autorun相关[MD5: CA7675 55FD36 828A30 3DF26C FE3BE1]

promised

C:\ABC\add.rar:\bl\add.exe - 特征码 'Virus.Win32.LdPinch.AQU' 被发现
C:\ABC\add.rar:\bl\atmQQ2.dll - 特征码 'MalwareScope.Worm.Viking.4' 被发现
C:\ABC\add.rar:\bl\brc_Server.dll - 特征码 'Backdoor.Win32.Delf.axh' 被发现
C:\ABC\add.rar:\bl\brc_Server.exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\add.rar:\bl\svchost.exe - 特征码 'Trojan-PWS.Win32.Agent.iu' 被发现
C:\ABC\add.rar
6 文件被扫描
   (1 压缩档 5 文件)
5 特征码被侦测
0 可疑代码段被发现
耗时: 0:01.937

无敌敏敏

Start of the scan: 2007年11月2日  17:54

Starting the file scan:

Begin scan in 'E:\add.rar'
E:\add.rar
  [0] Archive type: RAR
  --> bl\add.exe
      [DETECTION] Is the Trojan horse TR/Drop.AtomPSW
  --> bl\atmQQ2.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.21910
  --> bl\brc_Server.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> bl\svchost.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Strong
      [INFO]      The file was deleted!

欠妳緈諨

残缺的唯美

deleted: virus Heur.Trojan.Generic        File: C:\Users\Administrator\Desktop\add.rar/bl\add.exe

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQPass.ywn
病毒： Trojan.PSW.Win32.QQPass.ytv
病毒： Backdoor.Win32.BlackHole.ds
病毒： Trojan.DL.Win32.Autorun.ywu

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.16.42

uhthn2002

C:\Documents and Settings\Uhthn\Desktop\bl\atmQQ2.dll : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\Uhthn\Desktop\bl\brc_Server.dll : is suspected of Backdoor.XiaoBird.33 (paranoid heuristics)
C:\Documents and Settings\Uhthn\Desktop\bl\brc_Server.dll : backup copy created
C:\Documents and Settings\Uhthn\Desktop\bl\brc_Server.exe : infected BackDoor.Pigeon.775


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 5     
- scanned         : 0       -  scanned    : 0       - scanned     : 5     
- contain viruses : 0       -  infected   : 0       - infected    : 2     
- deleted         : 0       -  suspicious : 0       - suspicious  : 1     

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 786
Paranoia Database - 48413
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\bl

C:\Documents and Settings\Uhthn\Desktop\bl\add.exe - OK
C:\Documents and Settings\Uhthn\Desktop\bl\atmQQ2.dll - Suspected MaliciousScope:WIN32.TROJAN-DOWNLOADER.DELF.1
C:\Documents and Settings\Uhthn\Desktop\bl\brc_Server.dll - Infected WIN32.TROJAN-PSW.ONLINEGAMES.A - Deleted
C:\Documents and Settings\Uhthn\Desktop\bl\brc_Server.exe - OK
C:\Documents and Settings\Uhthn\Desktop\bl\svchost.exe - Infected WIN32.BACKDOOR.HUPIGON.10 - Deleted

5 Files scanned
2 Infected files found
1 Suspected files found
0 Files disinfected
2 Files deleted

wangjay1980

detected: virus Heur.Trojan.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\add.rar/bl\add.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\add.rar/bl\svchost.exe

碧水寒潭

Start of the scan: 2007年11月3日  09:13

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\add.rar
  [0] Archive type: RAR
  --> bl\add.exe
      [DETECTION] Is the Trojan horse TR/Drop.AtomPSW
  --> bl\atmQQ2.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.21910
  --> bl\brc_Server.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> bl\svchost.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Strong
      [INFO]      The file was deleted!


End of the scan: 2007年11月3日  09:14
Used time: 00:14 min

The scan has been done completely.

      1 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

29159011

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ADD\BL\ADD.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ADD\BL\BRC_SERVER.EXE
病毒程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\BRC_SERVER.EXE
2) C:\WINDOWS\SYSTEM32\BRC_SERVER.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ADD\BL\SVCHOST.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MUI\SVCHOST.EXE
是否删除木马程序及其衍生物?

BING126

KIS6  已检测: 木马程序 Trojan-PSW.Win32.QQPass.ajz        文件: C:\Documents and Settings\Administrator\桌面\add.rar/bl\add.exe
已检测: 木马程序 Trojan-PSW.Win32.QQPass.ajz        文件: C:\Documents and Settings\Administrator\桌面\add.rar/bl\atmQQ2.dll
已检测: 木马程序 Backdoor.Win32.BlackHole.au        文件: C:\Documents and Settings\Administrator\桌面\add.rar/bl\brc_Server.dll
已检测: 木马程序 Backdoor.Win32.BlackHole.au        文件: C:\Documents and Settings\Administrator\桌面\add.rar/bl\brc_Server.exe
已检测: 木马程序 Trojan-Downloader.Win32.Agent.etw        文件: C:\Documents and Settings\Administrator\桌面\add.rar/bl\svchost.exe