8x

qianwenxiang

昨天的 忘了发了...

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Mian007.a   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.42

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\8.rar'
C:\Documents and Settings\Administrator\桌面\8.rar
  [0] Archive type: RAR
  --> c.dat
      [DETECTION] Contains detection pattern of the dropper DR/Dldr.VB.dht
  --> d.dat
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> mgg.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> svchost.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> vip.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.cfn.2
  --> a.dat
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> b.dat
      [DETECTION] Is the Trojan horse TR/Vundo.Gen
  --> bclbcl.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!


End of the scan: 星期五 2008年3月28日  21:48
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      7 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings

The EQs

C:\Documents and Settings\Don johnson\桌面\8.rar » RAR » c.dat » NSIS » aqVreo051080.exe - a variant of Win32/TrojanDownloader.VB.AW trojan
C:\Documents and Settings\Don johnson\桌面\8.rar » RAR » d.dat - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\8.rar » RAR » mgg.exe - Win32/PSW.OnLineGames.NMY trojan
C:\Documents and Settings\Don johnson\桌面\8.rar » RAR » a.dat - Win32/TrojanDownloader.Small.IAW trojan

wangjay1980

8 to kl

detected: Trojan program Trojan-Downloader.Win32.VB.dht        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/c.dat//data0006
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/d.dat
detected: Trojan program Trojan-PSW.Win32.OnLineGames.woo        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/mgg.exe
detected: Trojan program Trojan-Clicker.Win32.Delf.ua        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/svchost.exe
detected: Trojan program Trojan-PSW.Win32.Nilage.cfn        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/vip.exe
detected: Trojan program Trojan-Downloader.Win32.Small.tnt        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/a.dat//PE_Patch.Upolyx//PE_Patch.UPX//UPX
detected: adware not-a-virus:AdWare.Win32.Virtumonde.gen        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/b.dat
detected: Trojan program Trojan.Win32.Pakes.cmd        File: C:\Documents and Settings\Owner\×ÀÃæ\8.rar/bclbcl.exe

yangpizhi

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-28, 4:46

Scan name: virus scan
Path to scan: C:\virus\|

Thorough scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-28, 22:01:01
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Clean]        C:\virus\8.rar->c.dat
[Clean]        C:\virus\8.rar->d.dat->(UPX)
[Clean]        C:\virus\8.rar->d.dat
[Clean]        C:\virus\8.rar->mgg.exe
[Found possible virus]         <W32/Threat-SysVenFak-based!Maximus (not disinfectable)>        C:\virus\8.rar->svchost.exe
[Clean]        C:\virus\8.rar->vip.exe
[Clean]        C:\virus\8.rar->a.dat->(UPX)
[Clean]        C:\virus\8.rar->a.dat
[Clean]        C:\virus\8.rar->b.dat
[Clean]        C:\virus\8.rar->bclbcl.exe
[Contains infected objects]        C:\virus\8.rar
[Quarantined]        C:\virus\8.rar->bclbcl.exe

---------------------------------------------------------------------
Scan ended:        2008-3-28, 22:01:03
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         1
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

FP只报一个，其余上报。。。明天看看效果，好的话以后就开始给FP上报病毒了

挪威的冬天

信息        2008-03-28  22:33:32        您此次查毒清除了2个病毒                       
信息        2008-03-28  22:33:32        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-03-28  22:33:32        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件14个                       
信息        2008-03-28  22:33:32        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-03-28  22:33:32        D:\Desktop\8.rar\vip.exe        Win32.PSWTroj.Nilage.65536        清除成功       
病毒        2008-03-28  22:33:32        D:\Desktop\8.rar\mgg.exe        Win32.Hack.NSAnti.ge        清除成功

曲中求

费尔7个

秋叶濛濛

7 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:

tanlimo

avast!扫描日志
2008-3-28 23:05:55        NBA        3972        Sign of "Win32:Small-JMH [Trj]" has been found in "D:\TDDOWNLOAD\8.rar\a.dat\[UPX]" file.  
2008-3-28 23:05:32        NBA        3972        Sign of "Win32:AuCrypt [Cryp]" has been found in "D:\TDDOWNLOAD\8.rar\mgg.exe" file.  
2008-3-28 23:05:03        NBA        3972        Sign of "Win32:VB-FXE [Trj]" has been found in "D:\TDDOWNLOAD\8.rar\d.dat\[UPX]" file.