4只[MD5: 1B587E 3DCFF3 BFE30C 67852C]

yitp

Result: 4 malware found
Backdoor.Win32.Popwin.ait (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\ABC.rar\ABC\30BD0591.EXE
C:\Documents and Settings\Administrator\×ÀÃæ\ABC.rar\ABC\C1437CA8.DLL
Worm.Win32.Downloader.ag (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\ABC.rar\ABC\abc.exe
Trojan-PSW.Win32.QQPass.akk (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\ABC.rar\ABC\svcos.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 5
Not scanned: 0
Result:
Viruses: 4
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2007-11-09_02
Spyware: 2007-11-09_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2007-11-09
F-Secure Libra: 2.04.01, 2007-11-06
F-Secure Orion: 1.02.37, 2007-11-09
F-Secure Draco: 1.00.35, 2007-10-30

Love=卡巴+费尔

Symantec Client Security

gwazy

红伞

Begin scan in 'C:\Documents and Settings\gwazy\桌面\ABC.rar'
C:\Documents and Settings\gwazy\桌面\ABC.rar
  [0] Archive type: RAR
  --> ABC\30BD0591.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> ABC\abc.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> ABC\C1437CA8.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ABC\svcos.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.akk
      [INFO]      The file was deleted!


End of the scan: 2007年11月10日  07:07
Used time: 00:11 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      3 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

FBAV

MicroVita AntiSpyware  
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\ABC\ABC\30BD0591.EXE]
                    …………发现Spy！报告:[1] Win32.Nop ?Uu
文件信息:  大小:18474  MD5:bfe30c40afb0df20c7220bcbec4c6c90


[C:\Documents and Settings\Administrator\桌面\Virus\ABC\ABC\abc.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:20284  MD5:67852c381667feda55098581cd0ef159


[C:\Documents and Settings\Administrator\桌面\Virus\ABC\ABC\svcos.exe]
                    …………发现Spy！报告:[2]
文件信息:  大小:23638  MD5:3dcff30ec5a2b34a390f8944bc16ca09


[C:\Documents and Settings\Administrator\桌面\Virus\ABC\ABC\C1437CA8.DLL]
                    …………发现Spy！报告:[2]
文件信息:  大小:40960  MD5:1b587e0548be01654afe542382ec8621


文件数:4   病毒数:4  比重:1
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 814
Paranoia Database - 48608
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\ABC

C:\Documents and Settings\Uhthn\Desktop\ABC\30BD0591.EXE - Infected BACKDOOR.AGENT.9 - Deleted
C:\Documents and Settings\Uhthn\Desktop\ABC\abc.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\ABC\C1437CA8.DLL - Infected VIRUS.AUTORUN.4 - Deleted
C:\Documents and Settings\Uhthn\Desktop\ABC\svcos.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.1

4 Files scanned
2 Infected files found
2 Suspected files found
0 Files disinfected
2 Files deleted