22

qianwenxiang

Starting the file scan:

Begin scan in 'E:\DRPAK2.rar'
E:\DRPAK2.rar
  [0] Archive type: RAR
  --> keygen.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.iwh
  --> lin.exe
      [DETECTION] Is the Trojan horse TR/PSW.Magania.bre
  --> 2008-3-31__1AE96.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2008-3-31__2C034.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2008-3-31__3F0F3.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 2008-3-31__4F077.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12134
  --> 2008-3-31__359DE.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12495
  --> 2008-3-31__686.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2008-3-31__748B2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.658
  --> 2008-3-31__850B9.exe
      [DETECTION] Is the Trojan horse TR/WuDisable.E
  --> 2008-3-31__10907.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2008-3-31__97105.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12107
  --> 2008-3-31__ACAD7.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.51042.B
  --> 2008-3-31__C59EF.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
  --> 2008-3-31__CC2F9.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 2008-3-31__DD99A.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.596
  --> a8da234k8asdf.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> ecard.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.GVP
      [1] Archive type: RAR SFX (self extracting)
      --> S-1-5-21-3252328098-71414409-2463015037-501\csrss.exe
          [DETECTION] Is the Trojan horse TR/Mirchack.A.13
      --> S-1-5-21-3252328098-71414409-2463015037-501\hex.exe
          [DETECTION] Contains detection pattern of the SPR/HideWindow.B program
      --> S-1-5-21-3252328098-71414409-2463015037-501\script.ini
          [DETECTION] Is the Trojan horse TR/IRC.Zapchast
      [WARNING]   The file was ignored!


End of the scan: 2008年4月1日  21:42
Used time: 00:22 min

The scan has been done completely.

      0 Scanning directories
     38 Files were scanned
     21 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      2 Archives were scanned
      1 Warnings
      0 Notes

wangjay1980

19 TO KL
detected: malware not-virus:Hoax.Win32.Renos.bfn        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/install_1356_M3w0fHx8fHx8fA_.exe
detected: Trojan program Trojan-Downloader.Win32.Small.iwh        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/keygen.exe
detected: Trojan program Trojan-PSW.Win32.Magania.bre        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/lin.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yqq        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__1AE96.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rri        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__2C034.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yih        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__3F0F3.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yip        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__4F077.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yip        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__359DE.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wpa        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__686.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yse        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__748B2.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lwb        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__850B9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.spx        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__10907.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wpf        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__97105.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Agent.diq        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__ACAD7.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yog        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__CC2F9.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uyw        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/2008-3-31__DD99A.exe//UPack
detected: virus Worm.Win32.AutoRun.ctm        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/a8da234k8asdf.exe//PE_Patch//UPack
detected: Trojan program Backdoor.Win32.mIRC-based.g        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/ecard.exe//data.rar/S-1-5-21-3252328098-71414409-2463015037-501\csrss.exe
detected: riskware not-a-virus:RiskTool.Win32.HideRun.d        File: C:\Documents and Settings\Owner\×ÀÃæ\DRPAK2.rar/ecard.exe//data.rar/S-1-5-21-3252328098-71414409-2463015037-501\hstart.exe

14206937

红伞查到20个


End of the scan: 2008年4月1日  21:45
Used time: 00:26 min

The scan has been done completely.

      0 Scanning directories
     39 Files were scanned
     20 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     19 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

