10只

欠妳緈諨

EAV全灭<img src="images/smilies/default/6.gif" smilieid="6" border="0" alt="" />

残缺的唯美

deleted: Trojan program Trojan-PSW.Win32.Delf.aha        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/OnlO0r.bak//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.Delf.aha        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/OnlO0r.dll
deleted: Trojan program Backdoor.Win32.Delf.awy        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/scvhost.exe
deleted: Trojan program Trojan-Dropper.Win32.Delf.ais        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/svchost.exe//FSG//PEPatch
deleted: Trojan program Trojan-Downloader.Win32.Agent.blm        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/pcihdd.sys
deleted: Trojan program Trojan-PSW.Win32.WOW.adm        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/fkqxejpuyf.dll//UPack//PE_Patch.MaskPE
deleted: Trojan program Trojan-PSW.Win32.WOW.adm        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/mswmp32.dll//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.fyn        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/win5.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.blm        File: C:\Users\Administrator\Desktop\Ñù±¾.rar/win7.exe

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\2000\OnlO0r.bak]
                    …………发现Spy！报告: [4] [2]
文件信息:  大小:29231  MD5:4096e1ddfad85ce357faaefe1de5c5b8


[C:\Documents and Settings\Administrator\桌面\Virus\2000\OnlO0r.dll]
                    …………发现Spy！报告: [4] [8] HOOK者
文件信息:  大小:35887  MD5:15fa8057dda3330d017136ed4c01037c


[C:\Documents and Settings\Administrator\桌面\Virus\2000\scvhost.exe]
                    …………发现Spy！报告:[1] Win32.NkHack.FSG.A
文件信息:  大小:11081  MD5:059725b53772a916f11e27517edb6bf0


[C:\Documents and Settings\Administrator\桌面\Virus\2000\svchost.exe]
                    …………发现Spy！报告:[2] [1] Win32.NkHack.FSG.A
文件信息:  大小:177493  MD5:8fa9e2057bb42cdd6fd40d91de484511


[C:\Documents and Settings\Administrator\桌面\Virus\2000\fkqxejpuyf.dll]
                    …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:21978  MD5:6f8269b2373207c4527c3bf52a019c76


[C:\Documents and Settings\Administrator\桌面\Virus\2000\mswmp32.dll]
                    …………发现Spy！报告:[2] [1] Win32.NkHack.FSG.A
文件信息:  大小:33629  MD5:f35545513d0cc2bad4f35ea7b9327445


[C:\Documents and Settings\Administrator\桌面\Virus\2000\S1682.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:1432  MD5:a3485b525e5aa3be9a28eda0a84d5e22


[C:\Documents and Settings\Administrator\桌面\Virus\2000\win7.exe]
                    …………发现Spy！报告:[2]
文件信息:  大小:49152  MD5:2aeafe191af737d8c2fcdc2c11fb78fa


文件数:10   病毒数:8  比重:0.8
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 814
Paranoia Database - 48608
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\a

C:\Documents and Settings\Uhthn\Desktop\a\OnlO0r.bak - Infected WIN32.VIRUS.AUTORUN.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\OnlO0r.dll - Infected WIN32.VIRUS.AUTORUN.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\scvhost.exe - Infected BACKDOOR.DELF.3 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\svchost.exe - Infected TROJAN-DROPPER.DELF.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\pcihdd.sys - Infected GENERIC.MALWARE.623.1A70 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\fkqxejpuyf.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\a\mswmp32.dll - Infected GENERIC.MALWARE.DF5.835D - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\S1682.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\a\win5.exe - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\a\win7.exe - Infected TROJAN-DOWNLOADER.AGENT.5 - Deleted

10 Files scanned
8 Infected files found
2 Suspected files found
0 Files disinfected
8 Files deleted

chenrui19930

最近ESS表现很好

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.aha    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/OnlO0r.bak//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.aha    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/OnlO0r.dll
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.awy    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/scvhost.exe
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Delf.ais    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/svchost.exe//FSG//PEPatch
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.blm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/pcihdd.sys
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.WOW.adm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/fkqxejpuyf.dll//UPack//PE_Patch.MaskPE
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.WOW.adm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/mswmp32.dll//FSG
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Tiny.eo    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/S1682.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.fyn    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/win5.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.blm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/win7.exe

全部找到，找到十个，比前面的多

[ 本帖最后由 kato9096 于 2007-11-15 00:10 编辑 ]

yinxuchina

北京江民新科技术有限公司

        扫描引擎 11.00.702
        病毒库日期 2007-11-14
        更新日期 2007-11-15

扫描目标 C:\Documents and Settings\yin\桌面\样本.rar

开始时间 2007-11-15 00:08:39

在 C:\Documents and Settings\yin\桌面\样本.rar->OnlO0r.bak 中发现 Trojan/PSW.QQPass.cyk 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->OnlO0r.dll 中发现 Trojan/PSW.QQPass.cyl 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->scvhost.exe 中发现 TrojanDropper.Agent.bdq 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->svchost.exe 中发现 Backdoor/Agent.mje 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->pcihdd.sys 中发现 TrojanDownloader.Agent.ppo 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->fkqxejpuyf.dll 中发现 Trojan/PSW.Moshou.aqx 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->mswmp32.dll 中发现 Trojan/PSW.GamePass.actq 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->S1682.exe 中发现 TrojanDownloader.Small.tnq 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->win5.exe 中发现 Trojan/PSW.OnLineGames.joi 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\样本.rar->win7.exe 中发现 Trojan/Agent.pgz 病毒, 已删除
正常结束。

gwazy

C:\Documents and Settings\gwazy\桌面\样本.rar
  [0] Archive type: RAR
  --> OnlO0r.bak
      [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> OnlO0r.dll
      [DETECTION] Is the Trojan horse TR/PSW.Delf.aha
  --> scvhost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> pcihdd.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
  --> fkqxejpuyf.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.adm
  --> mswmp32.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.adm
  --> S1682.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.EO.29
  --> win5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> win7.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
      [INFO]      The file was deleted!


End of the scan: 2007年11月15日  09:48
Used time: 00:15 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

残缺的唯美

mcafee  9个

greysea

哦 病毒可怕