九个

liunanyuan

.......................

孤单爱情海

Start of the scan: 2007年12月13日  13:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\1234\桌面\9.rar'
C:\Documents and Settings\1234\桌面\9.rar
  [0] Archive type: RAR
  --> wdlm.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> arp.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> ati2evxx.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> down[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> host.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> lmmh.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> lmmy.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> soundma.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> svcos[1].exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
      [INFO]      A backup was created as '47d2c00a.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: 2007年12月13日  13:15
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      7 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned

绅博周幸

Starting the file scan:

Begin scan in 'C:\Users\Xing\Desktop\Downloads\9.rar'
C:\Users\Xing\Desktop\Downloads\9.rar
  [0] Archive type: RAR
  --> wdlm.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> arp.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> ati2evxx.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> down[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> host.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> lmmh.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> lmmy.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> soundma.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> svcos[1].exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
      [WARNING]   The file was ignored!


soundma.exe, host.exe were sent to Avira

绅博周幸

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename  Size (Byte) Result
3598950  9.rar 54.8 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3598438  host.exe  5.29 KB  UNDER ANALYSIS
3598951  soundma.exe  49.85 KB  UNDER ANALYSIS


Please find a detailed report concerning each individual sample below:

Filename Result
host.exe  UNDER ANALYSIS

The file 'host.exe' has been determined to be 'UNDER ANALYSIS'.

Filename Result
soundma.exe  UNDER ANALYSIS

The file 'soundma.exe' has been determined to be 'UNDER ANALYSIS'.


--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.
Print this page

绅博周幸

soundma.exe no  malicious code was found in this attach file

孤单爱情海

不是全查出来了吗!你怎么还要上报

googlehack

又是一堆盗号病毒

jimmyleo

haha chow彻底回归啦 我终于可以歇歇了

孤单爱情海

原帖由 jimmyleo 于 2007-12-13 13:38 发表
haha chow彻底回归啦 我终于可以歇歇了

好像还有一个没有回归的!就是用那个无间道里的头像的那个版主!忘了他叫什么名了!!

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\9.rar'
C:\Users\morgan\Documents\
  9.rar
    [0] Archive type: RAR
      --> wdlm.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> arp.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
            [WARNING]   Infected files in archives cannot be repaired!
      --> ati2evxx.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
            [WARNING]   Infected files in archives cannot be repaired!
      --> down[1].exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Dropper.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> host.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
            [WARNING]   Infected files in archives cannot be repaired!
      --> lmmh.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> lmmy.exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
            [WARNING]   Infected files in archives cannot be repaired!
      --> soundma.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: OVL
          --> Object
      --> svcos[1].exe
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
            [WARNING]   Infected files in archives cannot be repaired!
      [WARNING]   The file was ignored!


End of the scan: 2007年12月12日  21:47
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      8 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      2 Archives were scanned
      9 Warnings
      0 Notes