The file was deleted!


End of the scan: 2007年9月1日  10:21
Used time: 00:25 min

The scan has been done completely.

      1 Scanning directories
     22 Files were scanned
     17 viruses and/or unwanted programs were found
      0 classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      3 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

红心王子

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.700
        病毒库日期 2007-09-01
        更新日期 2007-09-01

扫描目标 C:\Documents and Settings\Administrator\桌面\1\

开始时间 2007-09-01 10:28:33

在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (1).exe 中发现 Backdoor/PcClient.bjs 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (13).exe 中发现 Trojan/PSW.GamePass.pxr 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (10).exe 中发现 Backdoor/Huigezi.2007.irm 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (14).exe 中发现 Backdoor/Huigezi.2007.iro 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (16).exe 中发现 TrojanDownloader.Agent.llw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (17).exe 中发现 TrojanDownloader.Agent.hmi 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (18).exe 中发现 Backdoor/Huigezi.2006.bky 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (3).exe 中发现 Trojan/PSW.GamePass.ugx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (5).exe 中发现 Backdoor/Huigezi.2007.plz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (7).exe 中发现 Backdoor/Banito.bj 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (8).exe 中发现 Trojan/PSW.Agent.dxa 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\1\083102\virus (9).exe 中发现 Trojan/PSW.Delf.ahk 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :514                                 病毒体 :12        
                   删除 :12                                    解毒 :0         
    扫描速度(千字节/秒) :8258                              扫描时间 :00:00:17
    扫描文件速度(个/秒) :30