5.10样本

sdbsky

............................

mofunzone

antivir全

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus0510.rar'
C:\Documents and Settings\morgan\My Documents\
  virus0510.rar
    [0] Archive type: RAR
    --> MOYU.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> MS.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> MY.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> QQ.exe
        [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> WD.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 00.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> RemoteDbg.dll
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8888-521ww.exe
        [DETECTION] Is the Trojan horse TR/Drop.Agent.amx
        [WARNING]   Infected files in archives cannot be repaired!
    --> CHD.exe
        [DETECTION] Is the Trojan horse TR/PSW.Lmir.amj.23
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月9日  23:10
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      2 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
     10 Warnings
      0 Notes
      0 Hidden objects were found

tonger2003

已删除: 木马程序 Trojan-PSW.Win32.WOW.et 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/MOYU.exe
已删除: 木马程序 Trojan.Win32.Agent.abf 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/MS.exe
已检测到: 木马程序 Trojan.Win32.Agent.abf 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/MY.exe\KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Backdoor.Win32.Delf.awy 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/QQ.exe
已删除: 木马程序 Trojan-Downloader.Win32.Delf.bjy 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/00.exe//UPack
已删除: 木马程序 Trojan.Win32.Agent.abf 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/RemoteDbg.dll//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan-Dropper.Win32.Agent.awb 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/8888-521ww.exe
已删除: 木马程序 Trojan-PSW.Win32.Lmir.amj 文件: C:\Documents and Settings\Administrator\桌面\virus0510.rar/CHD.exe//PE_Patch//UPack


[ 本帖最后由 tonger2003 于 2007-5-10 14:12 编辑 ]

The EQs

Scan performed at: 2007-5-10 14:12:33
Scanning Log
NOD32 version 2255 (20070509) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus0510
Operating memory - is OK

Date: 10.5.2007  Time: 14:12:37
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus0510\
C:\Documents and Settings\EQ2\桌面\virus0510\00.exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
C:\Documents and Settings\EQ2\桌面\virus0510\MOYU.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus0510\QQ.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus0510\WD.exe - a variant of Win32/Agent.AAC trojan
Number of scanned files: 9
Number of threats found: 4
Number of files cleaned: 4
Time of completion: 14:12:40 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.

欠妳緈諨

6个

moonsilver

1个，赶快上报

kp2006

已检测: 木马程序 Trojan-PSW.Win32.WOW.et        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/MOYU.exe
已检测: 木马程序 Trojan.Win32.Agent.abf        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/MS.exe
已检测: 木马程序 Backdoor.Win32.Delf.awy        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/QQ.exe
已检测: 木马程序 Trojan-Downloader.Win32.Delf.bjy        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/00.exe//UPack
已检测: 木马程序 Trojan.Win32.Agent.abf        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/RemoteDbg.dll//PE_Patch.PECompact//PecBundle//PECompact
已检测: 木马程序 Trojan-Dropper.Win32.Agent.awb        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/8888-521ww.exe
已检测: 木马程序 Trojan-PSW.Win32.Lmir.amj        文件: D:\Documents and Settings\Administrator\桌面\virus0510.rar/CHD.exe//PE_Patch//UPack

铁诺在线报5个

wangjay1980

detected: Trojan program Trojan-PSW.Win32.WOW.et        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/MOYU.exe
detected: Trojan program Trojan.Win32.Agent.abf        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/MS.exe
detected: Trojan program Trojan.Win32.Agent.abf        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/MY.exe\KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Backdoor.Win32.Delf.awy        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/QQ.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.bjy        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/00.exe//UPack
detected: Trojan program Trojan.Win32.Agent.abf        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/RemoteDbg.dll//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Dropper.Win32.Agent.awb        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/8888-521ww.exe
detected: Trojan program Trojan-PSW.Win32.Lmir.amj        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0510.rar/CHD.exe//PE_Patch//UPack

红心王子

费尔报了6个，两个启发式

bridgewr

微点杀7，其他上报