18x

qianwenxiang

wangjay1980

17 TO KL
deleted: Trojan program Trojan-Downloader.Win32.Agent.lrm        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-24__5B455.exe//PE_Patch//UPack//PE_Patch.PECompact//PecBundle//PECompact
deleted: adware not-a-virus:AdWare.Win32.BHO.ajs        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__DACDD.exe
deleted: Trojan program Trojan-Proxy.Win32.Xorpix.dh        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__339CA.exe
deleted: Trojan program Trojan-Clicker.Win32.Costrat.es        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__A8B37.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.syj        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__B6420.exe
deleted: virus Worm.Win32.Socks.s        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__D99E9.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.tjv        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__7BCB5.exe
deleted: Trojan program Trojan-Downloader.Win32.Agent.lfx        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__7DCA6.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: Trojan program Trojan-Downloader.Win32.Small.tcl        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__C9884.exe
deleted: Trojan program Trojan.Win32.Pakes.cjt        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__E217E.exe
deleted: Trojan program Trojan-Downloader.Win32.Mutant.bi        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__9D485.exe
deleted: Trojan program Trojan-Dropper.Win32.Agent.fcu        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__D3C49.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.cxx        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__80497ame1
deleted: Trojan program Trojan-Downloader.Win32.VB.dkd        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__28E02ame2
deleted: Trojan program Trojan-Downloader.Win32.Small.tnt        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__60BE4ame3//PE_Patch.Upolyx//PE_Patch.UPX//UPX
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__A6C4Eame4
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Test.rar/2008-3-27__9012Dame5

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Small.trl
病毒： Worm.Win32.Socks.o      
病毒： Trojan.DL.Win32.Mnless.ki
病毒： Trojan.DL.Win32.Small.trm
病毒： Trojan.DL.Agent.eqk      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.32

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-24__5B455.exe <- Trojan.Downloader.Agent.Lrm : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__DACDD.exe <- Adware.Bho.Ajs : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__339CA.exe <- Trojan.Proxy.Xorpix.Dh : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__A8B37.exe <- Trojan.Clicker.Costrat.Es : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__B6420.exe <- Trojan.Downloader.Small.Syj : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__D99E9.exe <- Worm.Socks.S : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__7BCB5.exe <- Trojan.Downloader.Small.Tjv : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__7DCA6.exe <- Trojan.Downloader.Agent.Lfx : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__C9884.exe <- Trojan.Downloader.Small.Tcl : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__E217E.exe <- Trojan.Pakes.Cjt : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__9D485.exe <- Trojan.Downloader.Mutant.Bi : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__D3C49.exe <- Trojan.Dropper.Agent.Fcu : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__80497ame1 <- Downloader.Small.Cxx : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__80497ame1<FSG>:2008-3-27__80497ame1 <- Downloader.Small.Cxx : No action
C:\Documents and Settings\All Users\Documents\Test\Test.rar<RAR>:2008-3-27__28E02ame2 <- Trojan.Agent.Lxb : No action



Scanned objects : 26

Infected objects : 15

挪威的冬天

信息        2008-03-27  21:16:34        您此次查毒共查出7个病毒以及危险代码                       
信息        2008-03-27  21:16:34        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件26个                       
信息        2008-03-27  21:16:34        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-03-27  21:16:34        D:\Desktop\Test.rar\2008-3-27__A8B37.exe        Win32.Adware.Costrat.es.58368        跳过，未处理       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-27__80497ame1        Win32.Troj.Tibs.2518        清除成功       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-27__D3C49.exe        Win32.VirInstaller.Agent.96499        清除成功       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-27__C9884.exe        Win32.Troj.Wigon.BE.11776        清除成功       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-27__7DCA6.exe        Win32.TrojDownloader.Agent.59904        清除成功       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-27__B6420.exe        Win32.Troj.Wigon.BD.114176        清除成功       
病毒        2008-03-27  21:16:33        D:\Desktop\Test.rar\2008-3-24__5B455.exe        Win32.TrojDownloader.Small.23192        清除成功

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Test.rar'
C:\Documents and Settings\Administrator\桌面\Test.rar
  [0] Archive type: RAR
  --> 2008-3-24__5B455.exe
      [DETECTION] Is the Trojan horse TR/Agent.23192
  --> 2008-3-27__DACDD.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.ajs
  --> 2008-3-27__339CA.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> 2008-3-27__A8B37.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 2008-3-27__B6420.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.syj
  --> 2008-3-27__D99E9.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.agl
  --> 2008-3-27__7BCB5.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.tjv
  --> 2008-3-27__7DCA6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2008-3-27__C9884.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.tcl.1
  --> 2008-3-27__E217E.exe
      [DETECTION] Is the Trojan horse TR/Pakes.cjt
  --> 2008-3-27__9D485.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.11776
  --> 2008-3-27__D3C49.exe
      [DETECTION] Contains detection pattern of the dropper DR/MicroJoiner.Gen
  --> 2008-3-27__80497ame1
      [DETECTION] Is the Trojan horse TR/Dldr.Small.agq.4
  --> 2008-3-27__28E02ame2
      [DETECTION] Is the Trojan horse TR/Dldr.VB.dkd
  --> 2008-3-27__60BE4ame3
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 2008-3-27__A6C4Eame4
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
  --> 2008-3-27__9012Dame5
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [INFO]      The file was deleted!


