番茄每日精选 20080616

电影结束了

对象: 20080616\XX_132.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Packer.XComp.A (BD 引擎)
对象: 20080616\XX_133.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Trojan.Downloader.Dyfuca.EI (BD 引擎)
对象: 20080616\XX_139.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Trojan.Downloader.Agent.ZCR (BD 引擎)
对象: 20080616\XX_147.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Trojan.Dropper.RQW (BD 引擎)
对象: 20080616\XX_157.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Packer.RLPack.D (BD 引擎)
对象: 20080616\XX_158.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: BehavesLike:Trojan.Downloader (BD 引擎)
对象: 20080616\XX_163.exe
        在压缩档案里: F:\virus\20080616.rar
        Status: 已发现病毒
        病毒: Dropped:Generic.PWStealer.3E144395 (BD 引擎)

28654621

D:\download\20080616.rar>>20080616\XX_132.exe        Packer.Xcomp.a.urrg        可疑程序        还未处理
D:\download\20080616.rar>>20080616\XX_133.exe        TrojanDownloader.Dyfuca.Yadi        木马        还未处理
D:\download\20080616.rar>>20080616\XX_134.exe        TrojanPSW.QQPass.bnr.ofxz.arc        木马        还未处理
D:\download\20080616.rar>>20080616\XX_139.exe        Backdoor.PoisonIvy.ay.xdeg        后门        还未处理
D:\download\20080616.rar>>20080616\XX_147.exe        Backdoor.Agent.eso.gwel        后门        还未处理
D:\download\20080616.rar>>20080616\XX_153.exe        Packer.VmpPacker.a.fpcs        可疑程序        还未处理
D:\download\20080616.rar>>20080616\XX_157.exe        TrojanDownloader.Delf.gmg.pmrt        木马        还未处理
D:\download\20080616.rar>>20080616\XX_158.exe        TrojanDownloader.Agent.gdm.pnoe        木马        还未处理
D:\download\20080616.rar>>20080616\XX_163.exe        TrojanPSW.QQPass.zaj.vsrm        木马        还未处理

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_133.exe<Petite>:XX_133.exe <- Downloader.Dyfuca.Ei : No action
C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_139.exe <- Trojan.Poison.K : No action
C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_147.exe <- Trojan.Agent.Eso : No action
C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_163.exe <- Trojan.Pakes.Dz : No action
C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_163.exe<UPack>:XX_163.exe <- Trojan.Spy.Delf.Aus : No action
C:\Documents and Settings\All Users\Documents\Test\20080616.rar<RAR>:XX_163.exe<UPack>:XX_163.exe<DLLRES>:DLLFILE0.exe <- Trojan.Psw.Qqpass.Apz : No action



Scanned objects : 13

Infected objects : 6

allinwonderi

[Found downloader]         <W32/Downldr2.BUBG (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_132.exe->(embedded)
[Found downloader]         <W32/Dyfuca.FW@dl (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_133.exe
[Found possible virus]         <W32/Threat-SysVenFakN-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_134.exe->(NSPack)->(PE_Patch)
[Found security risk]         <W32/Agent.G.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_139.exe
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_147.exe->(UPX)
[Found possible security risk]         <W32/Heuristic-210!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_153.exe->(Klone.AF)
[Found security risk]         <W32/AutoRun.B.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_158.exe
[Found security risk]         <W32/QQpass.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080616.rar->20080616\XX_163.exe->(UPack)->(PE_Patch.MaskPE)

---------------------------------------------------------------------
Scan ended:        2008-6-16, 20:25:10
Duration:        0:00:11

Scan result:

Scanned files:                 6
Infected objects:         8
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------