10个

无尽藏海

2008-2-17 17:32:05        Kernel        File  'F:\virus\10[1].rar' was sent to ESET for analysis.

gho

mcafee还剩3个miss，其中包括9.CHM

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Spy.Win32.Delf.uc
病毒： Backdoor.Win32.Watcher.a
病毒： Backdoor.FireFly.l      
病毒： Backdoor.Win32.Gpigeon.cal
病毒： Backdoor.Win32.Agent.byk

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.31.50

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\10'
C:\Documents and Settings\Administrator\My Documents\10\
  1.exe
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
  2.exe
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
  3.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.210 Backdoor server programs
      [INFO]      The file was deleted!
  4.exe
  5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
  5930875.dll
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
  6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
  7.exe
    [0] Archive type: RAR SFX (self extracting)
    --> aoc.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> snapshot20060321234458.jpg
        [INFO]      The file was deleted!
  8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
  9.chm
    [0] Archive type: CHM
    --> /#SYSTEM
    --> /newproject.htm
    --> /~DF2CF7#tmp.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> /newproject.hhc
    --> /newproject.hhk
    --> /index.htm
    --> /pass.bmp
    --> /#WINDOWS
    --> /$WWKeywordLinks/BTree
    --> /$WWKeywordLinks/Data
    --> /$WWKeywordLinks/Map
    --> /$WWKeywordLinks/Property
    --> /$WWAssociativeLinks/Property
    --> /$OBJINST
    --> /#IDXHDR
    --> /#TOPICS
    --> /#URLTBL
    --> /#URLSTR
    --> /#STRINGS
        [INFO]      The file was deleted!


End of the scan: 2008年2月17日  10:13
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      9 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     22 Files not concerned
      2 Archives were scanned
      2 Warnings
      0 Notes

Graybird

Starting the file scan:

Begin scan in 'E:\Antivir\1.exe'
E:\Antivir\1.exe
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\2.exe'
E:\Antivir\2.exe
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\3.exe'
E:\Antivir\3.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.210 Backdoor server programs
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\4.exe'
E:\Antivir\4.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.apgg Backdoor server programs
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\5.exe'
E:\Antivir\5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\5930875.dll'
E:\Antivir\5930875.dll
      [DETECTION] Is the Trojan horse TR/Agent.stb
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\6.exe'
E:\Antivir\6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\7.exe'
E:\Antivir\7.exe
  [0] Archive type: RAR SFX (self extracting)
  --> aoc.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\8.exe'
E:\Antivir\8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\Antivir\9.chm'
E:\Antivir\9.chm
  [0] Archive type: CHM
  --> /~DF2CF7#tmp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年2月19日  10:06
Used time: 00:15 min

The scan has been done completely.

      0 Scanning directories
     31 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     10 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     21 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

xiaoxmj

用迅雷下报毒

spaceplane

BD 8

spaceplane

NOD 8
已扫描的磁盘，文件夹及文件：E:\pic\_PICtemp\1.exe; E:\pic\_PICtemp\2.exe; E:\pic\_PICtemp\3.exe; E:\pic\_PICtemp\4.exe; E:\pic\_PICtemp\5.exe; E:\pic\_PICtemp\5930875.dll; E:\pic\_PICtemp\6.exe; E:\pic\_PICtemp\7.exe; E:\pic\_PICtemp\8.exe; E:\pic\_PICtemp\9.chm
E:\pic\_PICtemp\1.exe - Win32/Spy.Delf.NEH 木马
E:\pic\_PICtemp\2.exe - Win32/Spy.Delf.NEH 木马
E:\pic\_PICtemp\3.exe - Win32/FireFly 木马
E:\pic\_PICtemp\5.exe - Win32/Hupigon 木马的变种
E:\pic\_PICtemp\5930875.dll - Win32/Spy.Delf.NEH 木马
E:\pic\_PICtemp\6.exe - Win32/Hupigon 木马的变种
E:\pic\_PICtemp\7.exe >>RAR >>aoc.exe - 未查明的 NewHeur_PE 病毒 [7]
E:\pic\_PICtemp\8.exe - 可能是 Win32/Hupigon.NCE 木马 的一个变种
已扫描的文件数目：37
已发现的病毒数目：8
完成时间： 11:35:44 总扫描时间：73 秒 (00:01:13)

冷冷

IK
I:\virus\February\19\10[1]\1.exe - Signature 'Trojan-Spy.Win32.Delf.uc' found
I:\virus\February\19\10[1]\2.exe - Signature 'Trojan-Spy.Win32.Delf.uc' found
I:\virus\February\19\10[1]\3.exe - Signature 'Backdoor.Win32.Delf.AJA' found
I:\virus\February\19\10[1]\4.exe - Signature 'Virus.Packed.Win32.Klone.ao' found
I:\virus\February\19\10[1]\5.exe - Signature 'Trojan-Spy.Win32.Banker.ahy' found
I:\virus\February\19\10[1]\5930875.dll - Signature 'Trojan-Spy.Delf.UC' found
I:\virus\February\19\10[1]\6.exe - Signature 'Trojan-Spy.Win32.Banker.ahy' found
I:\virus\February\19\10[1]\7.exe:\aoc.exe - Signature 'Backdoor.Win32.Hupigon.VT' found
I:\virus\February\19\10[1]\7.exe:\snapshot20060321234458.jpg
I:\virus\February\19\10[1]\7.exe
I:\virus\February\19\10[1]\8.exe - Signature 'Backdoor.Win32.Prosti.cr' found
I:\virus\February\19\10[1]\9.chm

        12 Files scanned
          (1 Archiv with 2 files)
        9 Signatures found
        0 Suspect code-parts found
        Used time: 0:04.672

sam.to

已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.afh        檔案: C:\Documents and Settings\kato9096\桌面\10\1.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.afh        檔案: C:\Documents and Settings\kato9096\桌面\10\2.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.FireFly.a        檔案: C:\Documents and Settings\kato9096\桌面\10\3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.apgg        檔案: C:\Documents and Settings\kato9096\桌面\10\4.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.cal        檔案: C:\Documents and Settings\kato9096\桌面\10\5.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Delf.uc        檔案: C:\Documents and Settings\kato9096\桌面\10\5930875.dll
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.cal        檔案: C:\Documents and Settings\kato9096\桌面\10\6.exe//UPack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Agent.din        檔案: C:\Documents and Settings\kato9096\桌面\10\7.exe//data.rar/aoc.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.awyr        檔案: C:\Documents and Settings\kato9096\桌面\10\8.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.aujk        檔案: C:\Documents and Settings\kato9096\桌面\10\9.chm//~DF2CF7#tmp.exe

10，沒有不报