64 x

sam.to

已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.cev        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\aydrde.dll
已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.cev        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\bquiog.dll
已刪除: 惡意軟體 not-virus:Hoax.Win32.Burner.a        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\comsysobj.exe
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.afu        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\d03.exe//data0002
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.azx        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\dxdiags.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Small.pr        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\gopen.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.icg        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\HoneyDll.dll//PE_Patch.UPX//UPX
已隔離: 病毒 Heur.Trojan.Generic (修改)        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\HoneyMain.exe
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Agent.qz        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\LCInstall.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.QQHelper.bbl        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\pcidevices8.inf
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aim        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\pciloader.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wjq        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\portablemsi.dll
已刪除: 特洛伊木馬程式 Backdoor.Win32.Haxdoor.hm        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\qz.dll//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Haxdoor.hm        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\qz.sys
已刪除: 惡意軟體 not-virus:Hoax.Win32.Burner.b        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\shellexcon.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.Haxdoor.hm        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\skyx16.dll//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Haxdoor.hm        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\skyx24.sys
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.tjj        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\SVSH0ST.EXE
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wjq        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\tcpip.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.aky        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\temp1.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.azx        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\temp3.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wjq        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempAA.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.tjj        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempAB.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.tjj        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempAC.exe
已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.cev        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempAD.exe
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aai        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempCA.exe//stream//data0001
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aim        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempDA.exe//data0002
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.afu        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempDA.exe//data0003
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.BHO.aai        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\TempDB.exe
已刪除: 惡意軟體 not-virus:Hoax.Win32.Renos.oi        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\win32st.exe
已刪除: 病毒 IRC-Worm.Win32.Delf.az        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\Windows Fime.exe
已刪除: 特洛伊木馬程式 Trojan-Clicker.Win32.Agent.qt        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\winso32.sys
已刪除: 惡意軟體 not-virus:Hoax.Win32.Renos.awv        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\winstrse.exe
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.aky        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\zhqb080327.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.akx        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\zhqb32.dll
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.akw        檔案: C:\Documents and Settings\kato9096\桌面\WINDOWS\zhqbdf080327.dll

36，上报到卡巴

sam.to

你上报了沒有

wangjay1980

原帖由 kato9096 于 2008-3-26 19:50 发表
你上报了沒有

都还没呢，今天的都交给你来上报吧

sam.to

好的，这个我上报

挪威的冬天

信息        2008-03-26  20:17:14        您此次查毒共查出30个病毒以及危险代码                       
信息        2008-03-26  20:17:14        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件81个                       
信息        2008-03-26  20:17:14        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\winstrse.exe        Win32.RiskWare.FakeAlert.b.29696        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\winso32.sys        Win32.Adware.Agent.3200        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\TempCB.exe        Win32.RiskWare.ZloQQ.hk.154875        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\shellexcon.exe        Win32.RiskWare.Burner.eh.29184        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\pciloader.exe        Win32.Adware.QQHelper.136704        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\pcidevices8.inf        Win32.Adware.QQHelper.80384        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\LCInstall.exe        Win32.Adware.Agent.qk.20480        隔离成功       
风险程序        2008-03-26  20:17:14        D:\Desktop\WINDOWS\DoSSSetup.dll        Win32.Adware.CinmusT.qr.77824        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\zhqbdf080327.dll        Win32.Troj.PophotT.af.96768        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\zhqb32.dll        Win32.Troj.PophotT.ak.123392        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\win32st.exe        Win32.Troj.Renos.oi.36864        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\TempAC.exe        Win32.TrojDownloader.Small.34816        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\TempAB.exe        Win32.TrojDownloader.Small.34816        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\TempAA.exe        Win32.Troj.AgentT.ls.86016        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\temp3.exe        Win32.Troj.BHO.192512        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\tcpip.exe        Win32.Troj.AgentT.ls.86016        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\SVSH0ST.EXE        Win32.TrojDownloader.Small.34816        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\skyx24.sys        Win32.Hack.Haxdoor.hm.21888        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\skyx16.dll        Win32.Hack.Haxdoor.hm.45486        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\qz.sys        Win32.Hack.Haxdoor.hm.21888        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\qz.dll        Win32.Hack.Haxdoor.hm.45486        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\QQHook.dll        Win32.Packed.MaskPE        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\portablemsi.dll        Win32.Troj.AgentT.32768        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\mycc080324.dll        Win32.Troj.PophotT.af.96768        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\msxl32.dll        Win32.Packed.MaskPE        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\IVATE.DLL        Win32.Packed.MaskPE        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\HoneyDll.dll        Win32.TrojDownloader.Agent.53248        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\dxdiags.exe        Win32.Troj.BHO.192512        隔离成功       
病毒        2008-03-26  20:17:11        D:\Desktop\WINDOWS\comsysobj.exe        Win32.Troj.Burner.a.25600        隔离成功       
病毒        2008-03-26  20:17:09        D:\Desktop\WINDOWS\acpidisk.sys        Win32.Troj.CinmusT.dm.198212        隔离成功

