番茄每日精选 20080622

ssy275

9

sdie518

kis2009
10个

hj5abc

all..

bank-w3000

dr.web7个。

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\20080622.rar'
C:\Documents and Settings\haha\桌面\20080622.rar
  [0] Archive type: RAR
  --> 20080622\XX_418.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> 20080622\XX_426.exe
      [DETECTION] Contains detection pattern of the construction kit KIT/ShlBack.A
  --> 20080622\XX_430.exe
      [DETECTION] Is the Trojan horse TR/Kirek.HM
  --> 20080622\XX_433.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abcl.1
  --> 20080622\XX_461.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> 20080622\XX_470.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aavi
  --> 20080622\XX_476.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Small.dlg.8 Backdoor server programs
  --> 20080622\XX_491.exe
      [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
  --> 20080622\XX_493.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.OQU.1
    --> 20080622\XX_495.exe
      [1] Archive type: HIDDEN
      --> MEM\AV00000009.AV$
          [DETECTION] Is the Trojan horse TR/Agent.ABPC
      [NOTE]      A backup was created as '488e2db0.qua'  ( QUARANTINE )


End of the scan: 2008年6月22日  18:46
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     11 Files were scanned
     10 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.IRAT.h   
病毒： Trojan.Win32.Delf.alw   
病毒： Trojan.PSW.Win32.GameOL.mnt
病毒： Trojan.DL.Win32.VB.eqg   
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.DL.Win32.Agent.dit
病毒： Trojan.Win32.Undef.dof   
病毒： Trojan.PSW.Win32.QQPass.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.62

欠妳緈諨

D:\病毒测试\临时解压\20080622.rar:\20080622\XX_418.exe - 特征码 'Backdoor.Win32.Hupigon.ABU' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_426.exe - 特征码 'BehavesLikeWin32.ExplorerHijack' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_430.exe - 特征码 'Virus.Trojan.Win32.Kirek.bb' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_433.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.abcl' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_461.exe - 特征码 'Backdoor.Win32.Ciadoor.13' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_470.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.aavi' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_476.exe - 特征码 'Virus.Win32.Agent.UWD' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_491.exe - 特征码 'Backdoor.Win32.PcClient.yw' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_493.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
D:\病毒测试\临时解压\20080622.rar:\20080622\XX_495.exe - 特征码 'Trojan.Agent.ABPC' 被发现
D:\病毒测试\临时解压\20080622.rar

        11 文件被扫描
          (1 压缩档 10 文件)
        10 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:01.232

sam.to

已刪除: 特洛伊木馬程式 Backdoor.Win32.Hupigon.abu        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_418.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Inject.aow        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_426.exe
已刪除: 特洛伊木馬程式 Trojan.Win32.Kirek.hm        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_430.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abcl        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_433.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Banload.lfx        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_461.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aavi        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_470.exe//FSG//PE_Patch
已刪除: 特洛伊木馬程式 Backdoor.Win32.Small.dlg        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_476.exe//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.bmg        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_491.exe
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.fdy        檔案: C:\Documents and Settings\kato9096\桌面\20080622.rar/20080622\XX_493.exe//UPack//PE_Patch.MaskPE


XX_495.exe不报,这个不應报??

sam.to

Antivirus          Version          Last Update          Result
AhnLab-V3        2008.6.22.0        2008.06.22        -
AntiVir        7.8.0.59        2008.06.21        TR/Agent.ABPC
Authentium        5.1.0.4        2008.06.21        -
Avast        4.8.1195.0        2008.06.21        -
AVG        7.5.0.516        2008.06.22        -
BitDefender        7.2        2008.06.22        -
CAT-QuickHeal        9.50        2008.06.20        -
ClamAV        0.93.1        2008.06.22        -
DrWeb        4.44.0.09170        2008.06.22        -
eSafe        7.0.15.0        2008.06.19        -
eTrust-Vet        31.6.5892        2008.06.21        -
Ewido        4.0        2008.06.22        -
F-Prot        4.4.4.56        2008.06.21        -
F-Secure        7.60.13501.0        2008.06.20        -
Fortinet        3.14.0.0        2008.06.22        -
GData        2.0.7306.1023        2008.06.22        -
Ikarus        T3.1.1.26.0        2008.06.22        Trojan.Agent.ABPC
Kaspersky        7.0.0.125        2008.06.22        -
McAfee        5322        2008.06.20        -
Microsoft        1.3604        2008.06.22        -
NOD32v2        3207        2008.06.22        -
Norman        5.80.02        2008.06.20        -
Panda        9.0.0.4        2008.06.22        -
Prevx1        V2        2008.06.22        -
Rising        20.49.62.00        2008.06.22        -
Sophos        4.30.0        2008.06.22        -
Sunbelt        3.0.1153.1        2008.06.15        -
Symantec        10        2008.06.22        -
TheHacker        6.2.92.358        2008.06.21        -
TrendMicro        8.700.0.1004        2008.06.20        -
VBA32        3.12.6.7        2008.06.21        -
VirusBuster        4.3.26:9        2008.06.12        -
Webwasher-Gateway        6.6.2        2008.06.22        -

allinwonderi

[Found downloader]         <W32/Downldr2.BUBG (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_418.exe->(embedded)
[Found Trojan]         <W32/Trojan2.AMUU (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_426.exe
[Found possible virus]         <W32/VB-Backdoor-TSVR-based!Maximus (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_430.exe
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_433.exe->exefile->(UPack)
[Found downloader]         <W32/Banload.AKB (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_461.exe->(UPX)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_470.exe->(FSG)
[Found backdoor]         <W32/Backdoor2.APIA (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_476.exe->(UPX)
[Found backdoor]         <W32/Backdoor2.BLVO (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_491.exe
[Found security risk]         <W32/QQpass.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\20080622.rar->20080622\XX_493.exe->(UPack)->(PE_Patch.MaskPE)

---------------------------------------------------------------------
Scan ended:        2008-6-22, 21:05:22
Duration:        0:00:10

Scan result:

Scanned files:                 6
Infected objects:         9
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------