virus*21

IllusionWing

表弟家电脑中的病毒,他家装的瑞星,认出来4个,UG认出11个...
KAV没试,貌似就是最近那个atixxxx下载者

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\VirusPackage'
C:\Documents and Settings\Administrator\My Documents\VirusPackage\
  0468ea0201.vir
  208ad8e0fb.vir
  4g6v2wziau.vir
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  9qj83szzi.vir
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  CS0011.EXE.vir
  CS0011.vir
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  e53a.vir
      [DETECTION] Is the Trojan horse TR/Agent.49152
      [NOTE]      The file was deleted!
  edlin.vir
  h6kheogq9w.vir
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  KB930.vir
  kmufrfshuoh.vir
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  ltyszxqklgd.vir
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  net.vir
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!
  page1.vir
      [DETECTION] Is the Trojan horse TR/PSW.LdPinch.jm1
      [NOTE]      The file was deleted!
  page2.vir
      [DETECTION] Is the Trojan horse TR/PSW.LdPinch.jm1
      [NOTE]      The file was deleted!
  qckgudqwwkn.vir
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  svchost.vir
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  Uninstall.vir
    [0] Archive type: Runtime Packed
    --> Object
  Unl.vir
  win.vir
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [NOTE]      The file was deleted!
  zhqbs080427.vir
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月2日  01:20
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     21 Files were scanned
     14 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     14 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      0 Archives were scanned
      0 Warnings
     14 Notes

kkgh

日期： 2.5.2008  时间：16:34:56
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\zh\桌面\0468ea0201.vir; C:\Documents and Settings\zh\桌面\208ad8e0fb.vir; C:\Documents and Settings\zh\桌面\4g6v2wziau.vir; C:\Documents and Settings\zh\桌面\9qj83szzi.vir; C:\Documents and Settings\zh\桌面\CS0011.EXE.vir; C:\Documents and Settings\zh\桌面\CS0011.vir; C:\Documents and Settings\zh\桌面\e53a.vir; C:\Documents and Settings\zh\桌面\edlin.vir; C:\Documents and Settings\zh\桌面\h6kheogq9w.vir; C:\Documents and Settings\zh\桌面\KB930.vir; C:\Documents and Settings\zh\桌面\kmufrfshuoh.vir; C:\Documents and Settings\zh\桌面\ltyszxqklgd.vir; C:\Documents and Settings\zh\桌面\net.vir; C:\Documents and Settings\zh\桌面\page1.vir; C:\Documents and Settings\zh\桌面\page2.vir; C:\Documents and Settings\zh\桌面\qckgudqwwkn.vir; C:\Documents and Settings\zh\桌面\svchost.vir; C:\Documents and Settings\zh\桌面\Uninstall.vir; C:\Documents and Settings\zh\桌面\Unl.vir; C:\Documents and Settings\zh\桌面\win.vir; C:\Documents and Settings\zh\桌面\zhqbs080427.vir
C:\Documents and Settings\zh\桌面\4g6v2wziau.vir - Win32/Rootkit.Agent.NCK 木马的变种
C:\Documents and Settings\zh\桌面\9qj83szzi.vir - Win32/BHO.NDW 木马的变种
C:\Documents and Settings\zh\桌面\CS0011.vir - Win32/Mypis.AH 病毒 - 已删除
C:\Documents and Settings\zh\桌面\h6kheogq9w.vir - Win32/Rootkit.Agent.NCK 木马的变种
C:\Documents and Settings\zh\桌面\kmufrfshuoh.vir - Win32/Delf.NKI 木马 - 已删除
C:\Documents and Settings\zh\桌面\ltyszxqklgd.vir - Win32/Delf.NKI 木马 - 已删除
C:\Documents and Settings\zh\桌面\net.vir - Win32/Mypis 病毒的变种
C:\Documents and Settings\zh\桌面\page1.vir - Win32/Small.NBT 木马 - 已删除
C:\Documents and Settings\zh\桌面\page2.vir - Win32/Small.NBT 木马 - 已删除
C:\Documents and Settings\zh\桌面\qckgudqwwkn.vir - Win32/Delf.NKI 木马 - 已删除
C:\Documents and Settings\zh\桌面\svchost.vir - Win32/Mypis.AH 病毒 - 已删除
C:\Documents and Settings\zh\桌面\win.vir - Win32/TrojanDownloader.Delf.NUM 木马的变种
C:\Documents and Settings\zh\桌面\zhqbs080427.vir - 可能是 Win32/Genetik 木马 的一个变种
已扫描的文件数目：21
已发现的病毒数目：13
已清除病毒的文件数目：13

