16个 都是新的

lanvin

Begin scan in 'D:\新建文件夹'
D:\新建文件夹\name-1.exe
      [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\name-10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.IY
      [INFO]      The file was deleted!
D:\新建文件夹\name-11.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
D:\新建文件夹\name-12.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\name-13.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '4799a4f3.qua'!
D:\新建文件夹\name-15.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.YWI.1 Backdoor server programs
      [INFO]      The file was deleted!
D:\新建文件夹\name-16.exe
      [DETECTION] Contains detection pattern of the worm WORM/Sumom.C.22
      [INFO]      The file was deleted!
D:\新建文件夹\name-2.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.SYX.89 Backdoor server programs
      [INFO]      The file was deleted!
D:\新建文件夹\name-4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\name-5.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '4799a4f7.qua'!
D:\新建文件夹\name-6.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/Asprotect). Please verify the origin of the file
      [INFO]      The file was deleted!
D:\新建文件夹\name-7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
D:\新建文件夹\name-9.exe
      [DETECTION] Is the Trojan horse TR/Agent.39936.11
      [INFO]      The file was deleted!

End of the scan: 2007年11月4日  00:40
Used time: 00:23 min
The scan has been done completely.
      1 Scanning directories
     16 Files were scanned
     11 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     11 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

cy6266812

咖啡报马，不准许下
F:\Program Files\Opera\Opera.exe        C:\Documents and Settings\Administrator\Application Data\Opera\Opera\profile\cache4\opr018VJ.rar\NAME-5.EXE        New Malware.an (特洛伊)

[ 本帖最后由 cy6266812 于 2007-11-4 00:57 编辑 ]

sb

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQPass.ywt
病毒： Backdoor.Win32.Gpigeon.zhy
病毒： Virus.Win32.Huhk.a      
病毒： Backdoor.Win32.PcClient.kwg

MAC 地址：00:04:61:A9:F2:37

用户来源：互联网

软件版本：20.16.52

只杀了4个

rest1min

KV2008杀掉6个。 驱逐舰杀掉4个。

promised

C:\ABC\新建文件夹\新建文件夹\name-1.exe - 特征码 'Backdoor.Win32.PcClient.yw' 被发现
C:\ABC\新建文件夹\新建文件夹\name-10.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
C:\ABC\新建文件夹\新建文件夹\name-11.exe - 特征码 'Backdoor.Klj' 被发现
C:\ABC\新建文件夹\新建文件夹\name-12.exe - 特征码 'Dialer' 被发现
C:\ABC\新建文件夹\新建文件夹\name-13.exe - 特征码 'Backdoor.Hupigon.ALU' 被发现
C:\ABC\新建文件夹\新建文件夹\name-14.exe - 特征码 'HackTool.Win32.Agent.bp' 被发现
C:\ABC\新建文件夹\新建文件夹\name-15.exe - 特征码 'Backdoor.Agent.YWI' 被发现
C:\ABC\新建文件夹\新建文件夹\name-16.exe - 特征码 'IM-Worm.Win32.Sumom.C' 被发现
C:\ABC\新建文件夹\新建文件夹\name-2.exe - 特征码 'Backdoor.Pcclient.SYX' 被发现
C:\ABC\新建文件夹\新建文件夹\name-3.exe - 特征码 'not-a-virus:Downloader.Win32.WinFixer.au' 被发现
C:\ABC\新建文件夹\新建文件夹\name-4.exe - 特征码 'Packer.Malware.NSAnti.J' 被发现
C:\ABC\新建文件夹\新建文件夹\name-5.exe - 特征码 'Virus.Packed.Win32.Klone.af' 被发现
C:\ABC\新建文件夹\新建文件夹\name-6.exe - 特征码 'DroppedBackdoor.Agent.YVJ' 被发现
C:\ABC\新建文件夹\新建文件夹\name-7.exe - 特征码 'Trojan-Spy.Win32.Agent.HR' 被发现
C:\ABC\新建文件夹\新建文件夹\name-8.exe - 特征码 'AdWare.Win32.Semt.a' 被发现
C:\ABC\新建文件夹\新建文件夹\name-9.exe - 特征码 'Win32.SuspectCrc' 被发现
16 文件被扫描
   (0 压缩档 0 文件)
16 特征码被侦测
0 可疑代码段被发现
耗时: 0:06.656

zwl2828

晕～ESET Smart Security只灭了5个～

jimmyleo

D:\Download\VirusScan\name-2.exe infected with Win32.Scproj.7573
D:\Download\VirusScan\name-4.exe infected with Trojan.Nsanti.Packed
>>>>>D:\Download\VirusScan\name-5.exe infected with BackDoor.Pigeon.3202
>>>>D:\Download\VirusScan\name-7.exe - decompression error
D:\Download\VirusScan\name-10.exe infected with Trojan.Packed.200
>D:\Download\VirusScan\name-11.exe - decompression error
>>>>>D:\Download\VirusScan\name-12.exe infected with Trojan.DownLoader.origin
D:\Download\VirusScan\name-15.exe infected with Win32.HLLW.SpyBot

