今日的包总计52

qianwenxiang

avast 14
看到N个zlob和swizzor就知道成绩不会高到哪儿去的..

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\xcv.part1.rar<RAR>:641000.exe <- Trojan.Downloader.Zlob.Eie : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar<RAR>:c-setup.exe <- Trojan.Downloader.Delf.Idy : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar<RAR>:calc.exe <- Trojan.Dnschanger.Dlg : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar<RAR>:Codec.exe <- Trojan.Downloader.Vb.Eqd : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar<RAR>:mooncodec1345.exe<NSIS>:DcryptDll.dll <- Trojan.Agent.Ki : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar<RAR>:mooncodec4049.exe<NSIS>:dcryptdll.dll <- Trojan.Agent.Ki : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar<RAR>:mooncodec4192.exe<NSIS>:dcryptdll.dll <- Trojan.Agent.Ki : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar<RAR>:popularos.exe <- Heur.W32 : No action
C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar<RAR>:setup_526_1_.exe <- Trojan.Downloader.Fraudload.Abk : No action



Scanned objects : 72

Infected objects : 9

allinwonderi

[Found security risk]         <W32/Swizzor.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part1.rar->xcv\9kgen_up.int
[Found security risk]         <W32/Swizzor.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part1.rar->xcv\9kgen_up1.int
[Found possible virus]         <W32/Adware-Vapsup!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar->xcv\atfxqogp.dll
[Found possible virus]         <W32/Adware-Vapsup!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar->xcv\atfxsdqogp.dll
[Found possible virus]         <W32/Adware-RegBHO-based.1!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar->xcv\boqnrwdmstg.dll
[Found possible virus]         <W32/Adware-RegBHO-based.1!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar->xcv\boqnrwdmvdr.dll
[Found security risk]         <W32/Delf.C.gen!Eldorado (damaged, not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part2.rar->xcv\c-setup.exe->(Aspack)
[Found security risk]         <W32/Tibs.M.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar->xcv\MediaTubeCodec_ver1.1099.2.exe
[Found security risk]         <W32/Tibs.M.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar->xcv\MediaTubeCodec_ver1.1099.4.exe
[Found security risk]         <W32/Tibs.M.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar->xcv\MediaTubeCodec_ver1.971.45.exe
[Found Trojan]         <W32/DNSChanger.BA (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar->xcv\mooncodec4049.exe
[Found Trojan]         <W32/DNSChanger.BA (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part3.rar->xcv\mooncodec4192.exe
[Found security risk]         <W32/Zlob.S.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar->xcv\setup1.exe
[Found security risk]         <W32/Zlob.S.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar->xcv\setup2.exe
[Found security risk]         <W32/Zlob.S.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar->xcv\setup4.exe
[Found security risk]         <W32/Zlob.S.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar->xcv\setup5.exe
[Found security risk]         <W32/Swizzor.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\xcv.part4.rar->xcv\sn_pkz.int

---------------------------------------------------------------------
Scan ended:        2008-5-26, 18:26:11
Duration:        0:00:26

Scan result:

Scanned files:                 9
Infected objects:         17
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

allinwonderi

FP很喜欢zlob和swizzor

woai_jolin

Scan performed at: 2008/5/26 18:36:01
Scanning Log
NOD32 version 3131 (20080526) NT
Command line: G:\v\xcv
C:\Program Files\Eset\nod32.exe - is OK

