9

qianwenxiang

glacier

NOD32  
解压的时候就有三个没检测出来，其余的全删除了

残缺的唯美

Infostealer
病毒 ID: 24770
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除可能，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 文件
[ff.exe] 位于[d:\users\administrator\desktop\bpack.rar] - 已感染

Starting the file scan:

Begin scan in 'E:\bpack.rar'
E:\bpack.rar
  [0] Archive type: RAR
  --> ico.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ypx
  --> ie.exe
      [DETECTION] Is the Trojan horse TR/Dldr.JJFV.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uvg.9
  --> AntiSpywareShieldSetup.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
  --> cer.exe
      [DETECTION] Contains detection pattern of the dropper DR/Inject.ama
  --> crack.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.58368
  --> dmx.exe
      [DETECTION] Is the Trojan horse TR/PSW.Ganhame.HU.5
  --> ff.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
  --> H.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年4月1日  21:51
Used time: 00:27 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

挪威的冬天

信息        2008-04-01  21:51:37        您此次查毒清除了3个病毒                       
信息        2008-04-01  21:51:37        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-04-01  21:51:37        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件15个                       
信息        2008-04-01  21:51:37        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-04-01  21:51:37        D:\Desktop\bpack.rar\H.exe        Win32.Hack.NSAnti.ge        清除成功       
病毒        2008-04-01  21:51:37        D:\Desktop\bpack.rar\ff.exe        Win32.PSWTroj.OnLineGames.311296        清除成功       
病毒        2008-04-01  21:51:36        D:\Desktop\bpack.rar\ie.exe        Win32.Troj.Downloader.te.13312        清除成功

平淡

C:\Documents and Settings\Administrator\桌面\bpack.rar>>8.exe        TrojanPSW.OnLineGames.uvg.gdme        木马        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>AntiSpywareShieldSetup.exe        TrojanDownloader.FraudLoad.bx.tplo        木马        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>cer.exe>>emb-0.cab>>ff1103.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>crack.exe        Adware.Virtumonde.gen.iftl        广告程序        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>dmx.exe        TrojanPSW.OnLineGames.ypw.vbqy        木马        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>ff.exe        TrojanPSW.Agent.vqp.olfx        木马        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>H.exe        Heuri.Possible/Packed        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\bpack.rar>>ico.exe        Packed.UPX.a        带壳程序        还未处理

无尽藏海

E:\VIRUS\bpack\8.exe - Win32/PSW.OnLineGames.NMO 特洛伊木马 的变种
E:\VIRUS\bpack\AntiSpywareShieldSetup.exe - Win32/Adware.SpySheriff 应用程序 的变种
E:\VIRUS\bpack\cer.exe > CAB > ff1103.exe - 未查明的 NewHeur_PE 病毒
E:\VIRUS\bpack\ff.exe - Win32/PSW.OnLineGames.LYX 特洛伊木马
E:\VIRUS\bpack\H.exe - Win32/Pacex.Gen 病毒
E:\VIRUS\bpack\ie.exe - Win32/Small.NDQ 特洛伊木马

Nerazzurri

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ypw        File: C:\Users\Nerazzurri\Desktop\bpack.rar/ico.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-Downloader.Win32.Small.tev        File: C:\Users\Nerazzurri\Desktop\bpack.rar/ie.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.uvg        File: C:\Users\Nerazzurri\Desktop\bpack.rar/8.exe
deleted: Trojan program Trojan-Downloader.Win32.FraudLoad.bx        File: C:\Users\Nerazzurri\Desktop\bpack.rar/AntiSpywareShieldSetup.exe
deleted: Trojan program Trojan.Win32.Inject.ama        File: C:\Users\Nerazzurri\Desktop\bpack.rar/cer.exe//data0000.cab/panslog.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.wmz        File: C:\Users\Nerazzurri\Desktop\bpack.rar/cer.exe//data0000.cab/ff1103.exe//PE_Patch//UPack
deleted: adware not-a-virus:AdWare.Win32.Virtumonde.gen        File: C:\Users\Nerazzurri\Desktop\bpack.rar/crack.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ypw        File: C:\Users\Nerazzurri\Desktop\bpack.rar/dmx.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.lyx        File: C:\Users\Nerazzurri\Desktop\bpack.rar/ff.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Magania.imu        File: C:\Users\Nerazzurri\Desktop\bpack.rar/H.exe

aerbeisi

[Found adware]         <W32/SpySher.AW (exact)>        C:\test\BPACK\AntiSpywareShieldSetup.exe
[Found downloader]         <W32/Downldr2.BFHM (exact)>        C:\test\BPACK\ie.exe
[Found virus]         <W32/Downloader.gen10>        C:\test\BPACK\ff.exe
[Found possible virus]         <W32/PWStealer3!Generic>        C:\test\BPACK\H.exe

gaojun7206

bpack.rar
    [0] Archive type: RAR
    --> ico.exe
        [DETECTION] Is the Trojan horse TR/PSW.Ganhame.HR
        [WARNING]   Infected files in archives cannot be repaired!
    --> ie.exe
        [DETECTION] Is the Trojan horse TR/Dldr.JJFV.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uvg.9
        [WARNING]   Infected files in archives cannot be repaired!
    --> AntiSpywareShieldSetup.exe
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> cer.exe
        [DETECTION] Contains detection pattern of the dropper DR/Inject.ama
        [WARNING]   Infected files in archives cannot be repaired!
    --> crack.exe
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.58368
        [WARNING]   Infected files in archives cannot be repaired!
    --> dmx.exe
        [DETECTION] Is the Trojan horse TR/PSW.Ganhame.HR
        [WARNING]   Infected files in archives cannot be repaired!
    --> ff.exe
        [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
        [WARNING]   Infected files in archives cannot be repaired!
    --> H.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was moved to '48535cb1.qua'!