手机里面的 好多！！

zlq7zj

搞不懂 手机里面也有这么多！

微点卫士

木马名称:Trojan-Spy.Win32.VB.hl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\RECYCLED\INFO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Detnat.az

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\EXPLORER.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.AutoRun.bb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\EXPLORER.EXEPJSEXJGK.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Zlob.bgb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\SXS2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Delf.ayy

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\TEOYFGX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Gamepass.az

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\PAGEFILE.PIF
是木马程序!
已成功阻止其运行,是否要删除此文件?

RavMonE.exe死的吧，居然还会有个生成TXT  
Traceback (most recent call last):
  File "<install zipextimporter>", line 1, in ?
ImportError: No module named zipextimporter
Traceback (most recent call last):
  File "RavMonE.py", line 1, in ?
ImportError: No module named twisted.internet
Traceback (most recent call last):
  File "<install zipextimporter>", line 1, in ?
ImportError: No module named zipextimporter
Traceback (most recent call last):
  File "RavMonE.py", line 1, in ?
ImportError: No module named twisted.internet

mofunzone

漏掉一个
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\Recycled'
C:\Users\morgan\Documents\Recycled\
  Autorun.inf
  EXPLORER.EXE
      [DETECTION] Contains detection pattern of the worm WORM/Detnat.E.121
      [INFO]      The file was deleted!
  EXPLORER.EXEpjsexjgk.exe
      [DETECTION] Is the Trojan horse TR/VB.Yongfu
      [INFO]      The file was deleted!
  pagefile.pif
      [DETECTION] Is the Trojan horse TR/Pakes.A.1254
      [INFO]      The file was deleted!
  RavMonE.exe
  sxs2.exe
      [DETECTION] Is the Trojan horse TR/Agent.2264
      [INFO]      The file was deleted!
  teoyfgx.exe
      [DETECTION] Is the Trojan horse TR/Agent.28797
      [INFO]      The file was deleted!
C:\Users\morgan\Documents\Recycled\Recycled\
  desktop.ini
  INFO.EXE
      [DETECTION] Is the Trojan horse TR/Spy.VB.QU
      [INFO]      The file was deleted!


End of the scan: 2007年10月20日  21:34
Used time: 00:05 min

The scan has been done completely.

      2 Scanning directories
      9 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

promised

C:\ABC\AUTORUN\AUTORUN.INF - 特征码 'Win32.Small.B' 被发现
C:\ABC\AUTORUN\pagefile.pif - 特征码 'Virus.Win32.Small.p' 被发现
C:\ABC\AUTORUN\RavMonE.exe - 特征码 'Worm.Win32.RJump.a' 被发现
C:\ABC\Recycled\Autorun.inf
C:\ABC\Recycled\EXPLORER.EXE - 特征码 'Virus.Win32.VB.bu' 被发现
C:\ABC\Recycled\EXPLORER.EXEpjsexjgk.exe - 特征码 'Virus.Win32.AutoRun.cy' 被发现
C:\ABC\Recycled\sxs2.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Recycled\teoyfgx.exe - 特征码 'Virus.Win32.AutoRun.f' 被发现
C:\ABC\Recycled\Recycled\desktop.ini
C:\ABC\Recycled\Recycled\INFO.EXE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现

        10 文件被扫描
          (0 压缩档 0 文件)
        8 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.282

The EQs

C:\Documents and Settings\Don johnson\桌面\Recycled\EXPLORER.EXE - Win32/VB.NHZ worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\Recycled\EXPLORER.EXEpjsexjgk.exe - Win32/AutoRun.E worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\Recycled\sxs2.exe - Win32/TrojanDownloader.Small.EFU trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\Recycled\teoyfgx.exe - Win32/Delf.NDF worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\Recycled\Recycled\INFO.EXE - probably unknown NewHeur_PE virus - deleted - quarantined
C:\Documents and Settings\Don johnson\桌面\AUTORUN\AUTORUN.INF - INF/Autorun virus - deleted - quarantined
C:\Documents and Settings\Don johnson\桌面\AUTORUN\pagefile.pif - probably a variant of Win32/Small.NAV worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\AUTORUN\RavMonE.exe &raquo; ZIP &raquo; win32ui.pyd - archive damaged

红心王子

....