tanlimo

ess扫描日志
病毒库版本: 2991 (20080401)
日期: 2008-4-1  时间: 21:48:51
已扫描的磁盘、文件夹和文件: G:\DRPAK2.rar
G:\DRPAK2.rar > RAR > install_1356_M3w0fHx8fHx8fA_.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > lin.exe - Win32/PSW.Gamania.BR 特洛伊木马
G:\DRPAK2.rar > RAR > 2008-3-31__1AE96.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__2C034.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__3F0F3.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__4F077.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__359DE.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__686.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__748B2.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__850B9.exe - Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__10907.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__97105.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马
G:\DRPAK2.rar > RAR > 2008-3-31__ACAD7.exe - Win32/PSW.Delf.NKU 特洛伊木马
G:\DRPAK2.rar > RAR > 2008-3-31__C59EF.exe - Win32/TrojanDownloader.Delf.OBY 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__CC2F9.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > 2008-3-31__DD99A.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > a8da234k8asdf.exe - Win32/TrojanDownloader.Flux 特洛伊木马 的变种
G:\DRPAK2.rar > RAR > ecard.exe > RAR > S-1-5-21-3252328098-71414409-2463015037-501\mirc.ini - IRC/Zapchast 特洛伊木马
已扫描的对象数: 36
发现的威胁数: 18
完成时间: 21:49:35  总扫描时间: 44 秒 (00:00:44)

残缺的唯美

18
Downloader.MisleadApp
病毒 ID: 40906
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[install_717_mhw1fhx8fhx8fa_.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Downloader.MisleadApp
病毒 ID: 40906
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[install_1356_m3w0fhx8fhx8fa_.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[lin.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__1ae96.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer
病毒 ID: 24770
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__2c034.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__3f0f3.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__359de.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__686.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__850b9.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__10907.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Downloader
病毒 ID: 26637
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__97105.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer
病毒 ID: 24770
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__acad7.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__cc2f9.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[2008-3-31__dd99a.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Trojan.Dropper
病毒 ID: 11027
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[ecard.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


IRC Trojan
病毒 ID: 24952
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[csrss.exe] 位于[ecard.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


Hacktool.HideWindow
病毒 ID: 4294906362
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 黑客工具
状态: 删除失败
-----------
1 文件
[hex.exe] 位于[ecard.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染


IRC Trojan
病毒 ID: 24952
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[script.ini] 位于[ecard.exe] 位于[d:\users\administrator\desktop\drpak2.rar] - 已感染

挪威的冬天

病毒        2008-04-01  21:46:57        病毒在文件D:\Desktop\DRPAK2\ecard\S-1-5-21-3252328098-71414409-2463015037-501\wget.exe中        Win32.Hack.URLAttack.162816        处理成功（操作：删除）       
病毒        2008-04-01  21:46:56        病毒在文件D:\Desktop\DRPAK2\ecard\S-1-5-21-3252328098-71414409-2463015037-501\hex.exe中        Win32.Troj.HideWindows.a.34304        处理成功（操作：删除）       


信息        2008-04-01  21:46:50        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-04-01  21:46:50        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件24个                       
信息        2008-04-01  21:46:50        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-04-01  21:46:50        D:\Desktop\DRPAK2\install_1356_M3w0fHx8fHx8fA_.exe        Win32.NotVirus.Renos.31232        跳过，未处理       
病毒        2008-04-01  21:46:50        D:\Desktop\DRPAK2\ecard.exe\BindFile\S-1-5-21-3252328098-71414409-2463015037-501\wget.exe        Win32.Hack.URLAttack.162816        跳过，未处理       
病毒        2008-04-01  21:46:50        D:\Desktop\DRPAK2\ecard.exe\BindFile\S-1-5-21-3252328098-71414409-2463015037-501\hex.exe        Win32.Troj.HideWindows.a.34304        跳过，未处理       
信息        2008-04-01  21:46:14        您此次查毒清除了17个病毒                       
信息        2008-04-01  21:46:14        您此次查毒共查出20个病毒以及危险代码                       
信息        2008-04-01  21:46:14        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件57个                       
信息        2008-04-01  21:46:14        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
风险程序        2008-04-01  21:46:14        D:\Desktop\DRPAK2.rar\install_1356_M3w0fHx8fHx8fA_.exe        Win32.NotVirus.Renos.31232        跳过，未处理       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\a8da234k8asdf.exe        Worm.AutoRun.122880        清除成功       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\2008-3-31__DD99A.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\2008-3-31__CC2F9.exe        Win32.Troj.OnlineGameT.am.107664        清除成功       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\2008-3-31__C59EF.exe        Win32.TrojDownloader.Direct.me.110592        清除成功       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\2008-3-31__ACAD7.exe        Win32.Hack.Delf.m.221184        清除成功       
病毒        2008-04-01  21:46:13        D:\Desktop\DRPAK2.rar\2008-3-31__97105.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__10907.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__850B9.exe        Win32.Troj.AgentT.fm.14452        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__748B2.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__686.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__359DE.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__4F077.exe        Win32.Troj.OnlineGamesT.af.57344        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__3F0F3.exe        Win32.Troj.GamesHackT.gu.94304        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__2C034.exe        Win32.Troj.GamesHackT.gu.94304        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\2008-3-31__1AE96.exe        Win32.Troj.OnlineGamesT.e.94315        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\lin.exe        Win32.Troj.Magania.be.38400        清除成功       
病毒        2008-04-01  21:46:12        D:\Desktop\DRPAK2.rar\keygen.exe        Win32.TrojDownloader.Small.28672        清除成功

