22ge

风野胤

再次对风暴微塔的报法无语
看上去好象是通杀
其实

红心王子

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本1.rar'
C:\Documents and Settings\Administrator\桌面\样本1.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.12347
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 11.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Agent.bfk.1
  --> 13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.13352
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.afu.1
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.ABOY.4
  --> 19.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 20.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bpd
  --> MSURLPAR.dll
      [DETECTION] Is the Trojan horse TR/BHO.Agent.136576
  --> 0.exe
      [DETECTION] Contains detection pattern of the worm WORM/QQPass.A
      [INFO]      The file was deleted!


End of the scan: 2007年9月7日  18:50
Used time: 00:16 min

The scan has been done completely.

      0 Scanning directories
     23 Files were scanned
     15 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.9.7 20:35:3

文件:F:\070907\样本1\3.exe | 感染:Trojan.DownLoader.4268 [104>20070906_ny0014.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\4.exe | 感染:Trojan.PWS.Wow.622 [2>20070906_ny0014.axx]3(4.4)
操作:删除文件
文件:F:\070907\样本1\7.exe | 感染:BACKDOOR.Trojan [78>20070906_ny0014.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\10.exe | 感染:virus [929>20070906_ny0013.axx]3(1.2)
操作:删除文件
文件:F:\070907\样本1\12.exe | 感染:UPACK [48>20070906_ny0014.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\14.exe | 感染:virus [184>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\17.exe | 感染:Trojan.PWS.Gamania.3897 [85>20070906_ny0014.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\18.exe | 感染:Trojan.MulDrop.8671 [228>20070906_ny0013.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\20.exe | 感染:BACKDOOR.Trojan [50>20070906_ny0014.axx]3(1.1)
操作:删除文件
文件:F:\070907\样本1\0.exe | 感染:Win32.HLLW.Autoruner.249 [145>20070906_ny0013.axx]3(4.4)
操作:删除文件

扫描完成|病毒:10 文件:22|耗时:20259
----------

浪滔天

卡巴 7.0.0.125 高启发
20个

已隔离: 病毒 Heur.StartPage (变种)        文件: D:\样本1\1.exe//PEPatch
已隔离: 病毒 Heur.Trojan.Generic (变种)        文件: D:\样本1\13.exe//PE_Patch//UPack
已隔离: 病毒 Heur.Trojan.Generic (变种)        文件: D:\样本1\8.exe//PE_Patch//UPack
已删除: 病毒 Worm.Win32.QQPass.a        文件: D:\样本1\0.exe//PE_Patch.UPX//UPX
已删除: 病毒 Worm.Win32.QQPass.r        文件: D:\样本1\6.exe//UPX
已删除: 木马程序 Backdoor.Win32.Delf.awy        文件: D:\样本1\14.exe
已删除: 木马程序 Trojan-PSW.Win32.Agent.po        文件: D:\样本1\7.exe//UPX
已删除: 木马程序 Trojan-PSW.Win32.Delf.aao        文件: D:\样本1\11.exe//UPack//#
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bmw        文件: D:\样本1\18.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bos        文件: D:\样本1\3.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.box        文件: D:\样本1\4.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bpd        文件: D:\样本1\20.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件: D:\样本1\17.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdb        文件: D:\样本1\5.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.acg        文件: D:\样本1\15.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.acm        文件: D:\样本1\10.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.afu        文件: D:\样本1\16.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.agi        文件: D:\样本1\2.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.agk        文件: D:\样本1\9.exe//UPack
已删除: 木马程序 Trojan.Win32.Agent.bfk        文件: D:\样本1\12.exe

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3787
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Infected with PDB-480 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Infected with PDB-1180 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\5.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\6.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\7.exe - Infected with PDB-3590 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\8.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\9.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\10.exe - Infected with PDB-2571 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\11.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\12.exe - Infected with PDB-3587 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\13.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\14.exe - Infected with Win32.PDB-1797 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\15.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\16.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\17.exe - Infected with PDB-2144 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\18.exe - Infected with PDB-1905 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\19.exe - Suspicious of Win32.Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\20.exe - Infected with PDB-3750 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\MSURLPAR.dll - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\0.exe - Infected with Win32.PDB-1751 Malware program - Deleted

22 Files scanned
10 Infected files found
12 Suspicious files found
0 Files cured
10 Files deleted