同事u盘上的几个病毒

sxingbai

md5就略了
大家先玩玩儿

红心王子

2007-10-20        19:29:17        1192879757        Administrator        3244        Sign of "Win32:Delf-ERE [Wrm]" has been found in "D:\Downloads\wsctf.rar\tkqwijl.exe\[FSG]" file.  
2007-10-20        19:29:20        1192879760        Administrator        3244        Sign of "Win32:Agent-JOF [Trj]" has been found in "D:\Downloads\wsctf.rar\auto.exe\[NsPack]\[Embedded#4010]\[NsPack]" file.  
2007-10-20        19:29:20        1192879760        Administrator        3244        Sign of "Win32:VB-ELE [Trj]" has been found in "D:\Downloads\wsctf.rar\fun.xls.exe\[Embedded#12605]" file.  
2007-10-20        19:29:20        1192879760        Administrator        3244        Sign of "Win32:VB-ELE [Trj]" has been found in "D:\Downloads\wsctf.rar\fun.xls.exe" file.  
2007-10-20        19:29:20        1192879760        Administrator        3244        Sign of "Win32:Detnat-AX [Wrm]" has been found in "D:\Downloads\wsctf.rar\EXPLORER.EXE" file.

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Agent.xcf
病毒： Worm.Win32.Agent.ilz     
病毒： Worm.VB.nv               
病毒： Win32.Virut.GEN         
病毒： Trojan.PSW.SBoy.a        

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.14.52

bingzining

红伞c：
Begin scan in 'D:\刷风\wsctf.rar'
D:\刷风\wsctf.rar
  [0] Archive type: RAR
  --> tkqwijl.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.27511
  --> auto.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.YTS Backdoor server programs
  --> fun.xls.exe
      [DETECTION] Is the Trojan horse TR/VB.atg.383
  --> EXPLORER.EXE
      [DETECTION] Contains code of the Windows virus W32/Virut.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年10月20日星期六  19:43
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

BING126

探测到: 病毒 Virus.Win32.AutoRun.f        文件: C:\Documents and Settings\Administrator\桌面\wsctf.rar/tkqwijl.exe//FSG
探测到: 木马程序 Backdoor.Win32.Agent.ahj        文件: C:\Documents and Settings\Administrator\桌面\wsctf.rar/auto.exe
探测到: 木马程序 Trojan.Win32.VB.atg        文件: C:\Documents and Settings\Administrator\桌面\wsctf.rar/fun.xls.exe
探测到: 病毒 Virus.Win32.Virut.n        文件: C:\Documents and Settings\Administrator\桌面\wsctf.rar/EXPLORER.EXE

duandxxi

瑞星08  查到6个 比3楼多一个 呵呵

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 647
Paranoia Database - 48016
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\wsctf.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\tkqwijl.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\auto.exe - Infected MalwareDetector:Trojan-Downloader.Agent.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\fun.xls.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AutoRun.inf - Infected Virus.autorun.12
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\EXPLORER.EXE - OK

6 Files scanned
2 Infected files found
1 Suspected files found
0 Files cured
2 Files deleted

傻猪猪米走鸡

F:\virus\wsctf.rar » RAR » wsctf.exe - is OK
F:\virus\wsctf.rar » RAR » tkqwijl.exe - a variant of Win32/Delf.NDF worm
F:\virus\wsctf.rar » RAR » auto.exe - a variant of Win32/TrojanDownloader.Flux trojan
F:\virus\wsctf.rar » RAR » fun.xls.exe - Win32/VB.EL worm
F:\virus\wsctf.rar » RAR » AutoRun.inf - is OK
F:\virus\wsctf.rar » RAR » EXPLORER.EXE - Win32/VB.NHZ worm
F:\virus\wsctf.rar - multiple threats

残缺的唯美

Result: 4 malware found
Virus.Win32.AutoRun.f (virus)
C:\Users\Administrator\Desktop\wsctf.rar\tkqwijl.exe
Backdoor.Win32.Agent.ahj (virus)
C:\Users\Administrator\Desktop\wsctf.rar\auto.exe
Trojan.Win32.VB.atg (virus)
C:\Users\Administrator\Desktop\wsctf.rar\fun.xls.exe
Virus.Win32.Virut.n (virus)
C:\Users\Administrator\Desktop\wsctf.rar\EXPLORER.EXE

kk12

费尔