样本

lanvin

dyw1021

费尔砍了5个




[ 本帖最后由 dyw1021 于 2007-4-29 01:40 编辑 ]

The EQs

过了nod32

lanvin

可爱的clamwin

----------- SCAN SUMMARY -----------
Known viruses: 112622
Engine version: 0.90.1
Scanned directories: 0
Scanned files: 1
Skipped non-executable files: 0
Infected files: 1

Data scanned: 0.46 MB
Time: 21.000 sec (0 m 21 s)
--------------------------------------
Completed
--------------------------------------

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\hehe.rar'
C:\Documents and Settings\morgan\My Documents\
  hehe.rar
    [0] Archive type: RAR
    --> hehe\i_bpk_lite.exe
        [DETECTION] Contains signature of the dropper DR/Perflogger.A.3
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: RAR SFX (self extracting)
        --> Setup.exe
            [DETECTION] Is the Trojan horse TR/PSW.Perf.1.0.0.1
            [WARNING]   Infected files in archives cannot be repaired!
        --> bpk.exe
            [DETECTION] Contains signature of the SPR/Perflogger.AH program
            [WARNING]   Infected files in archives cannot be repaired!
        --> lview.exe
            [DETECTION] Contains signature of the SPR/Perflogger.AH program
            [WARNING]   Infected files in archives cannot be repaired!
        --> Uninstall.exe
            [DETECTION] Is the Trojan horse TR/PSW.Perf.1.0.0
            [WARNING]   Infected files in archives cannot be repaired!
        --> bsdhooks.dll
            [DETECTION] Contains signature of the SPR/Perflogger.A program
            [WARNING]   Infected files in archives cannot be repaired!
        --> bpk.chm
          [2] Archive type: CHM
          --> /#SYSTEM
          --> /main.htm
          --> /ps.hhc
          --> /diary.htm
          --> /menu_commands.htm
          --> /tips.htm
          --> /order.htm
          --> /feedback.htm
          --> /update.htm
          --> /options_title.htm
          --> /options_common.htm
          --> /options_diary.htm
          --> /options_ex_programs.htm
          --> /header.jpg
          --> /table.jpg
          --> /mainmenu.png
          --> /general.png
          --> /diary.png
          --> /except.png
          --> /styles.css
          --> /#WINDOWS
          --> /$WWKeywordLinks/Property
          --> /$WWAssociativeLinks/Property
          --> /$OBJINST
          --> /$FIftiMain
          --> /#IDXHDR
          --> /#TOPICS
          --> /#URLTBL
          --> /#URLSTR
          --> /#STRINGS
        --> downloads.url
            [DETECTION] Is the Trojan horse TR/Keylog.154
            [WARNING]   Infected files in archives cannot be repaired!
        --> order.url
            [DETECTION] Is the Trojan horse TR/Keylog.153
            [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月28日  10:53
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     40 Files were scanned
      8 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     32 Files not concerned
      3 Archives were scanned
      9 Warnings
      0 Notes
      0 Hidden objects were found

dericyeoh

已删除: 风险软件 not-a-virus:Monitor.Win32.Perflogger.a        文件: C:\Documents and Settings\Deric Yeoh\桌面\hehe.rar/hehe\i_bpk_lite.exe/bpk.exe
已删除: 风险软件 not-a-virus:Monitor.Win32.Perflogger.a        文件: C:\Documents and Settings\Deric Yeoh\桌面\hehe.rar/hehe\i_bpk_lite.exe/bsdhooks.dll

fireworld

毒霸杀了四个

bridgewr

我这只一个安装程序

kfcnknight

2007-4-29 9:46:27        File: C:\Documents and Settings\Administrator\桌面\hehe.rar\hehe\i_bpk_lite.exe/bpk.exe        detected riskware not-a-virus:Monitor.Win32.Perflogger.a