9ge

hshhua01

Begin scan in 'D:\BOOK\9.rar'
D:\BOOK\9.rar
  [0] Archive type: RAR
  --> 9\!@#$_278.exe.VIR
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bfd.10 Backdoor server programs
  --> 9\!@#$_312.exe.VIR
      [DETECTION] Contains detection pattern of the SPR/QQSpy program
  --> 9\!@#$_32.exe.VIR
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
  --> 9\!@#$_323.exe.VIR
      [DETECTION] Is the Trojan horse TR/Spy.Banker.see
  --> 9\!@#$_459.exe.VIR
      [DETECTION] Contains detection pattern of the worm WORM/Nomlur.B.7
  --> 9\!@#$_646.exe.VIR
      [DETECTION] Is the Trojan horse TR/FearlessDropper
  --> 9\!@#$_652.exe.VIR
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 9\!@#$_781.exe.VIR
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bfd.9 Backdoor server programs
  --> 9\!@#$_791.exe.VIR
      [DETECTION] Is the Trojan horse TR/Proxy.Agent.CL
      [WARNING]   The file was ignored!


End of the scan: 2008年2月23日  21:33
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found

allinwonderi

[Scanning : C:\Test]


C:\Test\9.rar<RAR>:!@#$_459.exe.VIR <- Heur.RoundKick : No action
C:\Test\9.rar<RAR>:!@#$_646.exe.VIR <- Trojan.Dropper.Fearless : No action
C:\Test\9.rar<RAR>:!@#$_791.exe.VIR <- Heur.Win32.H : No action



Scanned objects : 10

Infected objects : 3

hj5abc

6

Sign of "Win32:Agent-EPC [Trj]" has been found in "F:\9.rar\9\!@#$_278.exe.VIR" file.  
Sign of "Win32:Obfuscated [Trj]" has been found in "F:\9.rar\9\!@#$_32.exe.VIR" file.  
Sign of "Win32:Agent-SIM [Trj]" has been found in "F:\9.rar\9\!@#$_459.exe.VIR" file.  
Sign of "Win32:Bifrose-AAQ [Trj]" has been found in "F:\9.rar\9\!@#$_646.exe.VIR\[Embedded#81ff]" file.  
Sign of "Win32:MulDrop-K [Trj]" has been found in "F:\9.rar\9\!@#$_646.exe.VIR" file.  
Sign of "Win32:Delf-APJ [Trj]" has been found in "F:\9.rar\9\!@#$_652.exe.VIR" file.  
Sign of "Win32:Agent-EPC [Trj]" has been found in "F:\9.rar\9\!@#$_781.exe.VIR" file.

Joker

!@#$_278.exe(1).VIR, !@#$_781.exe(1).VIR - Backdoor.Win32.PcClient.bfd,
!@#$_32.exe(1).VIR - Trojan.Win32.Obfuscated.gy

These files are already detected. Please update your antivirus bases.

!@#$_312.exe(1).VIR - Trojan-PSW.Win32.QQPass.bbo,
!@#$_323.exe(1).VIR - Constructor.Win32.VB.cx,
!@#$_459.exe(1).VIR - Trojan-Downloader.Win32.Delf.ewx,
!@#$_646.exe(1).VIR - Trojan-Dropper.Win32.VB.zs,
!@#$_652.exe(1).VIR - Trojan-Downloader.Win32.Delf.eww

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

wangjay1980

原帖由 dark1109 于 2008-2-23 22:27 发表
!@#$_278.exe(1).VIR, !@#$_781.exe(1).VIR - Backdoor.Win32.PcClient.bfd,
!@#$_32.exe(1).VIR - Trojan.Win32.Obfuscated.gy

These files are already detected. Please update your antivirus bases.

!@ ...

晕，你这么快 怎么不回复我

Joker

原帖由 wangjay1980 于 2008-2-23 23:00 发表



晕，你这么快 怎么不回复我

RP....
这个么办法的。。

wangjay1980

哈哈，RP不是什么时候都好的

wangjay1980

差点忘了，这几个偶没上报，因为KATO写了它上报

wolffshen

FS结果: 找到 4 恶意软件
Backdoor.Win32.PcClient.bfd (病毒)
D:\Virus\Test\!@#$_278.exe 操作: 删除
D:\Virus\Test\!@#$_781.exe 操作: 删除
Trojan.Win32.Obfuscated.gy (病毒)
D:\Virus\Test\!@#$_32.exe 操作: 删除
Trojan.Win32.Dialer.afl (病毒)
D:\Virus\Test\!@#$_791.exe 操作: 删除

mofunzone

全灭
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\9'
C:\Documents and Settings\Administrator\My Documents\9\
  !@#$_278.exe.VIR
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bfd.10 Backdoor server programs
      [INFO]      The file was deleted!
  !@#$_312.exe.VIR
      [DETECTION] Contains detection pattern of the SPR/QQSpy program
      [INFO]      The file was deleted!
  !@#$_32.exe.VIR
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
      [INFO]      The file was deleted!
  !@#$_323.exe.VIR
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The fund was classified as suspicious.
      [INFO]      The file was moved to '47e3841d.qua'!
  !@#$_459.exe.VIR
      [DETECTION] Contains detection pattern of the worm WORM/Nomlur.B.7
      [INFO]      The file was deleted!
  !@#$_646.exe.VIR
      [DETECTION] Is the Trojan horse TR/FearlessDropper
      [INFO]      The file was deleted!
  !@#$_652.exe.VIR
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  !@#$_781.exe.VIR
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.bfd.9 Backdoor server programs
      [INFO]      The file was deleted!
  !@#$_791.exe.VIR
      [DETECTION] Is the Trojan horse TR/Proxy.Agent.CL
      [INFO]      The file was deleted!


End of the scan: 2008年2月23日  12:36
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
      9 Files were scanned
      8 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      8 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes