25个

挪威的冬天

我不是一般的寒

信息        2008-02-16  16:46:33        您此次查毒清除了3个病毒                       
信息        2008-02-16  16:46:33        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-02-16  16:46:33        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件31个                       
信息        2008-02-16  16:46:33        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-16  16:46:33        C:\Users\挪威的冬天\Desktop\样本.rar\样本\zgame1        Win32.Troj.Tibs.2518        清除成功       
病毒        2008-02-16  16:46:33        C:\Users\挪威的冬天\Desktop\样本.rar\样本\vedxga4me1.exe        Win32.Troj.Tibs.2518        清除成功       
病毒        2008-02-16  16:46:32        C:\Users\挪威的冬天\Desktop\样本.rar\样本\m1ax1d12132116143v.exe        Win32.Troj.Dialer.ay.13824        清除成功

无尽藏海

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-2-16, 4:21

Scan name: [Custom Scan]
Path to scan: F:\virus\样本6.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-2-16, 16:48:35
---------------------------------------------------------------------

[Found virus]         <W32/Dropper.gen6 (not disinfectable)>        F:\virus\样本6.rar->样本\diperto1e19-6263.sys
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\dllgh8jkd1q1.exe
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\dllgh8jkd1q5.exe
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\dllgh8jkd1q6.exe
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\dllgh8jkd1q7.exe
[Found possible virus]         <W32/Dialer-behavior!Maximus (not disinfectable)>        F:\virus\样本6.rar->样本\m1ax1d12132116143v.exe
[Found possible virus]         <W32/new-malware!Maximus (not disinfectable)>        F:\virus\样本6.rar->样本\m1ax1d121322116143v.exe
[Found security risk]         <W32/Zhelatin.F.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\shift.exe
[Found possible virus]         <W32/STZ_like!Generic (not disinfectable)>        F:\virus\样本6.rar->样本\taskmon.sys
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\vedxg4am1et2.exe
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\vedxga1me4t1.exe
[Found downloader]         <W32/Downloader.ARKP (exact, not disinfectable)>        F:\virus\样本6.rar->样本\vedxga4me1.exe
[Found possible virus]         <W32/STZ_like!Generic (not disinfectable)>        F:\virus\样本6.rar->样本\WDICA.sys
[Found security risk]         <W32/Tibs.K.gen!Eldorado (not disinfectable, generic)>        F:\virus\样本6.rar->样本\wind32.exe
[Found downloader]         <W32/Downloader.MAP (exact, not disinfectable)>        F:\virus\样本6.rar->样本\zgame1
[Contains infected objects]        F:\virus\样本6.rar
[Quarantined]        F:\virus\样本6.rar->样本\zgame2

---------------------------------------------------------------------
Scan ended:        2008-2-16, 16:48:43
Duration:        0:00:08

Scan result:

Scanned files:                 1
Infected objects:         15
Disinfected objects:         0
Quarantined files:         1

hj5abc

傻猪猪米走鸡

2008-2-16 18:01:29        Kernel        File  'E:\virus\2.16.rar' was sent to ESET for analysis.

sam.to

Hello,

symavc32.sys - Rootkit.Win32.Agent.aaq,
WDICA.sys - Rootkit.Win32.Agent.aas

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

allinwonderi

ArcaMicroScan少了点，报14：
[Scanning : C:\Test]


