8支

显示全部楼层 · 发表于 2007-10-31 19:04:19

Scan Log
Version of virus signature database: 2629 (20071031)
Date: 31.10.2007 Time: 19:03:33
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\virus.rar
C:\Documents and Settings\Don johnson\桌面\virus.rar » RAR » photo.exe - a variant of Win32/Stration.XJ worm
C:\Documents and Settings\Don johnson\桌面\virus.rar » RAR » fmifddem.exe - a variant of Win32/Stration.XJ worm
C:\Documents and Settings\Don johnson\桌面\virus.rar » RAR » pps.exe - Win32/Delf.NDV worm

显示全部楼层 · 发表于 2007-10-31 19:05:53

扫描系统区域...
扫描所选择的目录和文件...
对象: photo.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.sq (KAV 引擎), DeepScan:Generic.Stration.8FB135EC (BD 引擎)
对象: slslvvrt.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.gen (KAV 引擎), Win32.Stration.DCI@mm (BD 引擎)
对象: ccfgmsti.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.dc (KAV 引擎), Win32.Stration.DCJ@mm (BD 引擎)
对象: fmifddem.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.qa (KAV 引擎), Win32.Stration.DCI@mm (BD 引擎)
对象: fmifddem.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.pt (KAV 引擎), DeepScan:Generic.Stration.E1C77419 (BD 引擎)
对象: pps.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Trojan-Downloader.Win32.Agent.erc (KAV 引擎), BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: mfc7scre.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Email-Worm.Win32.Warezov.dc (KAV 引擎), DeepScan:Generic.Stration.8D8D3EFA (BD 引擎)
对象: host5.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\virus.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.DKF (BD 引擎)
8个.....

显示全部楼层 · 发表于 2007-10-31 19:06:26

卡巴 125
7个

已删除: 木马程序 Trojan-Downloader.Win32.Agent.erc 文件: F:\病毒样本\virus.rar/pps.exe//PE_Patch
已删除: 病毒 Email-Worm.Win32.Warezov.sq 文件: F:\病毒样本\virus.rar/photo.exe//PE_Patch.UPX//UPX
已删除: 病毒 Email-Worm.Win32.Warezov.qa 文件: F:\病毒样本\virus.rar/fmifddem.exe//PE_Patch//UPack
已删除: 病毒 Email-Worm.Win32.Warezov.pt 文件: F:\病毒样本\virus.rar/fmifddem.dll
已删除: 病毒 Email-Worm.Win32.Warezov.gen 文件: F:\病毒样本\virus.rar/slslvvrt.exe
已删除: 病毒 Email-Worm.Win32.Warezov.dc 文件: F:\病毒样本\virus.rar/mfc7scre.dll
已删除: 病毒 Email-Worm.Win32.Warezov.dc 文件: F:\病毒样本\virus.rar/ccfgmsti.dll

显示全部楼层 · 发表于 2007-10-31 19:06:32

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 736
Paranoia Database - 48287
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\virus

C:\Documents and Settings\Uhthn\Desktop\virus\photo.exe - Suspected MaliciousScope:GENERIC.MALWARE.1
C:\Documents and Settings\Uhthn\Desktop\virus\host5.exe - Infected TROJAN-DOWNLOADER.AGENT.8 - Deleted
C:\Documents and Settings\Uhthn\Desktop\virus\slslvvrt.exe - OK
C:\Documents and Settings\Uhthn\Desktop\virus\ccfgmsti.dll - OK
C:\Documents and Settings\Uhthn\Desktop\virus\fmifddem.exe - Suspected MaliciousScope:GENERIC.MALWARE.4
C:\Documents and Settings\Uhthn\Desktop\virus\fmifddem.dll - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\virus\pps.exe - Infected WIN32.BACKDOOR.AGENT.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\virus\mfc7scre.dll - OK

8 Files scanned
2 Infected files found
3 Suspected files found
0 Files disinfected
2 Files deleted

显示全部楼层 · 发表于 2007-10-31 19:07:01

deleted: virus Email-Worm.Win32.Warezov.sq File: C:\Users\Jack Jones\Desktop\virus.rar/photo.exe//PE_Patch.UPX//UPX
deleted: virus Email-Worm.Win32.Warezov.gen File: C:\Users\Jack Jones\Desktop\virus.rar/slslvvrt.exe
deleted: virus Email-Worm.Win32.Warezov.dc File: C:\Users\Jack Jones\Desktop\virus.rar/ccfgmsti.dll
deleted: virus Email-Worm.Win32.Warezov.qa File: C:\Users\Jack Jones\Desktop\virus.rar/fmifddem.exe//PE_Patch//UPack
deleted: virus Email-Worm.Win32.Warezov.pt File: C:\Users\Jack Jones\Desktop\virus.rar/fmifddem.dll
deleted: Trojan program Trojan-Downloader.Win32.Agent.erc File: C:\Users\Jack Jones\Desktop\virus.rar/pps.exe//PE_Patch
deleted: virus Email-Worm.Win32.Warezov.dc File: C:\Users\Jack Jones\Desktop\virus.rar/mfc7scre.dll

显示全部楼层 · 发表于 2007-10-31 19:11:15

Begin scan in 'C:\Documents and Settings\dell\桌面\virus.rar'
C:\Documents and Settings\dell\桌面\virus.rar
  [0] Archive type: RAR
  --> photo.exe
   [DETECTION] Contains detection pattern of the worm WORM/Stration.Gen
  --> host5.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.QF.1
  --> slslvvrt.exe
   [DETECTION] Contains detection pattern of the worm WORM/Stration.Gen
  --> ccfgmsti.dll
   [DETECTION] Contains detection pattern of the worm WORM/Stration.Gen
  --> fmifddem.exe
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> fmifddem.dll
   [DETECTION] Contains detection pattern of the worm WORM/Stration.Gen
  --> pps.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> mfc7scre.dll
   [DETECTION] Contains detection pattern of the worm WORM/Stration.Gen
   [WARNING] The file was ignored!

End of the scan: 2007年10月31日  19:09
Used time: 00:12 min

The scan has been done completely.

   0 Scanning directories
   10 Files were scanned
   7 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:

显示全部楼层 · 发表于 2007-10-31 19:31:00

KAV不测了，AVAST引擎全灭

AVK07不比06差

显示全部楼层 · 发表于 2007-10-31 19:35:10

个人版测试的：W32/Stration.gen@MM，W32/Autorun.worm.af，New Malware.n，W32/Stration.gen@MM，Generic Downloader.ad

显示全部楼层 · 发表于 2007-10-31 20:28:51

Result: 7 malware found
Email-Worm.Win32.Warezov.sq (virus)
C:\Users\Administrator\Desktop\virus.rar\photo.exe
Email-Worm.Win32.Warezov.gen (virus)
C:\Users\Administrator\Desktop\virus.rar\slslvvrt.exe
Email-Worm.Win32.Warezov.dc (virus)
C:\Users\Administrator\Desktop\virus.rar\ccfgmsti.dll
C:\Users\Administrator\Desktop\virus.rar\mfc7scre.dll
Email-Worm.Win32.Warezov.qa (virus)
C:\Users\Administrator\Desktop\virus.rar\fmifddem.exe
Email-Worm.Win32.Warezov.pt (virus)
C:\Users\Administrator\Desktop\virus.rar\fmifddem.dll
Trojan-Downloader.Win32.Agent.erc (virus)
C:\Users\Administrator\Desktop\virus.rar\pps.exe

[病毒样本] 8支

本帖子中包含更多资源

3只

2+3

7

8

本帖子中包含更多资源

McAfee 5种病毒