End of the scan: 星期四 2008年3月27日  21:22
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     17 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

冷冷

IKARUS
I:\virus\样本区\Test.rar:\2008-3-24__5B455.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\样本区\Test.rar:\2008-3-27__DACDD.exe - Signature 'Trojan-Spy.Win32.KeyLogger.EH' found
I:\virus\样本区\Test.rar:\2008-3-27__339CA.exe - Signature 'Trojan.Hijacker' found
I:\virus\样本区\Test.rar:\2008-3-27__A8B37.exe - Signature 'Trojan-Clicker.Win32.Costrat.es' found
I:\virus\样本区\Test.rar:\2008-3-27__B6420.exe - Signature 'Downloader.Agent.11776' found
I:\virus\样本区\Test.rar:\2008-3-27__C23BF.exe
I:\virus\样本区\Test.rar:\2008-3-27__D99E9.exe - Signature 'Trojan-Downloader.Agent.AGL' found
I:\virus\样本区\Test.rar:\2008-3-27__7BCB5.exe - Signature 'Trojan-Downloader.Win32.Small.tjv' found
I:\virus\样本区\Test.rar:\2008-3-27__7DCA6.exe - Signature 'Trojan-Downloader.Win32.Small.ddx' found
I:\virus\样本区\Test.rar:\2008-3-27__C9884.exe - Signature 'Trojan-Downloader.Win32.Small.tcl' found
I:\virus\样本区\Test.rar:\2008-3-27__E217E.exe - Signature 'Virus.Trojan.Win32.Pakes.cjt' found
I:\virus\样本区\Test.rar:\2008-3-27__9D485.exe
I:\virus\样本区\Test.rar:\2008-3-27__D3C49.exe - Signature 'Trojan-Downloader.Harnig.ZC' found
I:\virus\样本区\Test.rar:\2008-3-27__80497ame1 - Signature 'Trojan-Downloader.Win32.Tibs.M' found
I:\virus\样本区\Test.rar:\2008-3-27__28E02ame2
I:\virus\样本区\Test.rar:\2008-3-27__60BE4ame3 - Suspect code-parts found (Level: 30)
I:\virus\样本区\Test.rar:\2008-3-27__A6C4Eame4 - Suspect code-parts found (Level: 20)
I:\virus\样本区\Test.rar:\2008-3-27__9012Dame5 - Suspect code-parts found (Level: 10)
I:\virus\样本区\Test.rar
19 Files scanned
   (1 Archiv with 18 files)
12 Signatures found
3 Suspect code-parts found
Used time: 0:01.313

allinwonderi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-27, 15:47

Scan name: Virus Tester
Path to scan: C:\Documents and Settings\All Users\Documents\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-27, 21:30:14
---------------------------------------------------------------------
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-24__5B455.exe->(UPack)->(PecBundle)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__339CA.exe->rsrcPE
[Found downloader]         <W32/Downldr2.BGCI (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__B6420.exe
[Found worm]         <W32/Worm.NLO (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__D99E9.exe
[Found downloader]         <W32/Downloader!72d1 (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__7BCB5.exe
[Found downloader]         <W32/DL_smallP.W (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__7DCA6.exe->(embedded)
[Found downloader]         <W32/Downldr2.BGUQ (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__C9884.exe
[Found Trojan]         <W32/Trojan2.AIYN (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__E217E.exe
[Found downloader]         <W32/Downloader.MAP (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\Test.rar->2008-3-27__80497ame1

---------------------------------------------------------------------
Scan ended:        2008-3-27, 21:30:18
Duration:        0:00:04

Scan result:

Scanned files:                 6
Infected objects:         9
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

hj5abc

Sign of "Win32:Agent-PQC [Trj]" has been found in "F:\Test\2008-3-24__5B455.exe\[Upack]\[PECompact]" file.  
Sign of "Win32:Socks [Wrm]" has been found in "F:\Test\2008-3-27__D99E9.exe\[UPX]" file.  
Sign of "Win32:Harnig-OT [Trj]" has been found in "F:\Test\2008-3-27__D3C49.exe" file.  
Sign of "Win32:Small-BLF [Trj]" has been found in "F:\Test\2008-3-27__80497ame1" file.  
Sign of "Win32:Small-JMH [Trj]" has been found in "F:\Test\2008-3-27__60BE4ame3\[UPX]" file.  
Sign of "Win32:Tibser" has been found in "F:\Test\2008-3-27__A6C4Eame4" file.  
Sign of "Win32:Xorpix-AZ [Trj]" has been found in "F:\Test\2008-3-27__339CA.exe\[Embedded#1060]\[Upack]" file.  
Sign of "Win32:Small-GVV [Trj]" has been found in "F:\Test\2008-3-27__7DCA6.exe\[PECompact]\[Embedded#3004]\[PECompact]" file.

rest1min

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-03-27
        更新日期 2008-03-27

扫描目标 C:\Documents and Settings\Administrator\桌面\Test.rar

开始时间 2008-03-27 21:46:27

在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-24__5B455.exe 中发现 TrojanDownloader.Agent.adoq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__339CA.exe 中发现 TrojanProxy.Xorpix.ek 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__A8B37.exe 中发现 TrojanClicker.Costrat.bu 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__B6420.exe 中发现 TrojanDownloader.Small.abiu 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__D99E9.exe 中发现 Worm/Socks.d 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__7DCA6.exe 中发现 TrojanDownloader.Agent.ztv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__E217E.exe 中发现 Trojan/Pakes.asv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__D3C49.exe 中发现 TrojanDropper.Agent.uh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Test.rar->2008-3-27__80497ame1 中发现 TrojanDownloader.Small.ki 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :731                                 病毒体 :9         
                   删除 :9                                     解毒 :0         
    扫描速度(千字节/秒) :20261                             扫描时间 :00:00:10
    扫描文件速度(个/秒) :73