old

moonsilver

http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/1.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/2.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/3.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/4.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/5.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/6.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/7.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/8.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/9.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/10.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/11.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/12.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/13.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/14.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/15.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/16.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/17.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/18.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/19.exe
http://61.53.235.92/hyrjcenter411402/dotnetfx/inc/down/20.exe

llgiggs

下載到7個，殺6個


C:\Documents and Settings\Administrator\桌面\test\1.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\test\11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\test\12.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\test\3.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\test\4.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\test\8.exe
      [DETECTION] Is the Trojan horse TR/Agent.44544.12
      [INFO]      The file was deleted!

-----------------------------------------------------------------------------------------------



OKB,還是死的

[ 本帖最后由 llgiggs 于 2008-3-15 10:21 编辑 ]

Starting the file scan:

Begin scan in 'E:\AV\1.exe'
E:\AV\1.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
Begin scan in 'E:\AV\3.exe'
E:\AV\3.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING]   The file was ignored!
Begin scan in 'E:\AV\4.exe'
E:\AV\4.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING]   The file was ignored!
Begin scan in 'E:\AV\8.exe'
E:\AV\8.exe
      [DETECTION] Is the Trojan horse TR/Agent.44544.12
      [WARNING]   The file was ignored!
Begin scan in 'E:\AV\11.exe'
E:\AV\11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
Begin scan in 'E:\AV\12.exe'
E:\AV\12.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!

Joker

来了。。
只下得到6个

Joker

费尔5个
C:\Documents and Settings\Administrator\桌面\6.rar>>6\1.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>6\12.exe        Backdoor.AWQ.b.jdcs        后门        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>6\3.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>6\4.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>6\8.exe        Heuri.Possible/Packed        启发式扫描        还未处理

Joker

卡巴5
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nmc        File: C:\Documents and Settings\Administrator\×ÀÃæ\7474576.rar/6\1.exe//PE_Patch//UPack
detected: Trojan program Trojan-Dropper.Win32.Agent.dom        File: C:\Documents and Settings\Administrator\×ÀÃæ\7474576.rar/6\11.exe//PE_Patch//Sylm
detected: Trojan program Trojan-Dropper.Win32.Agent.dom        File: C:\Documents and Settings\Administrator\×ÀÃæ\7474576.rar/6\12.exe
detected: Trojan program Trojan-Dropper.Win32.Agent.dom        File: C:\Documents and Settings\Administrator\×ÀÃæ\7474576.rar/6\4.exe//PE_Patch//UPack
detected: virus Worm.Win32.AutoRun.cuk        File: C:\Documents and Settings\Administrator\×ÀÃæ\7474576.rar/6\8.exe

曲中求

朋友机子上有NOD 2.7，呵呵，顺便扫扫吧。

扫描开始时间: 2008-3-15 10:33:47
扫描日志
NOD32 版本 2949 (20080315) NT
命令行: C:\Documents and Settings\a\桌面\6.rar

日期: 2008年3月15日  时间: 10:33:48
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\a\桌面\6.rar
C:\Documents and Settings\a\桌面\6.rar ?RAR ?6\1.exe<病毒 - Win32/PSW.OnLineGames.MUG 木马 变种>
C:\Documents and Settings\a\桌面\6.rar ?RAR ?6\11.exe<病毒 - 可能是 Win32/Genetik 木马 变种>
C:\Documents and Settings\a\桌面\6.rar ?RAR ?6\12.exe<病毒 - Win32/TrojanDropper.Agent.NHI 木马>
C:\Documents and Settings\a\桌面\6.rar ?RAR ?6\4.exe<病毒 - 可能是 Win32/Genetik 木马 变种>
C:\Documents and Settings\a\桌面\6.rar ?RAR ?6\8.exe<病毒 - 可能是 Win32/Genetik 木马 变种>
已扫描文件数量: 7
已发现病毒数量: 5
完成时间: 10:33:49 总共扫描时间: 1 秒 (00:00:01)

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQGame.bq
病毒： Trojan.PSW.Win32.OnlineGames.cjy
病毒： Backdoor.Gpigeon.GEN     
病毒： Trojan.DL.Win32.Delf.yyv
病毒： Suspicious.Trojan.Win32.Downldr.a
病毒： Hack.Anti.Win32.Agent.e  

用户来源：互联网

软件版本：20.35.42
全杀

傻猪猪米走鸡

E:\virus\6.rar » RAR » 6\1.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
E:\virus\6.rar » RAR » 6\11.exe - probably a variant of Win32/Genetik trojan
E:\virus\6.rar » RAR » 6\12.exe - Win32/TrojanDropper.Agent.NHI trojan
E:\virus\6.rar » RAR » 6\3.exe - is OK
E:\virus\6.rar » RAR » 6\4.exe - probably a variant of Win32/Genetik trojan
E:\virus\6.rar » RAR » 6\8.exe - probably a variant of Win32/Genetik trojan
E:\virus\6.rar:Zone.Identifier - is OK

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.nmc        檔案: C:\Documents and Settings\kato9096\桌面\895\1.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.dom        檔案: C:\Documents and Settings\kato9096\桌面\895\11.exe//PE_Patch//Sylm
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.dom        檔案: C:\Documents and Settings\kato9096\桌面\895\12.exe
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.dom        檔案: C:\Documents and Settings\kato9096\桌面\895\4.exe//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.AutoRun.cuk        檔案: C:\Documents and Settings\kato9096\桌面\895\8.exe


上报1