木马

Nblock

测测

wangfeng66

D:\1i.com - infected with modification of Win32.Besso
D:\mod.exe - infected with Trojan.PWS.Wow.644
D:\yo2mq6.exe - infected with Trojan.PWS.Wsgame.3603

Archive contains 3

DRWEB      漏掉一只

[ 本帖最后由 wangfeng66 于 2008-3-18 14:10 编辑 ]

qq2008

费尔

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> 1i.com
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      --> crack_(by www.soft-crack.com).exe
        [1] Archive type: RAR SFX (self extracting)
        --> crack.exe
        --> fish1.exe
          [2] Archive type: RSRC
          --> Object
            [3] Archive type: RSRC
            --> Object
    --> mod.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
    --> yo2mq6.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年3月17日  23:46
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      2 Archives were scanned
      0 Warnings
      1 Notes

挪威的冬天

报壳

信息        2008-03-18  14:51:56        您此次查毒清除了2个病毒                       
信息        2008-03-18  14:51:56        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-03-18  14:51:56        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个                       
信息        2008-03-18  14:51:56        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-03-18  14:51:56        D:\Desktop\样本.rar\yo2mq6.exe        Win32.Hack.NSAnti.ge        清除成功       
病毒        2008-03-18  14:51:56        D:\Desktop\样本.rar\1i.com        Win32.Hack.NSAnti.ge        清除成功

tanlimo

ESS扫描日志
病毒库版本: 2954 (20080318)
日期: 2008-3-18  时间: 15:17:49
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\xx\桌面\样本.rar
D:\Documents and Settings\xx\桌面\样本.rar > RAR > 1i.com - Win32/PSW.OnLineGames.NMY 特洛伊木马
D:\Documents and Settings\xx\桌面\样本.rar > RAR > yo2mq6.exe - Win32/PSW.OnLineGames.MUU 特洛伊木马
已扫描的对象数: 5
发现的威胁数: 2
完成时间: 15:18:01  总扫描时间: 12 秒 (00:00:12)

sjducker

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.php?aid=221462
Information:  Is the Trojan horse TR/Crypt.XPACK.Gen  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.10.0, AVE 8.1.0.18, VDF 7.0.3.42

shaw530

扫描类型: 扫描指定目标
目标: D:\anti\样本.rar


--------------------------------------------------------------------------------

结果: 发现3个恶意软件
Worm.Win32.AutoRun.czh (病毒)
D:\anti\样本.rar\1i.com
Trojan.Win32.Delf.bhg (病毒)
D:\anti\样本.rar\mod.exe
Trojan-PSW.Win32.OnLineGames.uej (病毒)
D:\anti\样本.rar\yo2mq6.exe

扫描引擎:
F-Secure AVP: 7.00.171, 2008-03-18
F-Secure Libra: 2.04.01, 2008-03-17
F-Secure Orion: 1.02.38, 2008-03-18
F-Secure Draco: 1.00.35, 2008-02-13

wangjay1980

deleted: virus Worm.Win32.AutoRun.czh        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1i.com
deleted: Trojan program Trojan-Clicker.Win32.VB.aij        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/crack_(by www.soft-crack.com).exe//data.rar/fish1.exe
deleted: Trojan program Trojan.Win32.Delf.bhg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/mod.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.uej        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/yo2mq6.exe

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Mian007.a   
病毒： Packer.Win32.VmpPacker.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.12