16x

qianwenxiang

昨天晚上下载的
Win32:Xorpix-AZ [Trj]
Win32:Obfuscated-EHL [Trj]
Win32:Agent-TBP [Trj]
Win32:Zhelatin-CIT [Wrm]
Win32:Delf-GXQ [Trj]

Joker

13
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__16467.txt        W32.Zhelatin.vg.fqhq        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__339BE.exe        Trojan.Agent.ips.fxme        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__35B74.exe        TrojanDownloader.Agent.kfd.omxl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__3D237.txt        TrojanProxy.Xorpix.dh.hcga        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__4CD24.exe        Heuri.Possible/Packed        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__5F848.txt        TrojanPSW.Almat.cmb.fmva        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__6A19F.exe        TrojanDownloader.Agent.kfd.omxl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__6D4D.exe        W32.Obfuscated.NAT.kmin        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__79ECD.exe        TrojanDropper.Small.bgi.vagq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__80CE2.exe        Trojan.Agent.akux.qywc        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__8E5C3.exe        Trojan.Agent.ips.fxme        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__AD1E4.exe        Rootkit.Agent.cf.vpfv        木马        还未处理
C:\Documents and Settings\Administrator\桌面\321.rar>>2008-3-21__BE087.txt        TrojanDownloader.Delf.fxz.anaz        木马        还未处理

雨宫优子

NOD32
PASS 6个..

Starting the file scan:

Begin scan in 'E:\AVIRA\321.rar'
E:\AVIRA\321.rar
  [0] Archive type: RAR
  --> 2008-3-21__3D237.txt
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> 2008-3-21__4CD24.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 2008-3-21__5F848.txt
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.agl
  --> 2008-3-21__6A19F.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2008-3-21__6D4D.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.ZCI.9
  --> 2008-3-21__35B74.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2008-3-21__79ECD.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.8704
  --> 2008-3-21__80CE2.exe
      [DETECTION] Is the Trojan horse TR/Agent.Dein.17408
  --> 2008-3-21__16467.txt
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.pc
  --> 2008-3-21__48309.txt
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2008-3-21__BE087.txt
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 2008-3-21__E5D3C.txt
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2008-3-21__EBA5.txt
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年3月22日  14:01
Used time: 00:26 min

The scan has been done completely.

      0 Scanning directories
     17 Files were scanned
     12 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

Joker

12
deleted: Trojan program Trojan-Proxy.Win32.Xorpix.dh        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__3D237.txt
deleted: virus Worm.Win32.Socks.w        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__5F848.txt//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Agent.kfd        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__6A19F.exe
deleted: Trojan program Trojan.Win32.Inject.zz        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__6D4D.exe
deleted: Trojan program Trojan.Win32.Agent.ips        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__8E5C3.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.kfd        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__35B74.exe
deleted: Trojan program Trojan-Dropper.Win32.Small.bgl        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__79ECD.exe
deleted: Trojan program Trojan.Win32.Agent.iqq        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__80CE2.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan.Win32.Agent.ips        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__339BE.exe
deleted: virus Email-Worm.Win32.Zhelatin.vg        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__16467.txt
deleted: Trojan program Trojan-Dropper.Win32.Agent.fwd        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__E5D3C.txt
deleted: Trojan program Backdoor.Win32.Sinowal.ap        File: C:\Documents and Settings\Administrator\×ÀÃæ\321.rar/2008-3-21__EBA5.txt

ztly159

"14:02"        "文件监控"        "文件"        "TROJ_AGENT.HHT"        "2008-3-21__3D237.txt (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "PACKER-GEN.001"        "2008-3-21__5F848.txt (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "TROJ_AGENT.KXK"        "2008-3-21__6A19F.exe (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "TROJ_INJECT.IS"        "2008-3-21__6D4D.exe (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "TROJ_AGENT.KXK"        "2008-3-21__35B74.exe (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "TROJ_AGENT.QD"        "2008-3-21__80CE2.exe (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "WORM_NUWAR.AR"        "2008-3-21__16467.txt (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "TROJ_DLOADER.NCS"        "2008-3-21__BE087.txt (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""
"14:02"        "文件监控"        "文件"        "---"        "C:\Documents and Settings\Administrator\桌面\321.rar (C:\Documents and Settings\Administrator\桌面\321.rar)"        "隔离 成功"        ""

电影结束了

对象: 2008-3-21__3D237.txt
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Trojan.Proxy.Xorpix.BY (BD 引擎)
对象: 2008-3-21__6A19F.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Trojan.Spy.XVA (BD 引擎)
对象: 2008-3-21__6D4D.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Dropped:Backdoor.Agent.ZCI (BD 引擎)
对象: 2008-3-21__35B74.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Trojan.Spy.XVA (BD 引擎)
对象: 2008-3-21__79ECD.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Trojan.Pakes.ZUQ (BD 引擎)
对象: 2008-3-21__16467.txt
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: Trojan.Peed.IWX (BD 引擎)
对象: 2008-3-21__EBA5.txt
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\321.rar
        Status: 已发现病毒
        病毒: DeepScan:Generic.PWStealer.D91C3927 (BD 引擎)

sam.to

你有沒有上报？

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-21, 5:02

Scan name: virus scan
Path to scan: C:\virus\08-03-22\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-22, 14:43:26
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__3D237.txt->rsrcPE->(UPack)
[Found possible virus]         <W32/Threat-SysVenFak-based!Maximus (not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__4CD24.exe
[Found possible virus]         <W32/Trojan-Sml-IWW-based!Maximus (not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__5F848.txt->(UPX)
[Found downloader]         <W32/Downldr2.AXXR (exact, damaged, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__6A19F.exe
[Found Trojan]         <W32/Trojan2.AAUS (exact, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__6D4D.exe
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__8E5C3.exe
[Found downloader]         <W32/Downldr2.AXXR (exact, damaged, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__35B74.exe
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__79ECD.exe->rsrcPE
[Found downloader]         <W32/Downldr2.BBPO (exact, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__79ECD.exe->rsrcPE
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__80CE2.exe->(UPX)
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__80CE2.exe
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__339BE.exe
[Found virus]         <W32/StormWorm.gen1 (not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__16467.txt
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__48309.txt
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__AD1E4.exe
[Found downloader]         <W32/Downloader.C.gen!Eldorado (not disinfectable, generic)>        C:\virus\08-03-22\321.rar->2008-3-21__BE087.txt->(UPX)
[Clean]        C:\virus\08-03-22\321.rar->2008-3-21__E5D3C.txt
[Found backdoor]         <W32/Backdoor2.LGD (exact, not disinfectable)>        C:\virus\08-03-22\321.rar->2008-3-21__EBA5.txt

---------------------------------------------------------------------
Scan ended:        2008-3-22, 14:43:29
Duration:        0:00:02

Scan result:

Scanned files:                 6
Infected objects:         10
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

kkgh

诺顿8个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.Undef.v   
病毒： Trojan.DL.Win32.Tibs.jew
病毒： Trojan.DL.Win32.Tibs.jew
病毒： Worm.Mail.Win32.Zhelatin.wrd

用户来源：互联网

软件版本：20.36.50