6x

qianwenxiang

Win32:PePatch-CD [Trj]
Win32:Agent-BQC [Trj]
Win32:Hacko [Trj]
Win32:Daemonize-AA [Trj]
Win32:Iespy-H [Trj]

Joker

3
C:\Documents and Settings\Administrator\桌面\6.rar>>2008-3-22__56DD8w=1a.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>shadow.exe        Heuri.Possible/Packed        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>xx.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理

雨宫优子

NOD32漏两个
提交分析后上报

Joker

卡巴4
deleted: virus Packed.Win32.PePatch.fn        File: C:\Documents and Settings\Administrator\×ÀÃæ\6[].rar/shadow.exe
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\6[].rar/xx.exe//PE_Patch//UPack
detected: virus Heur.Backdoor.Generic (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\6[].rar/2008-3-22__2D5F8w=4a.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\6[].rar/2008-3-22__BD57Cw=3a.exe

Starting the file scan:

Begin scan in 'E:\AVIRA\6.rar'
E:\AVIRA\6.rar
  [0] Archive type: RAR
  --> shadow.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> xx.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2008-3-22__2D5F8w=4a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
  --> 2008-3-22__2EE27w=2a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
  --> 2008-3-22__56DD8w=1a.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 2008-3-22__BD57Cw=3a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.Morphine.Gen
      [WARNING]   The file was ignored!

电影结束了

对象: shadow.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: Packer.Malware.VPacker.A (BD 引擎)
对象: xx.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: DeepScan:Generic.Malware.dld!!.B527746E (BD 引擎)
对象: 2008-3-22__2D5F8w=4a.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: Packer.Morphine.B (BD 引擎)
对象: 2008-3-22__2EE27w=2a.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: Packer.Morphine.B (BD 引擎)
对象: 2008-3-22__56DD8w=1a.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: Trojan.Spy.IESpy.DK (BD 引擎)
对象: 2008-3-22__BD57Cw=3a.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\6.rar
        Status: 已发现病毒
        病毒: Packer.Morphine.B (BD 引擎)

kkgh

诺顿4个
        瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Undef.eam   

用户来源：互联网

软件版本：20.36.50

无尽藏海

E:\VIRUS\6（22）.rar » RAR » 2008-3-22__2D5F8w=4a.exe - a variant of Win32/Bagle worm
E:\VIRUS\6（22）.rar » RAR » 2008-3-22__2EE27w=2a.exe - a variant of Win32/TrojanProxy.Daemonize trojan
E:\VIRUS\6（22）.rar » RAR » 2008-3-22__56DD8w=1a.exe - a variant of Win32/Spy.Iespy trojan
E:\VIRUS\6（22）.rar » RAR » 2008-3-22__BD57Cw=3a.exe - a variant of Win32/Bagfi worm

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.eam   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.50

allinwonderi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-22, 16:54

Scan name: Virus Tester
Path to scan: C:\Documents and Settings\All Users\Documents\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-22, 20:29:25
---------------------------------------------------------------------
[Found possible virus]         <W32/Threat-HLLPEM-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\6.rar->shadow.exe->(VPacker)
[Found security risk]         <W32/OnlineGames.H.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\6.rar->xx.exe
[Found possible security risk]         <W32/Heuristic-114!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\6.rar->2008-3-22__2D5F8w=4a.exe->(Morphine)
[Found possible virus]         <W32/Threat-HLLSI-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\6.rar->2008-3-22__56DD8w=1a.exe->(embedded)->(UPX)
[Found downloader]         <W32/Downloader.N.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\6.rar->2008-3-22__BD57Cw=3a.exe

---------------------------------------------------------------------
Scan ended:        2008-3-22, 20:29:27
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         5
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------