昨天有事忘记发的

promised

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ABC.rar'
C:\Documents and Settings\Administrator\My Documents\
  ABC.rar
    [0] Archive type: RAR
    --> ABC\112.exe
        [DETECTION] Is the Trojan horse TR/Dldr.VB.VHH.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\11898305865.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\121.exe
        [DETECTION] Is the Trojan horse TR/Agent.ABRO
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\624.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\7793EF25.DLL
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\999.exe
        [DETECTION] Is the Trojan horse TR/Agent.25600.27
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\a.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.Symu Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\a.rar
        [1] Archive type: RAR
        --> a.exe
            [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.Symu Backdoor server programs
            [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\autoc0n.exe
        [DETECTION] Is the Trojan horse TR/Agent.ABRO
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\CD0FFED6.EXE
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\cswo.dll
    --> ABC\dream.exe
        [DETECTION] Is the Trojan horse TR/Agent.25600.27
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\EE99C835.EXE
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\gwas.dll
    --> ABC\jshelp.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\jsshow.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\jzdv.dll
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\kbfz.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\KERNL32.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\lbfx.dll
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\maodlxei.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\MsVersion.exe
        [1] Archive type: RAR SFX (self extracting)
        --> MSINET.OCX
        --> MSWINSCK.OCX
        --> install.exe
            [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
            [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\oeia.dll
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\otl2x1ll.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\sob.exe
    --> ABC\system.dat
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\TempA.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.4325
        [WARNING]   Infected files in archives cannot be repaired!
    --> ABC\wextract.exe
    --> ABC\xyupri0.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月15日  20:49
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     34 Files were scanned
     19 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     15 Files not concerned
      3 Archives were scanned
     26 Warnings
      0 Notes

woai_jolin

扫描报告
2007年9月16日 11:52:00 - 11:52:02
计算机名称: C3EF58622174424
扫描类型: 扫描目标
目标: G:\v\ABC.rar


--------------------------------------------------------------------------------

结果: 找到 12 恶意软件
Trojan-Downloader.Win32.VB.bja (病毒)
G:\v\ABC.rar\ABC\112.exe
Trojan-Downloader.Win32.Agent.djc (病毒)
G:\v\ABC.rar\ABC\7793EF25.DLL
G:\v\ABC.rar\ABC\EE99C835.EXE
Virus.Win32.AutoRun.mk (病毒)
G:\v\ABC.rar\ABC\999.exe
G:\v\ABC.rar\ABC\dream.exe
Backdoor.Win32.Delf.btt (病毒)
G:\v\ABC.rar\ABC\a.exe
G:\v\ABC.rar\ABC\a.rar\a.exe
G:\v\ABC.rar\ABC\KERNL32.exe
Backdoor.Win32.Delf.bmp (病毒)
G:\v\ABC.rar\ABC\kbfz.exe
Backdoor.Win32.Small.cjt (病毒)
G:\v\ABC.rar\ABC\maodlxei.dll
Trojan-PSW.Win32.WOW.wy (病毒)
G:\v\ABC.rar\ABC\TempA.exe
Trojan-PSW.Win32.Nilage.bpn (病毒)
G:\v\ABC.rar\ABC\xyupri0.dll




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 30
未扫描: 0
结果:
病毒: 12
间谍软件: 0
可疑项目: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
启动扇区:
已扫描: 0
受感染: 0
可疑项目: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
定义版本:
病毒: 2007-09-15_01
间谍软件: 2007-09-15_01
扫描引擎:
F-Secure AVP: 7.00.171, 2007-09-15
F-Secure Libra: 2.04.01, 2007-09-14
F-Secure Orion: 1.02.37, 2007-09-15
F-Secure Draco: 1.00.35, 2007-09-03
扫描选项:
扫描定义的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描内部存档
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

