9只。

HC303

全部是来自同事U盘或移动硬盘。大家扫扫。
权权不够，放到QQ中转站了。
http://mail.qq.com/cgi-bin/exs_download?uin=12035224&svrid=36&fid=b16640fa4a26b62b5daf43ca1ed9c0815eb7844149b9aac0&&txf_fid=&&txf_sid=&code=8416d180&k=2d242b364e0e92264e5fc671623632623264616674716c610e276b39663038310c4b10564a

[ 本帖最后由 HC303 于 2008-4-3 10:22 编辑 ]

The EQs

C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\regedit.exe - Win32/Xorer.CE virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\taskmgr.exe - Win32/Xorer.CE virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\cmd.exe - Win32/Xorer.CE virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\killer_rodog.exe - Win32/Xorer.CE virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\msconfig.exe - Win32/Xorer.CE virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\wsctf.exe - Win32/Alman.NAB virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\host.exe - Win32/TrojanDropper.Small.APL trojan
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\EXPLORER.EXE - Win32/Alman.NAB virus
C:\Documents and Settings\Don johnson\桌面\9.rar » RAR » 9\copy.exe - Win32/Perlovga.A virus

HC303

第一次没有贴上不好意思呀。

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\9.rar'
C:\Documents and Settings\Administrator\桌面\9.rar
  [0] Archive type: RAR
  --> 9\regedit.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\taskmgr.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\cmd.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\killer_rodog.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\msconfig.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\wsctf.exe
      [DETECTION] Contains code of the Windows virus W32/Almanahe.B
  --> 9\host.exe
      [DETECTION] Is the Trojan horse TR/Drop.Small.apl
  --> 9\EXPLORER.EXE
      [DETECTION] Contains detection pattern of the Windows virus W32/Almanahe.B
  --> 9\copy.exe
      [DETECTION] Contains code of the Windows virus W32/Perlovga.A.1
      [INFO]      The file was deleted!


End of the scan: 星期四 2008年4月3日  10:25
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     11 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

Starting the file scan:

Begin scan in 'E:\9.rar'
E:\9.rar
  [0] Archive type: RAR
  --> 9\regedit.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\taskmgr.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\cmd.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\killer_rodog.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\msconfig.exe
      [DETECTION] Is the Trojan horse TR/Agent.45056.I
  --> 9\wsctf.exe
      [DETECTION] Contains code of the Windows virus W32/Almanahe.B
  --> 9\host.exe
      [DETECTION] Is the Trojan horse TR/Drop.Small.apl
  --> 9\EXPLORER.EXE
      [DETECTION] Contains detection pattern of the Windows virus W32/Almanahe.B
  --> 9\copy.exe
      [DETECTION] Contains code of the Windows virus W32/Perlovga.A.1
      [INFO]      The file was deleted!


End of the scan: 2008年4月3日  10:27
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

aerbeisi

[Found security risk]         <W32/Xorer.A (exact, not disinfectable)>        C:\test\9.rar->9\regedit.exe
[Found security risk]         <W32/Xorer.A (exact, not disinfectable)>        C:\test\9.rar->9\taskmgr.exe
[Found security risk]         <W32/Xorer.A (exact, not disinfectable)>        C:\test\9.rar->9\cmd.exe
[Found security risk]         <W32/Xorer.A (exact, not disinfectable)>        C:\test\9.rar->9\killer_rodog.exe
[Found security risk]         <W32/Xorer.A (exact, not disinfectable)>        C:\test\9.rar->9\msconfig.exe
[Found virus]         <W32/Alman.C (not disinfectable)>        C:\test\9.rar->9\wsctf.exe
[Found security risk]         <W32/Dropper.BMZ (exact, not disinfectable)>        C:\test\9.rar->9\host.exe
[Found virus]         <W32/Alman.C (not disinfectable)>        C:\test\9.rar->9\EXPLORER.EXE
[Found virus]         <W32/Perlovga.A (exact, not disinfectable)>        C:\test\9.rar->9\copy.exe

啊弥陀佛

木马名称:Backdoor.Win32.Delf.hd
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\HOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Perlovga.a
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\COPY.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\WSCTF.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\MSCONFIG.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\TASKMGR.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\REGEDIT.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9\9\CMD.EXE
是否删除木马程序及其衍生物?

挪威的冬天

杂交?

