36个

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:1.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:10.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:11.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:13.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:14.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:15.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:16.exe <- Trojan.Psw.Onlinegames.Rhu : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:18.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:23.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:25.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:26.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:27.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:28.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:29.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:30.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:31.exe <- Trojan.Psw.Onlinegames.Sem : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:4.exe<UPX>:4.exe<DLLRES>:DATEINFO0.exe <- Trojan.Spy.Agent.Blw : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:avp.exe<UPX>:avp.exe <- W32.Dr.Agent.Bsv : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:s1.exe <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:right_h3_game_hx[1].gif <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:right_h3_game_wl[1].gif <- Heur.Win32.I : No action
C:\Documents and Settings\All Users\Documents\Test\attachment.php<RAR>:right_h3_game_zyhx[1].gif <- Heur.Win32.I : No action



Scanned objects : 85

Infected objects : 22

allinwonderi

[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\attachment.php->11\1.exe->(embedded)

mofunzone

antivir v8全灭

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\11'
C:\Documents and Settings\Administrator\My Documents\11\
  1.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '483930dd.qua'!
  10.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [NOTE]      The file was moved to '480230df.qua'!
  11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was moved to '480230e0.qua'!
  12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '480230e1.qua'!
  13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '480230e2.qua'!
  14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '480230e4.qua'!
  15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '480230e5.qua'!
  16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.2
                [WARNING]   Infected files in archives cannot be repaired!
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was moved to '480230e6.qua'!
  17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [NOTE]      The file was moved to '480230e7.qua'!
  18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '480230e8.qua'!
  19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.514
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '480230e9.qua'!
  2.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '483930de.qua'!
  20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxop.1
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '49974821.qua'!
  21.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [NOTE]      The file was moved to '49974822.qua'!
  23.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.olm.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '480230e3.qua'!
  24.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '49974825.qua'!
  25.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '49974826.qua'!
  26.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxqe
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '49974827.qua'!
  27.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '49974828.qua'!
  28.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was moved to '49974829.qua'!
  29.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '4997482a.qua'!
  3.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '49ac481f.qua'!
  30.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '49974823.qua'!
  31.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was moved to '49974824.qua'!
  32.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was moved to '480230ea.qua'!
  4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [NOTE]      The file was moved to '483930e0.qua'!
  5.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '49ac4821.qua'!
  6.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '483930e2.qua'!
  9.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was moved to '49ac4823.qua'!
  avp.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [NOTE]      The file was moved to '48443127.qua'!
  right_h3_game_hx[1].gif
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
      [NOTE]      The file was moved to '483b311a.qua'!
  right_h3_game_ms[1].gif
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '49ae49db.qua'!
  right_h3_game_wl[1].gif
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was moved to '483b311c.qua'!
  right_h3_game_wm[1].gif
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [NOTE]      The file was moved to '49ae49dd.qua'!
  right_h3_game_zyhx[1].gif
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was moved to '483b311e.qua'!
  s1.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4997482b.qua'!


End of the scan: 2008年3月9日  10:47
Used time: 00:06 min

The scan has been done completely.

      1 Scanning directories
     36 Files were scanned
     32 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
     36 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      7 Warnings
     36 Notes

xiaojinglf

小红伞全部杀。哈哈哈哈