Date: 26.5.2008  Time: 18:36:03
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\xcv\
G:\v\xcv\641000.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\641000.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\641000.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\641000.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\9kgen_up.int - is OK
G:\v\xcv\9kgen_up1.int - is OK
G:\v\xcv\apunbegy.dll - is OK
G:\v\xcv\atfxqogp.dll - is OK
G:\v\xcv\atfxsdqogp.dll - is OK
G:\v\xcv\boqnrwdmstg.dll - is OK
G:\v\xcv\boqnrwdmvdr.dll - is OK
G:\v\xcv\c-setup.exe ?ASPack v2.12 - is OK
G:\v\xcv\calc.exe - is OK
G:\v\xcv\Codec.exe - is OK
G:\v\xcv\crack.exe - is OK
G:\v\xcv\ctfmona.exe - is OK
G:\v\xcv\edwf.exe - is OK
G:\v\xcv\efcBuvSJ.dll - is OK
G:\v\xcv\etkq.exe - is OK
G:\v\xcv\file.exe - is OK
G:\v\xcv\file[1].exe - is OK
G:\v\xcv\kdxcq.exe - is OK
G:\v\xcv\keygen.exe - is OK
G:\v\xcv\ljJCvWpo.dll - is OK
G:\v\xcv\MediaTubeCodec_ver1.1099.2.exe - is OK
G:\v\xcv\MediaTubeCodec_ver1.1099.4.exe - is OK
G:\v\xcv\MediaTubeCodec_ver1.971.45.exe - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?DcryptDll.dll - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\msprint.exe ?PECompact v2.xx - is OK
G:\v\xcv\MsUpdate.exe - is OK
G:\v\xcv\pmnmlKBT.dll - is OK
G:\v\xcv\popularos.exe - is OK
G:\v\xcv\services.exe - is OK
G:\v\xcv\setup1.exe - Win32/TrojanDownloader.Zlob.BYT trojan
G:\v\xcv\setup2.exe - Win32/TrojanDownloader.Zlob.BYT trojan
G:\v\xcv\setup4.exe - Win32/TrojanDownloader.Zlob.BYT trojan
G:\v\xcv\setup5.exe - Win32/TrojanDownloader.Zlob.BYT trojan
G:\v\xcv\setup_526_1_.exe - Win32/Adware.WinSpywareProtect application
G:\v\xcv\sn_pkz.int - is OK
G:\v\xcv\sn_pkz1.int - is OK
G:\v\xcv\tmp61.exe - is OK
G:\v\xcv\tmp65.exe - is OK
G:\v\xcv\tmp69.exe - is OK
G:\v\xcv\update.exe ?AUTOIT ?script.au3 - is OK
G:\v\xcv\vltdfabsfdw.dll - is OK
G:\v\xcv\vltdfabw.dll - is OK
G:\v\xcv\vregfwlx.dll - is OK
G:\v\xcv\vreggfwlx.dll - is OK
G:\v\xcv\vtUlKEWm.dll - is OK
G:\v\xcv\winmqx32.dll - is OK
G:\v\xcv\xmpssfdtean.exe - is OK
G:\v\xcv\xmpstean.exe - is OK
G:\v\xcv\zfe0.exe - is OK
Number of scanned files: 88
Number of threats found: 5
Time of completion: 18:36:25 Total scanning time: 22 sec (00:00:22)