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:HoneyDll.dll<UPX>:HoneyDll.dll <- Downloader.Agent.Icg : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:gopen.exe <- Trojan.Clicker.Small.Pr : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:LCInstall.exe <- Trojan.Clicker.Agent.Qk : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:hllibex.exe <- Trojan.Spy.Webmoner.Dp : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:qz.sys <- Trojan.Haxdoor.Hm : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:skyx24.sys <- Trojan.Haxdoor.Hm : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:comsysobj.exe <- Joke.Burner.a : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:shellexcon.exe <- Joke.Burner.b : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:HoneyMain.exe<UPX>:HoneyMain.exe<DLLRES>:res0.exe<UPX>:res0.exe <- Downloader.Agent.Icg : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:winstrse.exe <- Joke.Renos.Awv : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:SVSH0ST.EXE <- Heur.W32 : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:TempAB.exe <- Heur.W32 : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:TempAC.exe <- Heur.W32 : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:win32st.exe <- Joke.Renos.Oi : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:qz.dll<UPX>:qz.dll <- Trojan.Haxdoor.Hm : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:skyx16.dll<UPX>:skyx16.dll <- Trojan.Haxdoor.Hm : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:Windows Fime.exe <- Worm.Delf.Az : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:pcidevices8.inf <- Trojan.Downloader.Qqhelper.Bbl : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:TempCA.exe<NSIS>:cpush.dll <- Adware.Bho.Aai : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:TempDB.exe<NSIS>:cpush.dll <- Adware.Bho.Aai : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:d03.exe<NSIS>:cpush.dll <- Adware.Bho.Afu : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:mycc32.dll <- Trojan.Spy.Pophot.Aeb : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar<RAR>:pciloader.exe<DLLRES>:Q7550.exe <- Trojan.Downloader.Qqhelper.Bbl : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar<RAR>:TempDA.exe<NSIS>:pciloader.exe<DLLRES>:Q7550.exe <- Trojan.Downloader.Qqhelper.Bbl : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar<RAR>:TempDA.exe<NSIS>:d03.exe<NSIS>:cpush.dll <- Adware.Bho.Afu : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar<RAR>:mcdcsrv32_080321.dll <- Trojan.Spy.Agent.Bjm : No action
C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar<RAR>:winso32.sys <- Trojan.Clicker.Agent.Qt : No action



Scanned objects : 98

Infected objects : 27

allinwonderi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-24, 3:30

Scan name: Virus Tester
Path to scan: C:\Documents and Settings\All Users\Documents\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-26, 20:28:23
---------------------------------------------------------------------



[Found Trojan]         <W32/Trojan2.AEGB (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->gopen.exe
[Found Trojan]         <W32/Trojan2.AEIA (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->LCInstall.exe
[Found backdoor]         <W32/Haxdoor.JP@bd (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->qz.sys
[Found backdoor]         <W32/Haxdoor.JP@bd (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->skyx24.sys
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->tcpip.exe
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->TempAA.exe
[Found downloader]         <W32/Downloader.J.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->dxdiags.exe
[Found downloader]         <W32/Downloader.J.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->temp3.exe
[Found downloader]         <W32/Downldr2.BAIE (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->SVSH0ST.EXE
[Found downloader]         <W32/Downldr2.BAIE (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->TempAB.exe
[Found downloader]         <W32/Downldr2.BAIE (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->TempAC.exe
[Found backdoor]         <W32/Haxdoor.JP@bd (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->qz.dll
[Found backdoor]         <W32/Haxdoor.JP@bd (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->skyx16.dll
[Found security risk]         <W32/Agent.S.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->Windows Fime.exe
[Found possible virus]         <W32/Threat-SysVenFak-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->pcidevices8.inf
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->mycc080324.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->temp2.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->temp1.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->zhqb080327.exe
[Found downloader]         <W32/DelfDldr.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar->zhqb32.dll
[Warning]        <Could not open file>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part1.rar.part
[Found backdoor]         <W32/Agent.B.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar->mcdcsrv32_080321.dll
[Found Trojan]         <W32/Trojan2.AEHC (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\WINDOWS.part2.rar->winso32.sys