信息        2008-04-03  11:57:00        您此次查毒清除了14个病毒                       
信息        2008-04-03  11:57:00        您此次查毒共查出9个病毒以及危险代码                       
信息        2008-04-03  11:57:00        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个                       
信息        2008-04-03  11:57:00        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\copy.exe        Win32.Troj.TestBug.a.1536        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\EXPLORER.EXE        Win32.Troj.PswGame.ad.36864        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\EXPLORER.EXE        Worm.DLan.c.79872        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\host.exe        Win32.Troj.Dropper.f.70207        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\wsctf.exe        Win32.PSWTroj.SBoy.b.24576        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\wsctf.exe        Worm.DLan.c.79872        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\msconfig.exe        Win32.VcingT.ye.204808        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\killer_rodog.exe        Win32.VcingT.ye.204808        清除成功       
病毒        2008-04-03  11:57:00        D:\Desktop\9.rar\9\cmd.exe        Worm.VcingT.ca.93696        清除成功       
病毒        2008-04-03  11:56:59        D:\Desktop\9.rar\9\cmd.exe        Win32.VcingT.ye.204808        清除成功       
病毒        2008-04-03  11:56:59        D:\Desktop\9.rar\9\taskmgr.exe        Worm.VcingT.ca.93696        清除成功       
病毒        2008-04-03  11:56:59        D:\Desktop\9.rar\9\taskmgr.exe        Win32.VcingT.ye.204808        清除成功       
病毒        2008-04-03  11:56:59        D:\Desktop\9.rar\9\regedit.exe        Worm.VcingT.ca.93696        清除成功       
病毒        2008-04-03  11:56:59        D:\Desktop\9.rar\9\regedit.exe        Win32.VcingT.ye.204808        清除成功

solcroft

莫名其妙扫出33个

* avast! Report
* This file is generated automatically
*
* Task 'Simple user interface' used
* Started on Thursday, April 03, 2008
* VPS: 080402-0, 02/04/2008
*

C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#1a008] [L] Win32:VB-CMF [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#bae24]\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#bae24]\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\cmd.exe\[Embedded#bae24] [L] Win32:VB-CMF [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\copy.exe\[MEW] [L] Win32:Perlovga (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\EXPLORER.EXE [L] Win32:Detnat-AX [Wrm] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\host.exe\[Embedded#08004] [L] Win32:Agent-ILR [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\host.exe\[Embedded#10a1a] [L] Win32:Small-ABY [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\killer_rodog.exe\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\killer_rodog.exe\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\killer_rodog.exe\[Embedded#c2c08]\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\killer_rodog.exe\[Embedded#c2c08]\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\killer_rodog.exe\[Embedded#c2c08] [L] Win32:VB-CMF [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\msconfig.exe\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\msconfig.exe\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\msconfig.exe\[Embedded#3f008]\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\msconfig.exe\[Embedded#3f008]\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\msconfig.exe\[Embedded#3f008] [L] Win32:VB-CMF [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#1a008] [L] Win32:VB-CMF [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#68624]\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#68624]\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\regedit.exe\[Embedded#68624] [L] Win32:VB-CMF [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#1a008] [L] Win32:VB-CMF [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#66024]\[Embedded#0c6d0]\[FSG] [L] Win32:Xorer-B (0)
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#66024]\[Embedded#0ec08] [L] Win32:Pinx [Trj] (0)
C:\Documents and Settings\Administrator\Desktop\9\9\taskmgr.exe\[Embedded#66024] [L] Win32:VB-CMF [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Administrator\Desktop\9\9\wsctf.exe [L] Win32:Small-JUR [Trj] (0)
File was successfully deleted...
Infected files: 33
Total files: 52
Total folders: 2
Total size: 7.1 MB

*
* Task stopped: Thursday, April 03, 2008
* Run-time was 5 second(s)

Palkia

在 C:\Documents and Settings\Administrator\桌面\9.rar->9\regedit.exe 中发现 Win32/Kdcyy.Gen 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\regedit.exe 中发现 Win32/Kdcyy.ch 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\taskmgr.exe 中发现 Win32/Kdcyy.Gen 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\taskmgr.exe 中发现 Win32/Kdcyy.ch 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\cmd.exe 中发现 Win32/Kdcyy.Gen 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\cmd.exe 中发现 Win32/Kdcyy.ch 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\killer_rodog.exe 中发现 Win32/Kdcyy.Gen 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\msconfig.exe 中发现 Win32/Kdcyy.Gen 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\wsctf.exe 中发现 Win32/Almana.c 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\wsctf.exe 中发现 Trojan/VB.Small.bix 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\host.exe 中发现 TrojanDropper.Agent.bx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\EXPLORER.EXE 中发现 Win32/Almana.c 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\EXPLORER.EXE 中发现 Trojan/PSW.Jianghu.ei 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\9.rar->9\copy.exe 中发现 Worm/Small.a 病毒, 已删除