9个病毒,看你杀几个

troika

呵呵

mofunzone

antivir全灭

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\flas[1]'
C:\Documents and Settings\morgan\My Documents\flas[1]\
  117605613810.exe
      [DETECTION] Is the Trojan horse TR/Dldr.NewWeb.A
      [INFO]      The file was deleted!
  9524F485.EXE
      [DETECTION] Is the Trojan horse TR/Popwin.AD
      [INFO]      The file was deleted!
  bind_50057[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.NewWeb.A
      [INFO]      The file was deleted!
  flas[1].exe
      [DETECTION] Is the Trojan horse TR/Popwin.AD
      [INFO]      The file was deleted!
  jh[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '467438d4.qua'!
  my[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '467438e5.qua'!
  temp.exe
      [DETECTION] Is the Trojan horse TR/Muldrop.BX.32
      [INFO]      The file was deleted!
  wow[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '469038dc.qua'!
  wsttrs.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '468d38e0.qua'!


End of the scan: 2007年4月8日  11:46
Used time: 00:09 min

The scan has been done completely.

      1 Scanning directories
      9 Files were scanned
      9 viruses and/or unwanted programs were found
      5 files were deleted
      0 files were repaired
      4 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

The EQs

Scan performed at: 2007-4-9 2:46:34
Scanning Log
NOD32 version 2173 (20070407) NT
Command line: C:\Documents and Settings\EQ2\桌面\flas[1]
Operating memory - is OK

Date: 9.4.2007  Time: 02:46:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\flas[1]\
C:\Documents and Settings\EQ2\桌面\flas[1]\9524F485.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\flas[1]\flas[1].exe - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\flas[1]\jh[1].exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\flas[1]\temp.exe - a variant of Win32/TrojanDownloader.QQHelper trojan
C:\Documents and Settings\EQ2\桌面\flas[1]\wow[1].exe - a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 9
Number of threats found: 5
Number of files cleaned: 5
Time of completion: 02:46:39 Total scanning time: 1 sec (00:00:01)

yinxuchina

北京江民新科技术有限公司

        扫描引擎 10.00.600
        病毒库日期 2007-04-08
        更新日期 2007-04-09

扫描目标 C:\Documents and Settings\yinxu\My Documents\新建文件夹\

开始时间 2007-04-09 03:07:40

在 C:\Documents and Settings\yinxu\My Documents\新建文件夹\9524F485.EXE 中发现 Trojan/PSW.GamePass.emt 病毒, 已删除
在 C:\Documents and Settings\yinxu\My Documents\新建文件夹\flas[1].exe 中发现 Trojan/PSW.GamePass.emt 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :9                                   病毒体 :2         
                   删除 :2                                     解毒 :0         
    扫描速度(千字节/秒) :808                               扫描时间 :00:00:01
    扫描文件速度(个/秒) :9
上报去

KAV-Longhorn

解压还没完（第一个压缩包）就被红伞和微点干了......没法测试．．

solcroft

avast!静态扫描干掉8个，最后一个运行后报

*
* avast! Report
* This file is generated automatically
*
* Task 'Simple user interface' used
* Started on Tuesday, April 10, 2007 6:14:05 PM
* VPS: 000731-1, 08/04/2007
*

C:\Documents and Settings\Virtual Machine\Desktop\Temp\117605613810.exe [L] Win32:Small-EFC [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\9524F485.EXE\[NsPack] [L] Win32:Small-ERH [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\bind_50057[1].exe [L] Win32:Small-EFC [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\flas[1].exe\[NsPack] [L] Win32:Small-ERH [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\jh[1].exe [L] Win32:OnLineGames-JC [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\my[1].exe [L] Win32:OnLineGames-JC [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\wow[1].exe [L] Win32:OnLineGames-DC [Trj] (0)
File was successfully deleted...
C:\Documents and Settings\Virtual Machine\Desktop\Temp\wsttrs.exe [L] Win32:OnLineGames-JC [Trj] (0)
File was successfully deleted...
Infected files: 8
Total files: 11
Total folders: 1
Total size: 888.1 KB

*
* Task stopped: Tuesday, April 10, 2007 6:14:13 PM
* Run-time was 8 second(s)
*

龙井茶

avast也有主动防御或者启发式?

solcroft

原帖由 龙井茶 于 2007-4-10 19:18 发表
avast也有主动防御或者启发式?

报了生成物

caocao

KIS  9个全报

已检测到: 木马程序 Trojan-Downloader.Win32.QQHelper.rb        文件: D:\Downloads\flas[1].part1.rar\117605613810.exe
已检测到: 木马程序 Backdoor.Win32.Agent.ahj        文件: D:\Downloads\flas[1].part1.rar\9524F485.EXE/NSPack
已检测到: 木马程序 Trojan-Downloader.Win32.QQHelper.rb        文件: D:\Downloads\flas[1].part1.rar\bind_50057[1].exe
已检测到: 木马程序 Backdoor.Win32.Agent.ahj        文件: D:\Downloads\flas[1].part1.rar\flas[1].exe/NSPack
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\flas[1].part1.rar\jh[1].exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\flas[1].part1.rar\my[1].exe
已检测到: 木马程序 Trojan-Clicker.Win32.Agent.io        文件: D:\Downloads\flas[1].part1.rar\temp.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\flas[1].part1.rar\wow[1].exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\flas[1].part1.rar\wsttrs.exe

永恒の回忆

瑞星杀出6只病毒出来