---------------------------------------------------------------------
Scan ended:        2008-3-26, 20:29:24
Duration:        0:01:00

Scan result:

Scanned files:                 7
Infected objects:         22
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

gaojun7206

[0] Archive type: RAR
    --> TempBA.exe
        [INFO]      Error multiple volume
    --> TempDA.exe
        [DETECTION] Contains detection pattern of the dropper DR/BHO.afu.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> registry.pol
    --> 080321.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> raidiap080321.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> mcdcsrv32_080321.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> sysobjwertb.dll
    --> wmstrbum.exe
    --> config.ini
    --> mscpx32r.det
    --> tromomwin32.exe
    --> winso32.sys
        [DETECTION] Is the Trojan horse TR/Click.Agent.QT
        [WARNING]   Infected files in archives cannot be repaired!
    --> HoneySys.dat
        [DETECTION] Is the Trojan horse TR/Click.Agent.NCS
        [WARNING]   Infected files in archives cannot be repaired!
    --> aydrde.SYS
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.ccw Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was moved to '48384586.qua'!
[0] Archive type: RAR
    --> bquiog.SYS
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.ccw Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> myiecfg.ini.tmp
    --> HoneyDll.dll
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.icg
        [WARNING]   Infected files in archives cannot be repaired!
    --> gopen.exe
        [DETECTION] Is the Trojan horse TR/Click.Small.PR
        [WARNING]   Infected files in archives cannot be repaired!
    --> LCInstall.exe
        [DETECTION] Is the Trojan horse TR/Click.Agent.QZ
        [WARNING]   Infected files in archives cannot be repaired!
    --> hllibex.exe
    --> qz.sys
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pusmit.2 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> skyx24.sys
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pusmit.2 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> mxcdcsrv16_080321.dll
        [DETECTION] Is the Trojan horse TR/Hitpop.1.11
        [WARNING]   Infected files in archives cannot be repaired!
    --> tcpip.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempAA.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> comsysobj.exe
    --> mycc080324.dll
        [DETECTION] Is the Trojan horse TR/Agent.94720.H
        [WARNING]   Infected files in archives cannot be repaired!
    --> IVATE.DLL
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon3.AJVT Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> msxl32.dll
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon3.AJVT Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> QQHook.dll
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> shellexcon.exe
    --> HoneyMain.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.icg
        [WARNING]   Infected files in archives cannot be repaired!
    --> winstrse.exe
        [DETECTION] Is the Trojan horse TR/Renos.29696.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> npf.sys
    --> dxdiags.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> temp3.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> SVSH0ST.EXE
        [DETECTION] Is the Trojan horse TR/Dldr.Small.tjj
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempAB.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Small.tjj
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempAC.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Small.tjj
        [WARNING]   Infected files in archives cannot be repaired!
    --> portablemsi.dll
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win32st.exe
        [DETECTION] Is the Trojan horse TR/Renos.36864.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> iezsms.dat
    --> qz.dll
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Haxdoor.LJ.1 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> skyx16.dll
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Haxdoor.LJ.1 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> npptools.dll
    --> TempAD.exe
    --> Windows Fime.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.NAC
        [WARNING]   Infected files in archives cannot be repaired!
    --> DoSSSetup.dll
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> pcidevices8.inf
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> mycc080324.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> temp2.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> temp1.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> zhqb080327.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> aydrde.dll
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.atg.1 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> bquiog.dll
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.atg.1 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> zhqbdf080327.dll
        [DETECTION] Is the Trojan horse TR/Agent.94720.H
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempCA.exe
        [DETECTION] Contains detection pattern of the dropper DR/BHO.aai.13
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempDB.exe
        [DETECTION] Contains detection pattern of the dropper DR/BHO.aai.13
        [WARNING]   Infected files in archives cannot be repaired!
    --> zhqb32.dll
        [DETECTION] Is the Trojan horse TR/Spy.Pophot.akx
        [WARNING]   Infected files in archives cannot be repaired!
    --> d03.exe
        [DETECTION] Contains detection pattern of the dropper DR/BHO.afu.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> mycc32.dll
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
    --> pciloader.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempCB.exe
    --> acpidisk.sys
        [DETECTION] Is the Trojan horse TR/Rootkit.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> TempBA.exe
        [INFO]      Error multiple volume
        [INFO]      The file was moved to '48384593.qua'!