allinwonderi

[Found backdoor]         <W32/Hupigon.G.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->DRPAK2.exe
[Found password stealer]         <W32/Magania.RN (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->lin.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__1AE96.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__2C034.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__3F0F3.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__4F077.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__359DE.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__686.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__748B2.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__850B9.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__10907.exe
[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__97105.exe->(UPack)
[Found Trojan]         <W32/Trojan2.LUN (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__ACAD7.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__CC2F9.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->2008-3-31__DD99A.exe
[Found possible virus]         <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->a8da234k8asdf.exe
[Found virus tool]         <W32/VirTool.GL (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->ecard.exe->(RAR)->S-1-5-21-3252328098-71414409-2463015037-501\hex.exe
[Found backdoor]         <IRC/Zapchast.CD (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar->ecard.exe->(RAR)->S-1-5-21-3252328098-71414409-2463015037-501\mirc.ini

---------------------------------------------------------------------
Scan ended:        2008-4-1, 22:16:25
Duration:        0:00:10

Scan result:

Scanned files:                 6
Infected objects:         18
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:DRPAK2.exe <- Variant:Trojan.Hupigon.Dsd : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:lin.exe <- Trojan.Psw.Magania.Bre : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__4F077.exe <- Trojan.Psw.Onlinegames.Yip : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__359DE.exe <- Trojan.Psw.Onlinegames.Yip : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__850B9.exe<UPack>:2008-3-31__850B9.exe<DLLRES>:MUSIC0.exe <- Trojan.Psw.Onlinegames.Luy : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__97105.exe <- Trojan.Psw.Onlinegames.Wpf : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__ACAD7.exe<UPack>:2008-3-31__ACAD7.exe <- Trojan.Agent.Diq : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__C59EF.exe<UPack>:2008-3-31__C59EF.exe<DLLRES>:IFTDLL0.exe <- Trojan.Downloader.Delf.Epw : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__CC2F9.exe <- Trojan.Psw.Onlinegames.Yog : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:2008-3-31__DD99A.exe<UPack>:2008-3-31__DD99A.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Uyv : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:a8da234k8asdf.exe<UPack>:a8da234k8asdf.exe <- Worm.Autorun.Ctm : No action
C:\Documents and Settings\All Users\Documents\Test\DRPAK2.rar<RAR>:ecard.exe<RAR>:csrss.exe<UPX>:csrss.exe <- Variant:Trojan.Mirc.A : No action



Scanned objects : 61

Infected objects : 12

The file 'DRPAK2.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.hgg. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'install.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'install_717_MHw1fHx8fHx8fA_.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.WinFixer.AD. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

The file 'install_1356_M3w0fHx8fHx8fA_.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Hoax.Renos.bfn. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.