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Clicker.Win32.Delf.mq

用户来源：互联网

软件版本：20.42.40

hj5abc

11

2008-5-2 16:29:33    solo    2192    Sign of "Win32:Joiner-H [Trj]" has been found in "F:\VirusPackage\page2.vir" file.  
2008-5-2 16:29:33    solo    2192    Sign of "Win32:Joiner-H [Trj]" has been found in "F:\VirusPackage\page1.vir" file.  
2008-5-2 16:29:32    solo    2192    Sign of "Win32:Hmir-F [Trj]" has been found in "F:\VirusPackage\h6kheogq9w.vir" file.  
2008-5-2 16:29:21    solo    2192    Sign of "Win32:Hmir-F [Trj]" has been found in "F:\VirusPackage\4g6v2wziau.vir" file.  
2008-5-2 16:29:33    solo    2192    Sign of "Win32:Delf-JDP [Trj]" has been found in "F:\VirusPackage\qckgudqwwkn.vir\[ASPack]" file.  
2008-5-2 16:29:32    solo    2192    Sign of "Win32:Delf-JDP [Trj]" has been found in "F:\VirusPackage\ltyszxqklgd.vir\[ASPack]" file.  
2008-5-2 16:29:32    solo    2192    Sign of "Win32:Delf-JDP [Trj]" has been found in "F:\VirusPackage\kmufrfshuoh.vir\[ASPack]" file.  
2008-5-2 16:29:34    solo    2192    Sign of "Win32:Agent-TBP [Trj]" has been found in "F:\VirusPackage\win.vir\[UPX]\[Embedded#20a5c]" file.  
2008-5-2 16:29:34    solo    2192    Sign of "Win32:Agent-SIM [Trj]" has been found in "F:\VirusPackage\zhqbs080427.vir\[Upack]\[Embedded#DEDLL]" file.  
2008-5-2 16:29:27    solo    2192    Sign of "Win32:Agent-JZN [Trj]" has been found in "F:\VirusPackage\9qj83szzi.vir" file.  
2008-5-2 16:29:32    solo    2192    Sign of "Win32:Agent-GRW [Trj]" has been found in "F:\VirusPackage\e53a.vir" file.  

