实机病毒（东西比较多，就不发MD5了）

micetai

NIS2008 11个

Unresolved Threats:
W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[csrss.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[data administrator.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Pagipef.B
Virus ID: 19352
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[ghost explorer.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[inetinfo.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[lsass.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[services.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[smss.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[winlogon.exe] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[empty.pif] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Pagipef.B
Virus ID: 19352
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[pagefile.pif] inside of [c:\users\m\desktop\fa.rar] - Infected


W32.Rontokbro@mm
Virus ID: 34990
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
State: Remove Failed
-----------
1 File
[administrator's setting.scr] inside of [c:\users\m\desktop\fa.rar] - Infected

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Mail.Brontok.f      
病毒： Worm.Diskgen.a           

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.44.42

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 505
Paranoia Database - 10371
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Administrator's Setting.scr - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AUTORUN.INF - Infected Generic.Malware.bb0
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\csrss.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Data ADMINISTRATOR.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Empty.pif - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Ghost Explorer.exe - Infected Win32.Trojan.vb.a
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\inetinfo.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\lsass.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\pagefile.pif - Infected Generic.Malware.46b
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\services.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\smss.exe - Infected email-Worm.brontok.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\winlogon.exe - Infected email-Worm.brontok.1

12 Files scanned
12 Infected files found
0 Suspected files found
0 Files cured
12 Files deleted

欠妳緈諨

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.5
双引擎反病毒签名 2007-10-9
开始时间: 2007-10-12 22:14
引擎: KAV 引擎 (AVK 17.8716), BD 引擎 (BD 17.5530)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: 样本 csrss.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 Data ADMINISTRATOR.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 Ghost Explorer.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Virus.Win32.Small.p (KAV 引擎)
对象: 样本 inetinfo.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 lsass.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 services.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 smss.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 winlogon.exe
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 Empty.pif
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)
对象: 样本 pagefile.pif
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Virus.Win32.Small.p (KAV 引擎)
对象: 样本 Administrator's Setting.scr
        在压缩档案里: D:\病毒测试\未解压样本\样本.rar
        Status: 已发现病毒
        病毒: Email-Worm.Win32.Brontok.a (KAV 引擎)

kkgh

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间:        10:22:28 2007-10-13

+ 扫描结果:       



C:\Documents and Settings\zh\桌面\样本.rar/Ñù±¾\csrss.exe -> Worm.Brontok.a : 未进行操作.

IllusionWing

all killed

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\Administrator's Setting.scr//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\AUTORUN.INF 检测到 Win32.Autorun.U
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\csrss.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\Data ADMINISTRATOR.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\Empty.pif//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\样本\Ghost Explorer.exe 检测到 Generic.Binder
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\inetinfo.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\lsass.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\pagefile.pif 检测到 Generic.nFile
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\services.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\smss.exe//Crypt1 检测到 Worm.E-Mail.Brontok
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\winlogon.exe//Crypt1 检测到 Worm.E-Mail.Brontok
检测到了 2 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0902，共扫描的文件数量：21，共扫描到的威胁数量：12，威胁率：57.14%，扫描速率： 23.28 文件/秒，扫描速度： 4041.83 千字节/秒，共扫描了 3645.73 千字节。