007-10-21        12:43:02        1192941782        Administrator        1712        Sign of "Win32:Small-DT2 [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\AUTORUN[1].part1.rar\pagefile.pif\[Embedded#85d8]" file.  
2007-10-21        12:43:06        1192941786        Administrator        1712        Sign of "Win32:VB-CMF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\AUTORUN[1].part1.rar\pagefile.pif" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:Rjump [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\AUTORUN[1].part1.rar\RavMonE.exe" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:VB-DKA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Recycled.rar\Recycled\INFO.EXE\[Upack]" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:Detnat-AX [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\Recycled.rar\EXPLORER.EXE" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:Trojan-gen {UPX}" has been found in "C:\Documents and Settings\Administrator\桌面\Recycled.rar\EXPLORER.EXEpjsexjgk.exe" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:Small-EUP [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Recycled.rar\sxs2.exe" file.  
2007-10-21        12:43:07        1192941787        Administrator        1712        Sign of "Win32:Agent-ITS [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Recycled.rar\teoyfgx.exe" file.

ykz1991

以为传说中的手机病毒出现了

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 656
Paranoia Database - 48035
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Autorun.inf - Infected Generic.Malware.88.bb0
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\pagefile.pif - Suspected Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\RavMonE.exe - Infected Win32.Backdoor.Hupigon.17

3 Files scanned
2 Infected files found
1 Suspected files found
0 Files cured
2 Files deleted

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 656
Paranoia Database - 48035
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Autorun.inf - Infected Backdoor.Hupigon.13
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\EXPLORER.EXE - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\EXPLORER.EXEpjsexjgk.exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\sxs2.exe - Suspected Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\teoyfgx.exe - Infected Generic.Malware.28764.c3e
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Recycled\desktop.ini - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Recycled\INFO.EXE - Suspected Trojan-PSW.OnLineGames.2

7 Files scanned
2 Infected files found
2 Suspected files found
0 Files cured
2 Files deleted

IllusionWing

all killed

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 C:\Documents and Settings\Administrator\桌面\样本\Autorun.inf 检测到 Win32.Autorun.U
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\EXPLORER.EXE 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\EXPLORER.EXEpjsexjgk.exe 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\pagefile.pif 检测到 Generic.nFile
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\样本\RavMonE.exe 检测到 Generic.Binder
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\sxs2.exe 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\teoyfgx.exe 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\样本\Recycled\INFO.EXE 检测到 Generic.nFile
检测到了 7 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0130，共扫描的文件数量：9，共扫描到的威胁数量：8，威胁率：88.89%，扫描速率： 69.23 文件/秒，扫描速度： 25768.46 千字节/秒，共扫描了 3349.9 千字节。

UGuard Log (Digital Fox - gankeyu@126.com, cby) - AutoProtect Log
保护模块版本: 1.5.2
* 反Rootkit : 启动
* 反广告 : 启动
* 注册表监视 : 启动
* 行为分析 : 启动
* 关联分析 : 启动

Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\Autorun.inf，该文件 一定 感染 Win32.Autorun.U。该文件被删除。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\EXPLORER.EXE，该文件 大概 感染 Generic.nFile。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\EXPLORER.EXEpjsexjgk.exe，该文件 大概 感染 Generic.nFile。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\pagefile.pif，该文件 大概 感染 Generic.nFile。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\RavMonE.exe，该文件 大概 感染 Generic.Binder。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\sxs2.exe，该文件 大概 感染 Generic.nFile。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\teoyfgx.exe，该文件 大概 感染 Generic.nFile。该文件被隔离。
Explorer.exe 试图打开文件 C:\Documents and Settings\Administrator\桌面\样本\Recycled\INFO.EXE，该文件 大概 感染 Generic.nFile。该文件被隔离。

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Diskgen.j           
病毒： Trojan.Mnless.kla        
病毒： Trojan.MnLess.mag        
病毒： Worm.DLTank.a            
病毒： Worm.Win32.AvKiller.bb   

用户来源：互联网
日期： 21.10.2007  时间：15:45:24
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\AUTORUN.part1.rar; C:\Recycled.rar
C:\AUTORUN.part1.rar >>RAR >>AUTORUN.INF - INF/Autorun 病毒
C:\AUTORUN.part1.rar >>RAR >>pagefile.pif - 可能是 Win32/Small.NAV 蠕虫 的一个变种
C:\AUTORUN.part1.rar >>RAR >>RavMonE.exe - 没有找到下一个压缩文件卷
C:\AUTORUN.part1.rar - 多重感染 - 已删除
C:\Recycled.rar >>RAR >>Recycled\desktop.ini - 是正常的
C:\Recycled.rar >>RAR >>Recycled\INFO.EXE - 未查明的 NewHeur_PE 病毒 [7]
C:\Recycled.rar >>RAR >>Autorun.inf - 是正常的
C:\Recycled.rar >>RAR >>EXPLORER.EXEpjsexjgk.exe - Win32/AutoRun.E 蠕虫
C:\Recycled.rar >>RAR >>sxs2.exe - Win32/TrojanDownloader.Small.EFU 木马
C:\Recycled.rar >>RAR >>teoyfgx.exe - Win32/Delf.NDF 蠕虫
C:\Recycled.rar - 多重感染 - 已删除
已扫描的文件数目：10
已发现的病毒数目：6
已清除病毒的文件数目：2
完成时间： 15:45:30 总扫描时间：6 秒 (00:00:06)