26 PCS

woai_jolin

Scan Log
Version of virus signature database: 2913 (20080301)
Date: 2008/3/1  Time: 19:02:13
Scanned disks, folders and files: G:\v\001.rar
G:\v\001.rar » RAR » nsn73.tmp - is OK
G:\v\001.rar » RAR » ad4254[1].exe - is OK
G:\v\001.rar » RAR » my2[1].exe - Win32/Small.NBT trojan - was a part of the deleted object
G:\v\001.rar » RAR » val2.exe - Win32/Small.NBT trojan - was a part of the deleted object
G:\v\001.rar » RAR » val.exe - Win32/Small.NBT trojan - was a part of the deleted object
G:\v\001.rar » RAR » my_70169.exe - probably unknown NewHeur_PE virus [7] - was a part of the deleted object
G:\v\001.rar » RAR » kfa.exe - probably a variant of Win32/AutoRun.ED worm - was a part of the deleted object
G:\v\001.rar » RAR » my4[1].exe - probably a variant of Win32/AutoRun.ED worm - was a part of the deleted object
G:\v\001.rar » RAR » snowfall.exe - probably a variant of Win32/AutoRun.ED worm - was a part of the deleted object
G:\v\001.rar » RAR » svchost.exe - probably a variant of Win32/AutoRun.ED worm - was a part of the deleted object
G:\v\001.rar » RAR » test.exe - probably a variant of Win32/AutoRun.ED worm - was a part of the deleted object
G:\v\001.rar » RAR » Uninst.exe - Win32/Adware.Cinmus application - was a part of the deleted object
G:\v\001.rar » RAR » 11[1].exe - is OK
G:\v\001.rar » RAR » servciesa.exe - is OK
G:\v\001.rar » RAR » SkypeClient.exe - Win32/TrojanDownloader.Adload.NEQ trojan - was a part of the deleted object
G:\v\001.rar » RAR » soft267.exe - is OK
G:\v\001.rar » RAR » ~DF6260.tmp - is OK
G:\v\001.rar » RAR » TASKMANT.exe - is OK
G:\v\001.rar » RAR » DoSSSetup.dll - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
G:\v\001.rar » RAR » decoder.dll - is OK
G:\v\001.rar » RAR » c.exe » ASPack v2.12 - is OK
G:\v\001.rar » RAR » wei[1].exe » ASPack v2.12 - is OK
G:\v\001.rar » RAR » Rpcs.dll - Win32/PSW.QQRob.NAQ trojan - was a part of the deleted object
G:\v\001.rar » RAR » ad4341.exe » NSIS » Entries.bin - is OK
G:\v\001.rar » RAR » ad4341.exe » NSIS » Strings.txt - is OK
G:\v\001.rar » RAR » ad4341.exe » NSIS » cpush.dll - is OK
G:\v\001.rar » RAR » ad4341.exe » NSIS » Uninst.exe - Win32/Adware.Cinmus application - was a part of the deleted object
G:\v\001.rar » RAR » 27.exe » NSIS » Entries.bin - is OK
G:\v\001.rar » RAR » 27.exe » NSIS » Strings.txt - is OK
G:\v\001.rar » RAR » 27.exe » NSIS » System.dll - is OK
G:\v\001.rar » RAR » 27.exe » NSIS » DoSSSetup.dll - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
G:\v\001.rar » RAR » 27.exe » NSIS » acpidisk.sys - is OK
G:\v\001.rar » RAR » KERNL32.exe - is OK
Number of scanned objects: 36
Number of threats found: 15
Time of completion: 19:02:16  Total scanning time: 3 sec (00:00:03)

Notes:
[7] Object is probably infected with an unknown virus.

挪威的冬天

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-02-29
        更新日期 2008-03-01

扫描目标 D:\Documents and Settings\Norway's Winter\桌面\001.rar

开始时间 2008-03-01 19:04:19

在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->my2[1].exe 中发现 Backdoor/Agent.wgj 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->val2.exe 中发现 Backdoor/Agent.wgj 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->val.exe 中发现 Backdoor/Agent.wgj 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->soft267.exe 中发现 TrojanDownloader.Delf.hsj 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->c.exe 中发现 Trojan/PSW.GamePass.aanz 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->wei[1].exe 中发现 Trojan/PSW.GamePass.aanz 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->Rpcs.dll 中发现 TrojanDownloader.Agent.lkd 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->ad4341.exe->$COMMONFILES\CPUSH\cpush.dll 中发现 TrojanClicker.Agent.uz 病毒, 已删除
在 D:\Documents and Settings\Norway's Winter\桌面\001.rar->KERNL32.exe 中发现 Trojan/Agent.ajyd 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :32                                  病毒体 :9         
                   删除 :9                                     解毒 :0         
    扫描速度(千字节/秒) :179                               扫描时间 :00:00:16
    扫描文件速度(个/秒) :2