ykz1991

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.VB.bja        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\112.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\11898305865.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\121.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\624.exe//PE-Armor//PE-Crypt.Known
detected: Trojan program Trojan-Downloader.Win32.Agent.djc        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\7793EF25.DLL
detected: virus Virus.Win32.AutoRun.mk        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\999.exe
detected: Trojan program Backdoor.Win32.Delf.btt        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\a.exe//ASPack
detected: Trojan program Backdoor.Win32.Delf.btt        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\a.rar/a.exe//ASPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\autoc0n.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\CD0FFED6.EXE//ASPack
detected: virus Virus.Win32.AutoRun.mk        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\dream.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.djc        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\EE99C835.EXE//ASPack
detected: Trojan program Backdoor.Win32.Delf.bmp        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\kbfz.exe//PolyCrypt
detected: Trojan program Backdoor.Win32.Delf.btt        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\KERNL32.exe
detected: Trojan program Backdoor.Win32.Small.cjt        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\maodlxei.dll//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Satray.m        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\system.dat//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.WOW.wy        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\TempA.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bpn        File: C:\Documents and Settings\Owner\×ÀÃæ\ABC\xyupri0.dll

欠妳緈諨

残缺的唯美

2007-9-16 12:32:57        Scanning Log
2007-9-16 12:32:57        Version of virus signature database: 2532 (20070916)
2007-9-16 12:32:57        Date: 16.9.2007  Time: 12:32:57
2007-9-16 12:32:57        Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\ABC.rar
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\112.exe - probably unknown NewHeur_PE virus [7]
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\11898305865.exe - probably unknown NewHeur_PE virus [7]
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\121.exe - probably unknown NewHeur_PE virus [7]
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\7793EF25.DLL - probably a variant of Win32/Agent.NEO trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\autoc0n.exe - probably unknown NewHeur_PE virus [7]
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\CD0FFED6.EXE - probably a variant of Win32/Agent.NEO trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\EE99C835.EXE - probably a variant of Win32/Agent.NEO trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\jshelp.exe - a variant of Win32/Adware.MoKeAD application
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\jsshow.dll - a variant of Win32/Adware.MoKeAD application
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\kbfz.exe - a variant of Win32/PSW.QQRob.NAQ trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\otl2x1ll.dll - a variant of Win32/TrojanDownloader.Agent.NPO trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\TempA.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
2007-9-16 12:33:11        D:\Documents and Settings\EKINCHENG\桌面\ABC.rar » RAR » ABC\xyupri0.dll - probably a variant of Win32/Genetik trojan
2007-9-16 12:33:11        Number of scanned files: 35
2007-9-16 12:33:11        Number of threats found: 13
2007-9-16 12:33:11        Time of completion: 12:33:11  Total scanning time: 14 sec (00:00:14)
2007-9-16 12:33:11       
2007-9-16 12:33:11        Notes:
2007-9-16 12:33:11        [7] File is probably infected with an unknown virus.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 5112
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\112.exe - Infected with PDB-d88 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\11898305865.exe - Suspicious of Win32.Trojan-PSW.Game.16
C:\Documents and Settings\uhthn\Desktop\New Folder\121.exe - Suspicious of Win32.Trojan-PSW.Game.16
C:\Documents and Settings\uhthn\Desktop\New Folder\624.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\7793EF25.DLL - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\999.exe - Infected with Win32.PDB-7fc Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\a.exe - Infected with Win32.PDB-549 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\a.rar\a.exe - Infected with Win32.PDB-549 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\autoc0n.exe - Suspicious of Win32.Trojan-PSW.Game.16
C:\Documents and Settings\uhthn\Desktop\New Folder\CD0FFED6.EXE - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\cswo.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\dream.exe - Infected with Win32.PDB-7fc Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\EE99C835.EXE - Infected with PDB-750 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\gwas.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\jshelp.exe - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\jsshow.dll - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\jzdv.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\kbfz.exe - Infected with Win32.PDB-ce0 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\KERNL32.exe - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\lbfx.dll - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\maodlxei.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\MsVersion.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\oeia.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\otl2x1ll.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\sob.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\system.dat - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\TempA.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\wextract.exe - Suspicious of Backdoor.Hupigon.3
C:\Documents and Settings\uhthn\Desktop\New Folder\xyupri0.dll - Suspicious of Trojan-PSW.Small.1

29 Files scanned
7 Infected files found
21 Suspicious files found
0 Files cured
7 Files deleted

天空的蔚蓝

KIS7.0.0.125报18个，及格吗？