13个

qianwenxiang

[MD5: 6233A4 4DF1B8 CDCA6B 091B78 C6337E 90D41C 4E6B49 F5F2DB 5416D1 2156E3 ADA6A2 091B78 599C0C]

wangjay1980

detected: Trojan program Trojan-PSW.Win32.Maran.jg        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (2).exe
detected: virus Heur.Trojan.Generic        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (4).exe
detected: virus Worm.Win32.QQPass.c        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (5).exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.VB.avo        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (6).exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-PSW.Win32.Nilage.blg        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (8).exe//PE_Patch//NSPack//PE_Patch
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (9).exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (10).exe
detected: virus Worm.Win32.QQPass.m        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (11).exe//PE_Patch
detected: virus Worm.Win32.QQPass.m        File: E:\Ñù±¾\н¨Îļþ¼Ð (3)\virus (13).exe//PE_Patch

promised

C:\ABC\0903\virus (1).exe - 特征码 'Virus.Win32.Hupigon.BQO' 被发现
C:\ABC\0903\virus (10).exe - 特征码 'Trojan-PWS.Win32.QQPass.pb' 被发现
C:\ABC\0903\virus (11).exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\0903\virus (12).exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\0903\virus (13).exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\0903\virus (2).exe - 特征码 'Generic.PWStealer' 被发现
C:\ABC\0903\virus (3).exe - 特征码 'Trojan-Downloader.Win32.VB.avo' 被发现
C:\ABC\0903\virus (4).exe - 特征码 'Trojan-PWS.Win32.Nilage.lp' 被发现
C:\ABC\0903\virus (5).exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\0903\virus (6).exe - 特征码 'Trojan-Downloader.Win32.VB.avo' 被发现
C:\ABC\0903\virus (7).exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\0903\virus (8).exe - 特征码 'BehavesLikeWin32.ExplorerHijack' 被发现
C:\ABC\0903\virus (9).exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现

        13 文件被扫描
          (0 压缩档 0 文件)
        13 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.265

微点卫士

微点：
木马名称:Trojan-PSW.Win32.Delf.eug

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (5).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.VB.div

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (6).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Nilage.bqs

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (8).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Delf.gio

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (10).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Delf.eur

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (11).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Delf.eur

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (13).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (1).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINDOWS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (2).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\OD3MDI.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (3).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WEB\PRINTERS\IMAGES\WINDOWSES.EXE
2) C:\WINDOWS.0\WEB\PRINTERS\IMAGES\WINDOWSES.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (4).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\RPCS.EXE
2) C:\WINDOWS.0\SYSTEM32\RPCS.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (7).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.DLL
3) C:\PROGRAM FILES\COMMON FILES\GOSKDL.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (9).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SSOPURE.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0903[1]\VIRUS (12).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\RKSLDK.DLL
3) C:\PROGRAM FILES\COMMON FILES\GOSKDL.DLL
是否删除木马程序及其衍生物?

OK

欠妳緈諨

全灭

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2732
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\virus (1).exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (2).exe - Infected with Win32.PDB-528 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (3).exe - Suspicious of Win32.Trojan-PSW.Game.16
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (4).exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (5).exe - Infected with Win32.PDB-1546 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (6).exe - Suspicious of Trojan-PSW.Game.16
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (7).exe - Infected with PDB-210 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (8).exe - Infected with MalwareSpy.Win32.PDB-779 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (9).exe - Suspicious of MalwareSpy.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (10).exe - Infected with Win32.PDB-1389 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (11).exe - Infected with Win32.PDB-304 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (12).exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\virus (13).exe - Infected with Win32.PDB-335 Malware program (Paranoia Database) - Deleted

13 Files scanned
7 Infected files found
6 Suspicious files found
0 Files cured
7 Files deleted

ssy275

结果: 找到 13 恶意软件
Worm.Win32.QQPass.m (病毒)
C:\Documents and Settings\ssy\桌面\0903.part3.rar\virus (11).exe
C:\Documents and Settings\ssy\桌面\0903.part3.rar\virus (13).exe
Virus.Win32.AutoRun.jw (病毒)
C:\Documents and Settings\ssy\桌面\0903.part3.rar\virus (12).exe
Trojan-PSW.Win32.Maran.jg (病毒)
C:\Documents and Settings\ssy\桌面\0903.part2.rar\virus (2).exe
Worm.Win32.QQPass.c (病毒)
C:\Documents and Settings\ssy\桌面\0903.part2.rar\virus (5).exe
Trojan-Downloader.Win32.VB.avo (病毒)
C:\Documents and Settings\ssy\桌面\0903.part2.rar\virus (6).exe
Virus.Win32.AutoRun.jw (病毒)
C:\Documents and Settings\ssy\桌面\0903.part2.rar\virus (7).exe
Trojan-PSW.Win32.Nilage.blg (病毒)
C:\Documents and Settings\ssy\桌面\0903.part2.rar\virus (8).exe

扫描开始时间: 2007-9-4 1:10:31
扫描日志
NOD32 版本 2500 (20070903) NT
命令行: F:\virus\0903.rar

日期: 2007年9月4日  时间: 01:10:32
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\0903.rar
F:\virus\0903.rar ?RAR ?0903\virus (10).exe<病毒 - Win32/TrojanDownloader.Delf.BHO 木马>
F:\virus\0903.rar ?RAR ?0903\virus (11).exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (12).exe<病毒 - Win32/PSW.OnLineGames.NBR 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (13).exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (2).exe<病毒 - Win32/PSW.Maran.NAK 木马>
F:\virus\0903.rar ?RAR ?0903\virus (4).exe<病毒 - Win32/PSW.QQRob.NAQ 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (5).exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (7).exe<病毒 - Win32/PSW.OnLineGames.NBR 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (8).exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马 变种>
F:\virus\0903.rar ?RAR ?0903\virus (9).exe<病毒 - Win32/TrojanDownloader.Small.ELI 木马>
已扫描文件数量: 13
已发现病毒数量: 10
完成时间: 01:10:36 总共扫描时间: 4 秒 (00:00:04)

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\0903'
C:\Documents and Settings\Administrator\My Documents\0903\
  virus (1).exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!
  virus (10).exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko.4
      [WARNING]   The file was ignored!
  virus (11).exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.272
      [WARNING]   The file was ignored!
  virus (12).exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [WARNING]   The file was ignored!
  virus (13).exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.272
      [WARNING]   The file was ignored!
  virus (2).exe
      [DETECTION] Is the Trojan horse TR/PSW.Maran.JG.3
      [WARNING]   The file was ignored!
  virus (3).exe
      [DETECTION] Is the Trojan horse TR/PSW.Lineage.UZH.59
      [WARNING]   The file was ignored!
  virus (4).exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING]   The file was ignored!
  virus (5).exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.13
      [WARNING]   The file was ignored!
  virus (6).exe
      [DETECTION] Is the Trojan horse TR/VB.Small.26112.B
      [WARNING]   The file was ignored!
  virus (7).exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [WARNING]   The file was ignored!
  virus (8).exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.blg
      [WARNING]   The file was ignored!
  virus (9).exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!


End of the scan: 2007年9月4日  14:28
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
     13 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
     13 Warnings
      0 Notes
      0 Hidden objects were found

jhtl

诺顿8个。。