dericyeoh

2008-05-02 17:37:20        Detected: Trojan-Spy.Win32.Pophot.aso        C:\Users\Deric Yeoh\Desktop\VirusPackage\zhqbs080427.vir/PE_Patch/UPack               
2008-05-02 17:37:19        Detected: Trojan.Win32.Agent.laz        C:\Users\Deric Yeoh\Desktop\VirusPackage\win.vir/PE_Patch.UPX/UPX               
2008-05-02 17:37:19        Detected: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\svchost.vir/PE_Patch/UPack               
2008-05-02 17:37:19        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\qckgudqwwkn.vir/ASPack               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:14        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir               
2008-05-02 17:37:13        Detected: Trojan-Downloader.Win32.Delf.hao        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir/#/PE_Patch.UPX/UPX               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Heur.Trojan.Generic        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir               
2008-05-02 17:37:08        Detected: Backdoor.Win32.Agent.hbh        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#               
2008-05-02 17:37:07        Detected: Trojan-Downloader.Win32.Delf.gzp        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#/PE_Patch.UPX/UPX               
2008-05-02 17:37:07        Detected: Backdoor.Win32.Agent.hbh        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#               
2008-05-02 17:37:07        Detected: Trojan-Downloader.Win32.Delf.hbx        C:\Users\Deric Yeoh\Desktop\VirusPackage\net.vir/PE_Patch.UPX/UPX               
2008-05-02 17:37:07        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\ltyszxqklgd.vir/ASPack               
2008-05-02 17:37:07        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\kmufrfshuoh.vir/ASPack               
2008-05-02 17:37:07        Detected: Trojan.Win32.Agent.kyy        C:\Users\Deric Yeoh\Desktop\VirusPackage\e53a.vir               
2008-05-02 17:37:04        Detected: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\CS0011.vir/PE_Patch/UPack               
2008-05-02 17:37:02        Untreated: Trojan-Spy.Win32.Pophot.aso        C:\Users\Deric Yeoh\Desktop\VirusPackage\zhqbs080427.vir/PE_Patch/UPack        Postponed       
2008-05-02 17:37:02        Detected: Trojan-Spy.Win32.Pophot.aso        C:\Users\Deric Yeoh\Desktop\VirusPackage\zhqbs080427.vir/PE_Patch/UPack               
2008-05-02 17:37:02        Untreated: Trojan.Win32.Agent.laz        C:\Users\Deric Yeoh\Desktop\VirusPackage\win.vir/PE_Patch.UPX/UPX        Postponed       
2008-05-02 17:37:02        Detected: Trojan.Win32.Agent.laz        C:\Users\Deric Yeoh\Desktop\VirusPackage\win.vir/PE_Patch.UPX/UPX               
2008-05-02 17:37:00        Untreated: Trojan-Downloader.Win32.Delf.hao        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir/#/PE_Patch.UPX/UPX        Postponed       
2008-05-02 17:37:00        Detected: Trojan-Downloader.Win32.Delf.hao        C:\Users\Deric Yeoh\Desktop\VirusPackage\page2.vir/#/PE_Patch.UPX/UPX               
2008-05-02 17:37:00        Detected: Trojan-Downloader.Win32.Delf.gzp        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#/PE_Patch.UPX/UPX               
2008-05-02 17:37:00        Untreated: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\svchost.vir/PE_Patch/UPack        Postponed       
2008-05-02 17:37:00        Detected: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\svchost.vir/PE_Patch/UPack               
2008-05-02 17:37:00        Untreated: Backdoor.Win32.Agent.hbh        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#        Postponed       
2008-05-02 17:37:00        Detected: Backdoor.Win32.Agent.hbh        C:\Users\Deric Yeoh\Desktop\VirusPackage\page1.vir/#               
2008-05-02 17:37:00        Untreated: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\qckgudqwwkn.vir/ASPack        Postponed       
2008-05-02 17:37:00        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\qckgudqwwkn.vir/ASPack               
2008-05-02 17:37:00        Untreated: Trojan-Downloader.Win32.Delf.hbx        C:\Users\Deric Yeoh\Desktop\VirusPackage\net.vir/PE_Patch.UPX/UPX        Postponed       
2008-05-02 17:37:00        Detected: Trojan-Downloader.Win32.Delf.hbx        C:\Users\Deric Yeoh\Desktop\VirusPackage\net.vir/PE_Patch.UPX/UPX               
2008-05-02 17:37:00        Untreated: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\kmufrfshuoh.vir/ASPack        Postponed       
2008-05-02 17:37:00        Untreated: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\ltyszxqklgd.vir/ASPack        Postponed       
2008-05-02 17:37:00        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\ltyszxqklgd.vir/ASPack               
2008-05-02 17:37:00        Detected: Trojan.Win32.Delf.bub        C:\Users\Deric Yeoh\Desktop\VirusPackage\kmufrfshuoh.vir/ASPack               
2008-05-02 17:36:59        Untreated: Trojan.Win32.Agent.kyy        C:\Users\Deric Yeoh\Desktop\VirusPackage\e53a.vir        Postponed       
2008-05-02 17:36:59        Detected: Trojan.Win32.Agent.kyy        C:\Users\Deric Yeoh\Desktop\VirusPackage\e53a.vir               
2008-05-02 17:36:58        Untreated: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\CS0011.vir/PE_Patch/UPack        Postponed       
2008-05-02 17:36:58        Detected: Worm.Win32.AutoRun.doj        C:\Users\Deric Yeoh\Desktop\VirusPackage\CS0011.vir/PE_Patch/UPack               
2008-05-02 17:36:56        Task started

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.Delf.mq

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.40

wangjay1980

TO KL

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:CS0011.vir<UPack>:CS0011.vir <- W32.Dr.Agent.Bsv : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:e53a.vir <- Downloader.Agent.Cry : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:kmufrfshuoh.vir <- Trojan.Delf.Bub : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:ltyszxqklgd.vir <- Trojan.Delf.Bub : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:net.vir<UPX>:net.vir <- W32.Dr.Agent.Bsv : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:qckgudqwwkn.vir <- Trojan.Delf.Bub : No action
C:\Documents and Settings\All Users\Documents\Test\VirusPackage.part1.rar<RAR>:svchost.vir<UPack>:svchost.vir <- W32.Dr.Agent.Bsv : No action



Scanned objects : 26

Infected objects : 7

红心王子

时间        处理结果        木马名称        木马进程名        木马文件创建者
2008-05-02 21:36:08        处理成功        Trojan.Win32.Agent.mob        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIR\WIN.VIR        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-02 21:36:08        处理成功        Worm.Win32.Small.wj        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIR\PAGE2.VIR        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-02 21:36:08        处理成功        Trojan-Downloader.Win32.Delf.kdk        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIR\PAGE1.VIR        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-02 21:36:07        处理成功        Trojan-Downloader.Win32.Delf.kfk        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIR\NET.VIR        C:\PROGRAM FILES\WINRAR\WINRAR.EXE