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 19
Infected objects found: 6

jimmyleo

Undet [                ](     ) in D:\download\virusscan\name-1.exe
Found [       PE_HUNK.A]( 8584) in D:\download\virusscan\name-2.exe
Undet [                ](     ) in D:\download\virusscan\name-3.exe
Undet [                ](     ) in D:\download\virusscan\name-4.exe
Undet [                ](     ) in D:\download\virusscan\name-5.exe
Undet [                ](     ) in D:\download\virusscan\name-6.exe
Undet [                ](     ) in D:\download\virusscan\name-7.exe
Undet [                ](     ) in D:\download\virusscan\name-8.exe
Undet [                ](     ) in D:\download\virusscan\name-9.exe
Undet [                ](     ) in D:\download\virusscan\name-10.exe
Undet [                ](     ) in D:\download\virusscan\name-11.exe
Undet [                ](     ) in D:\download\virusscan\name-12.exe
Undet [                ](     ) in D:\download\virusscan\name-13.exe
Undet [                ](     ) in D:\download\virusscan\name-14.exe
Undet [                ](     ) in D:\download\virusscan\name-15.exe
Found [    WORM_SUMOM.C](    1) in D:\download\virusscan\name-16.exe
16 files have been read.
16 files have been checked.
16 files have been scanned.
16 files have been scanned. (including files in archived)
2 files containing viruses.
Found 2 viruses totally.
Maybe 0 viruses totally.

残缺的唯美

Result: 8 malware found
Backdoor.Win32.PcClient.ahu (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-1.exe
Backdoor.Win32.GrayBird.bss (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-11.exe
Trojan-PSW.Win32.QQPass.ajw (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-12.exe
Backdoor.Win32.Hupigon.vih (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-13.exe
Backdoor.Win32.VanBot.ha (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-15.exe
Backdoor.Win32.Hupigon.vjh (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part2.rar\н¨Îļþ¼Ð\name-5.exe
Packed.Win32.NSAnti.r (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part2.rar\н¨Îļþ¼Ð\name-7.exe
AdWare.Win32.Semt.b (adware)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part2.rar\н¨Îļþ¼Ð\name-8.exe


Riskware found
Downloader.Win32.WinFixer.au (riskware)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.part1.rar\н¨Îļþ¼Ð\name-3.exe


9个 fs

f22_fbi

红伞12个
2007-11-4,10:03:20 [WARNING] Is the Trojan horse TR/Spy.Agent.IY!
  E:\样本\新建文件夹\新建文件夹\name-10.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:30 [WARNING]  Suspicious file: Contains suspicious code HEUR/Crypted!
  E:\样本\新建文件夹\新建文件夹\name-13.exe
      [INFO] The file will be moved to quarantine.
2007-11-4,10:03:38 [WARNING] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.YWI.1 Backdoor server programs!
  E:\样本\新建文件夹\新建文件夹\name-15.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:45 [WARNING] Contains detection pattern of the worm WORM/Sumom.C.22!
  E:\样本\新建文件夹\新建文件夹\name-16.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:47 [WARNING] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.SYX.89 Backdoor server programs!
  E:\样本\新建文件夹\新建文件夹\name-2.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:49 [WARNING] Is the Trojan horse TR/Crypt.NSPM.Gen!
  E:\样本\新建文件夹\新建文件夹\name-4.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:52 [WARNING]  Suspicious file: Contains suspicious code HEUR/Crypted!
  E:\样本\新建文件夹\新建文件夹\name-5.exe
      [INFO] The file will be moved to quarantine.
2007-11-4,10:03:55 [WARNING] Is the Trojan horse TR/Crypt.NSPM.Gen!
  E:\样本\新建文件夹\新建文件夹\name-7.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:57 [WARNING] Is the Trojan horse TR/Agent.39936.11!
  E:\样本\新建文件夹\新建文件夹\name-9.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:20 [WARNING] Contains detection pattern of the dropper DR/Delphi.Gen!
  E:\样本\新建文件夹\新建文件夹\name-12.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:20 [WARNING] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs!
  E:\样本\新建文件夹\新建文件夹\name-11.exe
      [INFO] The file will be deleted.
2007-11-4,10:03:20 [WARNING] Contains detection pattern of the dropper DR/PcClient.Gen!
  E:\样本\新建文件夹\新建文件夹\name-1.exe
      [INFO] The file will be deleted.