12个

Nerazzurri

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        19:06:31 2007-10-4

+ Scan result:       



F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (1).exe -> Backdoor.Agent.ait : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (4).exe -> Downloader.Delf.bnj : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (6).exe -> Downloader.Delf.bnj : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (7).exe -> Downloader.Delf.bpb : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (9).exe -> Logger.VB.rw : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (12).exe -> Trojan.Lmir.bjh : No action taken.
F:\Documents and Settings\kafan\桌面\12.rar/MCxVbopsCy (8).exe -> Trojan.QQGame.j : No action taken.


::Report end

Nerazzurri

Starting the file scan:

Begin scan in 'F:\Documents and Settings\kafan\桌面\12.rar'
F:\Documents and Settings\kafan\桌面\12.rar
  [0] Archive type: RAR
  --> MCxVbopsCy (12).exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.bjh.22
  --> MCxVbopsCy (1).exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
  --> MCxVbopsCy (3).exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.24049
  --> MCxVbopsCy (4).exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bnj.10
  --> MCxVbopsCy (5).exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> MCxVbopsCy (6).exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bnj.10
  --> MCxVbopsCy (7).exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bpb.5
  --> MCxVbopsCy (8).exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.J.15
  --> MCxVbopsCy (9).exe
      [DETECTION] Is the Trojan horse TR/Spy.VB.RW.1
  --> MCxVbopsCy (10).exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> MCxVbopsCy (11).exe
      [DETECTION] Is the Trojan horse TR/PWS.Banker.55360
      [INFO]      The file was deleted!

baba

瑞星2007    12个

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (1).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MCXVBOPSCY (1).EXE
2) C:\WINDOWS.0\SYSTEM32\MSSVC32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (3).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (4).EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MCXVBOPSCY (4).DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (5).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MCXVBOPSCY (5).DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (6).EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MCXVBOPSCY (6).DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (7).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SYSDOWN.VXD
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (8).EXE
是否删除木马程序及其衍生物?
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (10).EXE
协议类型:TCP
本地地址:0.0.0.0
本地端口:1912
远端地址:218.75.91.254(浙江·金华)
远端端口:80
木马名称:Backdoor.Win32.Agent.ejm

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\EG33LC72\10082[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Agent.ejm

程序:
C:\DOCUMENTS AND SETTINGS\10082.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (10).EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\EG33LC72\10082[1].EXE
2) C:\DOCUMENTS AND SETTINGS\10082.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (11).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MCXVBOPSCY (11).DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12\MCXVBOPSCY (12).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSINFO1.DLL
是否删除木马程序及其衍生物?


2个不报，MCxVbopsCy (2).exe是别人做的过卡巴主防的。MCxVbopsCy (9).exe

king6808

已删除：木马程序 Trojan-PSW.Win32.Lmir.bjh        文件　: G:\Temp\12.rar/MCxVbopsCy (12).exe//UPack
已删除：木马程序 Backdoor.Win32.Agent.ait        文件　: G:\Temp\12.rar/MCxVbopsCy (1).exe
已删除：木马程序 Trojan-PSW.Win32.QQPass.xw        文件　: G:\Temp\12.rar/MCxVbopsCy (3).exe//UPack
已删除：木马程序 Trojan-Downloader.Win32.Delf.bnj        文件　: G:\Temp\12.rar/MCxVbopsCy (4).exe//UPX
已删除：木马程序 Trojan-Downloader.Win32.Delf.bnj        文件　: G:\Temp\12.rar/MCxVbopsCy (6).exe//UPX
已删除：木马程序 Trojan-Downloader.Win32.Delf.bpb        文件　: G:\Temp\12.rar/MCxVbopsCy (7).exe
已删除：木马程序 Trojan-PSW.Win32.QQGame.j        文件　: G:\Temp\12.rar/MCxVbopsCy (8).exe
已删除：木马程序 Trojan-Spy.Win32.VB.rw        文件　: G:\Temp\12.rar/MCxVbopsCy (9).exe
已删除：木马程序 Trojan-Downloader.Win32.VB.bhx        文件　: G:\Temp\12.rar/MCxVbopsCy (10).exe//FSG

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\12.rar'
C:\Users\morgan\Documents\
  12.rar
    [0] Archive type: RAR
    --> MCxVbopsCy (12).exe
        [DETECTION] Is the Trojan horse TR/PSW.Lmir.bjh.22
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (1).exe
        [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (3).exe
        [DETECTION] Is the Trojan horse TR/PSW.Steal.24049
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (4).exe
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.bnj.10
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (5).exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (6).exe
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.bnj.10
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (7).exe
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.bpb.5
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (8).exe
        [DETECTION] Is the Trojan horse TR/PSW.QQGame.J.15
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (9).exe
        [DETECTION] Is the Trojan horse TR/Spy.VB.RW.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (10).exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (11).exe
        [DETECTION] Is the Trojan horse TR/PWS.Banker.55360
        [WARNING]   Infected files in archives cannot be repaired!
    --> MCxVbopsCy (2).exe
        [WARNING]   The file was ignored!


End of the scan: 2007年10月4日  08:03
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
     11 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
     12 Warnings
      0 Notes

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 305
Paranoia Database - 6796
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (12).exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (1).exe - Suspected MalwareDetector:Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (3).exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (4).exe - Suspected Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (5).exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (6).exe - Suspected Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (7).exe - Suspected Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (8).exe - Suspected Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (9).exe - Infected Trojan.inject.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (10).exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (11).exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MCxVbopsCy (2).exe - OK

12 Files scanned
1 Infected files found
10 Suspected files found
0 Files cured
1 Files deleted

29159011

大蜘蛛杀了九个

kkgh

ewido anti-spyware - 扫描报告
---------------------------------------------------------

+ 创建于:        10:55:12 2007-10-5

+ 扫描结果:       



C:\Documents and Settings\zh\桌面\MCxVbopsCy (1).exe -> Backdoor.Agent.ait : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (4).exe -> Downloader.Delf.bnj : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (6).exe -> Downloader.Delf.bnj : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (7).exe -> Downloader.Delf.bpb : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (9).exe -> Logger.VB.rw : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (12).exe -> Trojan.Lmir.bjh : 已清除。
C:\Documents and Settings\zh\桌面\MCxVbopsCy (8).exe -> Trojan.QQGame.j : 已清除。

金山11个