单独列出来吧 跟帖没人看...

傻猪猪米走鸡

2008-1-28 22:56:23        Kernel        File  'E:\virus\collection2.rar' was sent to ESET for analysis.

深红的雪

hxxp://www1.po0op.cn挂这么多........
McAfee VSE 8.5 两包才报三个

NobleT

Scan started: 2008-1-28, 23:08:45
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive G:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Clean]        F:\collection.rar->collection\1.gif
[Clean]        F:\collection.rar->collection\11.gif
[Clean]        F:\collection.rar->collection\2.gif
[Clean]        F:\collection.rar->collection\3.gif
[Clean]        F:\collection.rar->collection\4.gif
[Clean]        F:\collection.rar->collection\5.gif
[Clean]        F:\collection.rar->collection\8.gif
[Clean]        F:\collection.rar->collection\ad.js
[Clean]        F:\collection.rar->collection\Cn8586.htm
[Clean]        F:\collection.rar->collection\index.html
[Clean]        F:\collection.rar->collection\real2.exe->(UPack)
[Clean]        F:\collection.rar
[Clean]        F:\collection2.rar->collection\0.htm
[Clean]        F:\collection2.rar->collection\014.js
[Clean]        F:\collection2.rar->collection\1.js
[Clean]        F:\collection2.rar->collection\11.js
[Clean]        F:\collection2.rar->collection\2.htm
[Clean]        F:\collection2.rar->collection\24.js
[Clean]        F:\collection2.rar->collection\3.htm
[Clean]        F:\collection2.rar->collection\a.exe
[Found security risk]         <W32/Trojan2.UDJ (exact, not disinfectable)>        F:\collection2.rar->collection\as.exe->(embedded)
[Found exploit]         <HTML/IFrameBoF.F (exact, not disinfectable)>        F:\collection2.rar->collection\bb.js
[Clean]        F:\collection2.rar->collection\bf.js
[Clean]        F:\collection2.rar->collection\diao.htm
[Clean]        F:\collection2.rar->collection\down.exe->(embedded)
[Clean]        F:\collection2.rar->collection\down.exe->(embedded)->(embedded)
[Clean]        F:\collection2.rar->collection\down.exe->(embedded)->(embedded)
[Clean]        F:\collection2.rar->collection\down.exe->(embedded)->(UPack)
[Clean]        F:\collection2.rar->collection\down.exe->(UPack)
[Clean]        F:\collection2.rar->collection\foot.htm
[Clean]        F:\collection2.rar->collection\jh.htm
[Clean]        F:\collection2.rar->collection\lz.js
[Clean]        F:\collection2.rar->collection\Ms06014.htm
[Clean]        F:\collection2.rar->collection\nb.htm
[Clean]        F:\collection2.rar->collection\nc.htm
[Clean]        F:\collection2.rar->collection\nd.htm
[Clean]        F:\collection2.rar->collection\pp.js
[Found exploit]         <HTML/IFrameBoF (exact, not disinfectable)>        F:\collection2.rar->collection\ppp.js
[Clean]        F:\collection2.rar->collection\Real.js
[Found security risk]         <W32/Trojan2.UDJ (exact, not disinfectable)>        F:\collection2.rar->collection\rl.exe->(embedded)
[Clean]        F:\collection2.rar->collection\rl.htm
[Clean]        F:\collection2.rar->collection\rl.js
[Clean]        F:\collection2.rar->collection\rr.htm
[Clean]        F:\collection2.rar->collection\web1.htm
[Found security risk]         <W32/AutoRun.B.gen!Eldorado (not disinfectable, generic)>        F:\collection2.rar->collection\xxx.exe->(UPX)
[Contains infected objects]        F:\collection2.rar
[Quarantined]        F:\collection2.rar->collection\xxx.exe->(UPX)
[Clean]        F:\RECYCLER\S-1-5-21-299502267-1897051121-725345543-500\desktop.ini
[Clean]        F:\RECYCLER\S-1-5-21-299502267-1897051121-725345543-500\INFO2

---------------------------------------------------------------------
Scan ended:        2008-1-28, 23:08:53
Duration:        0:00:07

Scan result:

Scanned files:                 10
Infected objects:         5
Disinfected objects:         0
Quarantined files:         1

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\collection'
C:\Documents and Settings\Administrator\My Documents\collection\collection\
  0.htm
  014.js
  1.gif
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '4804f628.qua'!
  1.js
  11.gif
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Psyme.GX.3
      [INFO]      The file was moved to '47cbf62b.qua'!
  11.js
  2.gif
  2.htm
  24.js
  3.gif
  3.htm
  4.gif
  5.gif
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '49a17721.qua'!
  8.gif
  a.exe
  ad.js
  as.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
      [INFO]      The file was moved to '47cbf66d.qua'!
  bb.js
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
      [INFO]      The file was moved to '47cbf65c.qua'!
  bf.js
  Cn8586.htm
  diao.htm
  down.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was moved to '4814f669.qua'!
  foot.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '480cf669.qua'!
  index.html
  jh.htm
  lz.js
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
      [INFO]      The file was moved to '47cbf674.qua'!
  Ms06014.htm
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
      [INFO]      The file was moved to '47cdf66d.qua'!
  nb.htm
  nc.htm
  nd.htm
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Silly.Gen
      [INFO]      The file was moved to '47cbf65e.qua'!
  pp.js
  ppp.js
      [DETECTION] Contains detection pattern of the HTML script virus HTML/Shellcode.Gen
      [INFO]      The file was moved to '480df66a.qua'!
  pps.js
  Real.js
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.H
      [INFO]      The file was moved to '47fef65f.qua'!
  real2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was moved to '465b7768.qua'!
  rl.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
      [INFO]      The file was moved to '47cbf666.qua'!
  rl.htm
  rl.js
      [DETECTION] Contains detection pattern of the exploits EXP/RealPlay.W
      [INFO]      The file was moved to '466e776f.qua'!
  rr.htm
  web1.htm
      [DETECTION] Contains detection pattern of the Java script virus JS/Dldr.Agent.chc
      [INFO]      The file was moved to '47fff65f.qua'!
  xxx.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was moved to '4815f672.qua'!


End of the scan: 2008年1月28日  07:34
Used time: 00:04 min

The scan has been done completely.

      2 Scanning directories
     41 Files were scanned
      9 viruses and/or unwanted programs were found
      8 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     17 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     32 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes