睡觉前送22个

promised

[MD5: 60703D B0062A ED34AE E29166 B84B25 525171 8E1BE4 BD97AA 0B5F51 DC154B 5933A6 966886 23AE66 D3825B C7C1EF 5E3828 CD963F 342DB5 9C5C10 13C48C 42581E A17604]

ssy275

21个

wangjay1980

21
detected: Trojan program Trojan.Win32.StartPage.apw        File: E:\Ñù±¾\bingdu\1.exe//PE_Patch
detected: Trojan program Trojan-PSW.Win32.WOW.uv        File: E:\Ñù±¾\bingdu\2.exe//ASPack
detected: Trojan program Trojan-Spy.Win32.Delf.abi        File: E:\Ñù±¾\bingdu\3.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bjl        File: E:\Ñù±¾\bingdu\4.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.blb        File: E:\Ñù±¾\bingdu\5.exe
detected: Trojan program Trojan-Spy.Win32.Delf.ace        File: E:\Ñù±¾\bingdu\6.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ben        File: E:\Ñù±¾\bingdu\7.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Spy.Win32.Delf.abi        File: E:\Ñù±¾\bingdu\8.exe
detected: Trojan program Trojan-Spy.Win32.Delf.ach        File: E:\Ñù±¾\bingdu\9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.blb        File: E:\Ñù±¾\bingdu\10.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bka        File: E:\Ñù±¾\bingdu\11.exe//FSG
detected: Trojan program Backdoor.Win32.WinterLove.bi        File: E:\Ñù±¾\bingdu\12.exe//UPX
detected: Trojan program Trojan-Downloader.Win32.Small.czl        File: E:\Ñù±¾\bingdu\13.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.adn        File: E:\Ñù±¾\bingdu\14.exe//ASPack
detected: Trojan program Trojan-Spy.Win32.Delf.abi        File: E:\Ñù±¾\bingdu\15.exe
detected: Trojan program Trojan-Spy.Win32.Delf.ach        File: E:\Ñù±¾\bingdu\16.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bke        File: E:\Ñù±¾\bingdu\17.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bmj        File: E:\Ñù±¾\bingdu\18.exe//UPack
detected: Trojan program Backdoor.Win32.Delf.awy        File: E:\Ñù±¾\bingdu\19.exe
detected: Trojan program Trojan-PSW.Win32.Agent.pl        File: E:\Ñù±¾\bingdu\21.exe//UPack
detected: virus Worm.Win32.QQPass.a        File: E:\Ñù±¾\bingdu\0.exe//PE_Patch.UPX//UPX

capsshift

红伞一个不漏。
Starting the file scan:

Begin scan in 'C:\Users\lenovo\Desktop\virus.rar'
C:\Users\lenovo\Desktop\virus.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.WOW.UV
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Agent.17971.1
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ace.1
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Agent.11112
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.acb
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb.4
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 12.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.12366
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Agent.12444
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bke
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.12580
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 20.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 21.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PL
  --> 0.exe
      [DETECTION] Contains signature of the worm WORM/QQPass.A
      [INFO]      The file was moved to '474f5e3f.qua'!


End of the scan: 2007年9月4日  21:29
Used time: 00:13 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     22 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

nod32 20

1688388728

已检测到: 木马程序 Trojan.Win32.StartPage.apw        URL: http://bbs.kafan.cn/attachment.php?aid=123324//1.exe//PE_Patch

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\virus.rar'
C:\Documents and Settings\tim\桌面\virus.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.WOW.UV
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Agent.17971.1
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ace.1
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Agent.11112
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.acb
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb.4
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 12.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.12366
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Agent.12444
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bke
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.12580
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 20.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 21.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PL
  --> 0.exe
      [DETECTION] Contains signature of the worm WORM/QQPass.A
      [INFO]      A backup was created as '474f6714.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

yurius

Scan performed at: 2007-9-4 22:53:48
Scanning Log
NOD32 version 2503 (20070904) NT
Command line: C:\virus\virus22.rar
C:\Program Files\Eset\nod32.exe - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK
Active boot sector of the 2. physical disk - is OK
Active boot sector of the 3. physical disk - is OK

Date: 4.9.2007  Time: 22:53:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\virus\virus22.rar
C:\virus\virus22.rar ?RAR ?1.exe - is OK
C:\virus\virus22.rar ?RAR ?2.exe - probably unknown NewHeur_PE virus [7]
C:\virus\virus22.rar ?RAR ?3.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?4.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\virus\virus22.rar ?RAR ?5.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?6.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?7.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\virus\virus22.rar ?RAR ?8.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?9.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?10.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?11.exe ?FSG v2.0 - is OK
C:\virus\virus22.rar ?RAR ?12.exe - a variant of Win32/AutoRun.Q worm
C:\virus\virus22.rar ?RAR ?13.exe - probably unknown NewHeur_PE virus [7]
C:\virus\virus22.rar ?RAR ?14.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\virus\virus22.rar ?RAR ?15.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?16.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?17.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?18.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?19.exe - Win32/Delf.NFD trojan
C:\virus\virus22.rar ?RAR ?20.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?21.exe - probably a variant of Win32/Genetik trojan
C:\virus\virus22.rar ?RAR ?0.exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\virus\virus22.rar:Zone.Identifier - is OK
Number of scanned files: 23
Number of threats found: 20
Time of completion: 22:53:56 Total scanning time: 6 sec (00:00:06)

Notes:
[7] File is probably infected with an unknown virus.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2813
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Infected with Win32.PDB-1065 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Infected with Win32.PDB-223 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Infected with PDB-2500 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Infected with PDB-1843 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\5.exe - Infected with PDB-289 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\6.exe - Infected with PDB-1977 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\7.exe - Infected with PDB-602 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\8.exe - Infected with PDB-504 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\9.exe - Infected with PDB-2387 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\10.exe - Infected with PDB-145 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\11.exe - Infected with PDB-2130 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\12.exe - Infected with Win32.PDB-1302 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\13.exe - Infected with MalwareSpy.PDB-1826 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\14.exe - Infected with Win32.PDB-1104 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\15.exe - Infected with PDB-1867 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\16.exe - Infected with PDB-1286 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\17.exe - Infected with PDB-942 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\18.exe - Infected with PDB-159 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\19.exe - Infected with Win32.PDB-1890 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\20.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\21.exe - Infected with PDB-736 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\0.exe - Infected with Win32.PDB-2752 Malware program (Paranoia Database) - Deleted

22 Files scanned
21 Infected files found
1 Suspicious files found
0 Files cured
21 Files deleted

wangjay1980

20.exe_ - Trojan-Spy.Win32.Delf.acn