DFXBB

E:\Virus\03-02\001\11[1].exe\[ORiEN] [L] Win32:Pakes-AJD [Trj] (0)
E:\Virus\03-02\001\27.exe\$TEMP\acpidisk.sys\[Embedded#030a4] [L] Win32:Cinmus-D [Adw] (0)
E:\Virus\03-02\001\27.exe\$TEMP\acpidisk.sys [L] Win32:Cinmus-J [Rtk] (0)
E:\Virus\03-02\001\27.exe [L] Win32:Adware-gen [Adw] (0)
E:\Virus\03-02\001\ad4341.exe\$COMMONFILES\CPUSH\cpush.dll [L] Win32:BHO-GG [Adw] (0)
E:\Virus\03-02\001\c.exe\[ASPack]\[Embedded#EXE1111] [L] Win32:Delf-HBH [Trj] (0)
E:\Virus\03-02\001\KERNL32.exe [L] Win32:Delf-HBH [Trj] (0)
E:\Virus\03-02\001\kfa.exe\[FSG] [L] Win32:Losabel-C [Trj] (0)
E:\Virus\03-02\001\my2[1].exe\[BeRoEXE] [L] Win32:Agent-MLJ [Trj] (0)
E:\Virus\03-02\001\my4[1].exe\[FSG] [L] Win32:Losabel-C [Trj] (0)
E:\Virus\03-02\001\Rpcs.dll [L] Win32:QQRob-BK [Trj] (0)
E:\Virus\03-02\001\servciesa.exe\[ORiEN] [L] Win32:Pakes-AJD [Trj] (0)
E:\Virus\03-02\001\SkypeClient.exe\[UPX] [L] Win32:Baidubar-B [Trj] (0)
E:\Virus\03-02\001\snowfall.exe\[FSG] [L] Win32:Losabel-C [Trj] (0)
E:\Virus\03-02\001\svchost.exe\[FSG] [L] Win32:Losabel-C [Trj] (0)
E:\Virus\03-02\001\TASKMANT.exe [L] Win32:Delf-HBH [Trj] (0)
E:\Virus\03-02\001\test.exe\[FSG] [L] Win32:Losabel-C [Trj] (0)
E:\Virus\03-02\001\Uninst.exe [L] Win32:Boran-J [Trj] (0)
E:\Virus\03-02\001\val.exe\[BeRoEXE] [L] Win32:Agent-MLJ [Trj] (0)
E:\Virus\03-02\001\val2.exe\[BeRoEXE] [L] Win32:Agent-MLJ [Trj] (0)
E:\Virus\03-02\001\wei[1].exe\[ASPack]\[Embedded#EXE1111] [L] Win32:Delf-HBH [Trj] (0)

傻猪猪米走鸡

上报eset

挪威的冬天

信息        2008-03-02  12:13:25        您此次查毒共查出8个病毒以及危险代码                       
信息        2008-03-02  12:13:25        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件52个                       
信息        2008-03-02  12:13:25        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-03-02  12:13:25        C:\Users\挪威的冬天\Desktop\001.rar\DoSSSetup.dll        Win32.Adware.CinmusT.qr.77824        跳过，未处理       
风险程序        2008-03-02  12:13:25        C:\Users\挪威的冬天\Desktop\001.rar\SkypeClient.exe        Win32.Adware.AgentT.af.135168        跳过，未处理       
病毒        2008-03-02  12:13:24        C:\Users\挪威的冬天\Desktop\001.rar\KERNL32.exe        Win32.Troj.Delf.ot.135168        跳过，未处理       
病毒        2008-03-02  12:13:24        C:\Users\挪威的冬天\Desktop\001.rar\Rpcs.dll        Win32.Hack.HacDec.b.201860        跳过，未处理       
病毒        2008-03-02  12:13:24        C:\Users\挪威的冬天\Desktop\001.rar\wei[1].exe        Win32.Hack.Delf.270336        跳过，未处理       
病毒        2008-03-02  12:13:24        C:\Users\挪威的冬天\Desktop\001.rar\c.exe        Win32.Hack.Delf.270336        跳过，未处理       
病毒        2008-03-02  12:13:24        C:\Users\挪威的冬天\Desktop\001.rar\soft267.exe        Win32.TrojDownloader.Delf.47104        跳过，未处理       
病毒        2008-03-02  12:13:23        C:\Users\挪威的冬天\Desktop\001.rar\my_70169.exe        Win32.Troj.Unknown.a.20480        跳过，未处理       

cruiyong

NOD32 只报了25个

F:\001.rar > RAR > my2[1].exe - Win32/Small.NBT 特洛伊木马
F:\001.rar > RAR > val2.exe - Win32/Small.NBT 特洛伊木马
F:\001.rar > RAR > val.exe - Win32/Small.NBT 特洛伊木马
F:\001.rar > RAR > my_70169.exe - 未查明的 NewHeur_PE 病毒
F:\001.rar > RAR > kfa.exe - 可能是 Win32/AutoRun.ED 蠕虫 的变种
F:\001.rar > RAR > my4[1].exe - 可能是 Win32/AutoRun.ED 蠕虫 的变种
F:\001.rar > RAR > snowfall.exe - 可能是 Win32/AutoRun.ED 蠕虫 的变种
F:\001.rar > RAR > svchost.exe - 可能是 Win32/AutoRun.ED 蠕虫 的变种
F:\001.rar > RAR > test.exe - 可能是 Win32/AutoRun.ED 蠕虫 的变种
F:\001.rar > RAR > Uninst.exe - Win32/Adware.Cinmus 应用程序
F:\001.rar > RAR > SkypeClient.exe - Win32/TrojanDownloader.Adload.NEQ 特洛伊木马
F:\001.rar > RAR > DoSSSetup.dll - Win32/Adware.Cinmus 应用程序 的变种
F:\001.rar > RAR > Rpcs.dll - Win32/PSW.QQRob.NAQ 特洛伊木马
F:\001.rar > RAR > ad4341.exe > NSIS > Uninst.exe - Win32/Adware.Cinmus 应用程序
F:\001.rar > RAR > 27.exe > NSIS > DoSSSetup.dll - Win32/Adware.Cinmus 应用程序 的变种

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.DownLoad.gfa  
病毒： Trojan.Win32.Undef.dlp   
病毒： Trojan.Win32.Undef.cg   
病毒： Dropper.Win32.Agent.yrr  
病毒： Backdoor.Win32.Delf.bsj  
病毒： Trojan.Win32.Attack.r   

用户来源：互联网

软件版本：20.33.61

13个