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.clz   
病毒： Trojan.Win32.Undef.cju   
病毒： Trojan.Win32.Undef.cju   
病毒： Backdoor.Haxdoor.qe      
病毒： Trojan.Win32.Undef.egb   
病毒： Trojan.Win32.Undef.eea   
病毒： Trojan.Win32.Undef.cju   
病毒： Trojan.Win32.Undef.clz   
病毒： Trojan.Win32.Undef.cju   
病毒： Trojan.Win32.Undef.egb   
病毒： Backdoor.Haxdoor.GEN     
病毒： Trojan.Win32.Undef.eea   
病毒： Trojan.Win32.Undef.egf   
病毒： Trojan.Win32.Undef.egf   
病毒： Backdoor.Win32.PcClient.eah
病毒： Backdoor.Win32.PcClient.eab
病毒： AdWare.Win32.Dodolook.gth
病毒： Trojan.Win32.Undef.cju   
病毒： RootKit.Win32.Mnless.ha  

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.22

残缺的唯美

2008-3-26        21:44:54        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\HONEYDLL.DLL        Downloader.gen.a(特洛伊)
2008-3-26        21:44:57        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\HLLIBEX.EXE        FakeAlert-AH(特洛伊)
2008-3-26        21:44:57        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\QZ.SYS        BackDoor-BAC.sys.gen(特洛伊)
2008-3-26        21:44:57        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\SKYX24.SYS        BackDoor-BAC.sys.gen(特洛伊)
2008-3-26        21:44:57        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\TCPIP.EXE        New Malware.u(特洛伊)
2008-3-26        21:44:58        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\TEMPAA.EXE        New Malware.u(特洛伊)
2008-3-26        21:44:58        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\COMSYSOBJ.EXE        FakeAlert-AH(特洛伊)
2008-3-26        21:44:58        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\IVATE.DLL        BackDoor-AWQ(特洛伊)
2008-3-26        21:44:58        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\MSXL32.DLL        BackDoor-AWQ(特洛伊)
2008-3-26        21:44:58        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\SHELLEXCON.EXE        FakeAlert-AH(特洛伊)
2008-3-26        21:44:59        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\HONEYMAIN.EXE\HONEYMAIN.EXE\00008290.EXE        Downloader.gen.a(特洛伊)
2008-3-26        21:44:59        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\DXDIAGS.EXE        BackDoor-AWQ(特洛伊)
2008-3-26        21:44:59        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\TEMP3.EXE        BackDoor-AWQ(特洛伊)
2008-3-26        21:45:12        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\WIN32ST.EXE        FakeAlert-AH(特洛伊)
2008-3-26        21:45:12        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\QZ.DLL\QZ.DLL        BackDoor-BAC.dll(特洛伊)
2008-3-26        21:45:13        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\SKYX16.DLL\SKYX16.DLL        BackDoor-BAC.dll(特洛伊)
2008-3-26        21:45:13        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\WINDOWS FIME.EXE        Downloader-BFO(特洛伊)
2008-3-26        21:45:36        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\ZHQBDF080327.DLL        Downloader-AZN(特洛伊)
2008-3-26        21:45:36        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\MYCC32.DLL        Spy-Agent.br.dll(特洛伊)
2008-3-26        21:45:37        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part1.rar\PCILOADER.EXE        Downloader.gen.a(特洛伊)
2008-3-26        21:45:50        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part2.rar\MCDCSRV32_080321.DLL        Spy-Agent.br.dll(特洛伊)
2008-3-26        21:45:50        未采取操作         EKINCHENG        D:\Documents and Settings\EKINCHENG\桌面\WINDOWS.part2.rar\WINSO32.SYS        Generic.dx(特洛伊)