Starting the file scan:
Begin scan in 'E:\AV\xcv'
E:\AV\xcv\641000.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.NMO
      [NOTE]      The file was deleted!
E:\AV\xcv\9kgen_up.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.JA
      [NOTE]      The file was deleted!
E:\AV\xcv\9kgen_up1.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.IZ
      [NOTE]      The file was deleted!
E:\AV\xcv\apunbegy.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Perega.NB.1
      [NOTE]      The file was deleted!
E:\AV\xcv\atfxqogp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\atfxsdqogp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\boqnrwdmstg.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\boqnrwdmvdr.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\c-setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.IDY
      [NOTE]      The file was deleted!
E:\AV\xcv\calc.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.dlg
      [NOTE]      The file was deleted!
E:\AV\xcv\Codec.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.eqd
      [NOTE]      The file was deleted!
E:\AV\xcv\crack.exe
      [DETECTION] Is the Trojan horse TR/Drop.Vundo.K
      [NOTE]      The file was deleted!
E:\AV\xcv\ctfmona.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\edwf.exe
      [DETECTION] Is the Trojan horse TR/Vapsup.fqm
      [NOTE]      The file was deleted!
E:\AV\xcv\efcBuvSJ.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
E:\AV\xcv\etkq.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.VI
      [NOTE]      The file was deleted!
E:\AV\xcv\file.exe
      [DETECTION] Is the Trojan horse TR/Drop.Vundo.L
      [NOTE]      The file was deleted!
E:\AV\xcv\file[1].exe
      [DETECTION] Is the Trojan horse TR/Drop.Vundo.L
      [NOTE]      The file was deleted!
E:\AV\xcv\kdxcq.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.dli
      [NOTE]      The file was deleted!
E:\AV\xcv\keygen.exe
      [DETECTION] Is the Trojan horse TR/Drop.Vundo.L
      [NOTE]      The file was deleted!
E:\AV\xcv\ljJCvWpo.dll
      [DETECTION] Is the Trojan horse TR/Obfuscated.aul
      [NOTE]      The file was deleted!
E:\AV\xcv\MediaTubeCodec_ver1.1099.2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwq
      [NOTE]      The file was deleted!
E:\AV\xcv\MediaTubeCodec_ver1.1099.4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwq
      [NOTE]      The file was deleted!
E:\AV\xcv\MediaTubeCodec_ver1.971.45.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwq
      [NOTE]      The file was deleted!
E:\AV\xcv\mooncodec1345.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dlc
      [NOTE]      The file was deleted!
E:\AV\xcv\mooncodec4049.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dja.21
      [NOTE]      The file was deleted!
E:\AV\xcv\mooncodec4192.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dja.22
      [NOTE]      The file was deleted!
E:\AV\xcv\msprint.exe
      [DETECTION] Is the Trojan horse TR/Agent.qnj
      [NOTE]      The file was deleted!
E:\AV\xcv\MsUpdate.exe
      [DETECTION] Is the Trojan horse TR/Drop.Vundo.L
      [NOTE]      The file was deleted!
E:\AV\xcv\pmnmlKBT.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
E:\AV\xcv\popularos.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trh
      [NOTE]      The file was deleted!
E:\AV\xcv\setup1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwr
      [NOTE]      The file was deleted!
E:\AV\xcv\setup2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwr
      [NOTE]      The file was deleted!
E:\AV\xcv\setup4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwr
      [NOTE]      The file was deleted!
E:\AV\xcv\setup5.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.nwr
      [NOTE]      The file was deleted!
E:\AV\xcv\setup_526_1_.exe
      [DETECTION] Is the Trojan horse TR/Dldr.FraudLoad.abk
      [NOTE]      The file was deleted!
E:\AV\xcv\sn_pkz.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.JC
      [NOTE]      The file was deleted!
E:\AV\xcv\sn_pkz1.int
      [DETECTION] Is the Trojan horse TR/Dldr.Swizzor.JB
      [NOTE]      The file was deleted!
E:\AV\xcv\tmp61.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\tmp65.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.dfv
      [NOTE]      The file was deleted!
E:\AV\xcv\tmp69.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.dfv
      [NOTE]      The file was deleted!
E:\AV\xcv\update.exe
      [DETECTION] Contains detection pattern of the dropper DR/Dldr.Autoit.GL
      [NOTE]      The file was deleted!
E:\AV\xcv\vltdfabsfdw.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [NOTE]      The file was deleted!
E:\AV\xcv\vltdfabw.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [NOTE]      The file was deleted!
E:\AV\xcv\vregfwlx.dll
      [DETECTION] Is the Trojan horse TR/Vapsup.fqt
      [NOTE]      The file was deleted!
E:\AV\xcv\vreggfwlx.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Vapsup.VJ
      [NOTE]      The file was deleted!
E:\AV\xcv\vtUlKEWm.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
E:\AV\xcv\winmqx32.dll
      [DETECTION] Is the Trojan horse TR/Agent.fld.1
      [NOTE]      The file was deleted!
E:\AV\xcv\xmpssfdtean.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.Gen
      [NOTE]      The file was deleted!
E:\AV\xcv\xmpstean.exe
      [DETECTION] Is the Trojan horse TR/Vapsup.fqq
      [NOTE]      The file was deleted!
E:\AV\xcv\zfe0.exe
      [DETECTION] Is the Trojan horse TR/Drop.Zlob.aeo.1
      [NOTE]      The file was deleted!

End of the scan: 2008年5月27日  05:34
Used time: 00:06 min
The scan has been done completely.
      1 Scanning directories
     52 Files were scanned
     51 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     51 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
     51 Notes

[ 本帖最后由 Exia 于 2008-5-27 05:33 编辑 ]

Palkia

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Zlob.gbo
病毒： Trojan.Win32.Undef.gub   
病毒： Trojan.DL.Win32.Undef.nq
病毒： Trojan.Win32.Zlob.ajl   
病毒： Trojan.DL.Win32.QQHelper.bgc

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.46.02

nhmwuhao

怀疑没有52个
要是有的话，红伞就太差劲了

电影结束了

M。。。
  zfe0.exe
也天天更新？？？
饿。。。
MS昨天卡巴是死的。。。

hao1899

没解压瑞星扫出四个，解压后扫出42个