C:\Test\样本.rar<RAR>:diperto1e19-6263.sys <- Worm.Zhelatin.Vd : No action
C:\Test\样本.rar<RAR>:m1ax1d12132116143v.exe <- Dialer.GbJ : No action
C:\Test\样本.rar<RAR>:m1ax1d121322116143v.exe <- Trojan.Downloader.Obfuscated.N : No action
C:\Test\样本.rar<RAR>:mrofinu27.exe.tmp <- Trojan.Downloader.Agent.Jal : No action
C:\Test\样本.rar<RAR>:taskmon.sys <- Trojan.Proxy.Agent.Xo : No action
C:\Test\样本.rar<RAR>:vedxg3am1et3.exe <- Trojan.Proxy.Saturn.Ao : No action
C:\Test\样本.rar<RAR>:vedxga3me2.exe <- Trojan.Downloader.Vb.Cop : No action
C:\Test\样本.rar<RAR>:vedxga3me2.exe<DLLRES>:file0.exe <- Trojan.Downloader.Vb.Cop : No action
C:\Test\样本.rar<RAR>:vedxga4m1et4.exe <- Trojan.Proxy.Agent.Zd : No action
C:\Test\样本.rar<RAR>:vedxga4me1.exe <- Trojan.Agent.Hp.D15 : No action
C:\Test\样本.rar<RAR>:vedxga4me1.exe<DLLRES>:file0.exe <- Trojan.Agent.Hp.D15 : No action
C:\Test\样本.rar<RAR>:vedxga5me3.exe <- Trojan.Downloader.Small.Ijp : No action
C:\Test\样本.rar<RAR>:zgame1 <- Trojan.Agent.Hp.D15 : No action
C:\Test\样本.rar<RAR>:zgame2 <- Trojan.Downloader.Vb.Cop : No action



Scanned objects : 31

Infected objects : 14

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Dialer.Win32.Agent.yfq
病毒： Trojan.DL.Obfuscated.gs  
病毒： Trojan.DL.Win32.Mnless.xe
病毒： Trojan.Win32.Undef.cft   
病毒： Trojan.DL.Agent.eqk      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.50

hlx98007

２５个里剩两个sys没查出。

cecil77

我也是F-S CS,为什么只报22个?

woai_jolin

"Scan ""Shell extension scan"" was finished."
"Infections found:";"22"
"Infected objects removed or healed";"22"
"Not removed or healed.";"0"
"Spyware found:";"1"
"Spyware removed:";"1"
"Not removed:";"0"
"Warnings count:";"0"
"Information count:";"0"
"Scan started:";"2008年2月16日, 21:29:42"
"Total object scanned:";"26"
"Time needed:";"less than one second"
"Errors encountered:";"0"

"Infections"
"File";"Infection";"Result"
"G:\v\样本.rar:\样本\diperto1e19-6263.sys";"Virus identified I-Worm/Nuwar.L";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\dllgh8jkd1q1.exe";"Trojan horse Small.XT";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\dllgh8jkd1q5.exe";"Trojan horse Downloader.Small.BQV";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\m1ax1d121322116143v.exe";"Virus found Downloader.Obfuskated";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\mrofinu27.exe.tmp";"Trojan horse Downloader.Generic6.AIKL";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\shift.exe";"Virus identified I-Worm/Nuwar.N";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\symavc32.sys";"Trojan horse Agent.2.BT";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\taskmon.sys";"Trojan horse Agent.NHU";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxg3am1et3.exe";"Virus identified Packed.Tibs";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxg6ame4.exe";"Trojan horse SHeur.ATAN";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga1me4t1.exe";"Trojan horse Downloader.Small.BQW";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga3me2.exe";"Trojan horse Downloader.Generic6.AHTS";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga4m1et4.exe";"Virus identified Packed.Tibs";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga4me1.exe";"Trojan horse Downloader.Generic.QUS";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga5me3.exe";"Trojan horse Downloader.Zlob.RZ";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\vedxga8me6.exe";"Virus identified Packed.Tibs";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\WDICA.sys";"Virus identified Worm/Generic.FVT";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\wind32.exe";"Virus identified I-Worm/Nuwar.C";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\xpupdate.exe";"Trojan horse SHeur.ATAM";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\zgame1";"Trojan horse Downloader.Generic.QUS";"Moved to Virus Vault"
"G:\v\样本.rar:\样本\zgame2";"Trojan horse Downloader.Generic6.AHTS";"Moved to Virus Vault"
"G:\v\样本.rar";"Virus identified I-Worm/Nuwar.L";"Moved to Virus Vault"

"Spyware"
"File";"Infection";"Result"
"G:\v\样本.rar:\样本\m1ax1d12132116143v.exe";"Potentially harmful program Dialer.DNA";"Moved to Virus Vault"