Go on 继续吧

红心王子

来个大的，这个过了费尔，卡巴报了

The EQs

Scan performed at: 2007-5-11 16:19:38
Scanning Log
NOD32 version 2257 (20070511) NT
Command line: C:\Documents and Settings\EQ2\桌面\000.zip
Operating memory - is OK

Date: 11.5.2007  Time: 16:19:42
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\000.zip
C:\Documents and Settings\EQ2\桌面\000.zip ?ZIP ?1[1].gif - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\000.zip ?ZIP ?mm[1].exe - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\EQ2\桌面\000.zip ?ZIP ?system32.jmp - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\EQ2\桌面\000.zip ?ZIP ?System64.sys - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\EQ2\桌面\000.zip ?ZIP ?~tmp.tmp - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 6
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 16:19:42 Total scanning time: 0 sec (00:00:00)

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\000.zip'
C:\Documents and Settings\morgan\My Documents\
  000.zip
    [0] Archive type: ZIP
    --> 1[1].gif
        [DETECTION] Contains signature of the exploits EXP/Ani.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> mm[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> system32.jmp
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> System64.sys
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ~tmp.tmp
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!


End of the scan: 2007年5月11日  01:23
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      5 viruses and/or unwanted programs were found
      4 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      1 Archives were scanned
      5 Warnings
      0 Notes
      0 Hidden objects were found

The EQs

BS LZ一下。。。人家发过的都发。。。值得BS。。。

soul20010

BitDefender Antivirus Plus v10
000.zip=>System64.sys        Infected: Generic.PWStealer.002978EE
000.zip=>~tmp.tmp        Infected: Generic.PWStealer.2C55F484
000.zip=>mm[1].exe        Infected: Generic.PWStealer.2C55F484
000.zip=>system32.jmp        Infected: Generic.PWStealer.2C55F484
000.zip=>1[1].gif        Infected: Exploit.Win32.MS05-002.Gen

wangjay1980

还是那几个

moonsilver

C:\Documents and Settings\moonsilver\桌面\000.zip
>>1[1].gif

Hack.SuspiciousAni

rising

剑指七星

已删除: 恶意程序 Exploit.Win32.IMG-ANI.gen (修改)        文件: F:\000.zip\1[1].gif
已删除: 木马程序 Trojan-PSW.Win32.QQPass.wm        文件: F:\000.zip\mm[1].exe/UPX
已删除: 木马程序 Trojan-PSW.Win32.QQPass.wm        文件: F:\000.zip\system32.jmp/UPX
已删除: 木马程序 Trojan-PSW.Win32.QQPass.wm        文件: F:\000.zip\System64.sys
已删除: 木马程序 Trojan-PSW.Win32.QQPass.wm        文件: F:\000.zip\~tmp.tmp/UPX

Kakura

F:\000.zip=>1[1].gif        Infected: Exploit.Win32.MS05-002.Gen
F:\000.zip=>1[1].gif        Disinfection failed
F:\000.zip=>1[1].gif        Deleted
F:\000.zip        Archive repacking successfully completed (actions successfully applied)
F:\000.zip=>mm[1].exe        Infected: Generic.PWStealer.2C55F484
F:\000.zip=>mm[1].exe        Disinfection failed
F:\000.zip=>mm[1].exe        Deleted
F:\000.zip        Archive repacking successfully completed (actions successfully applied)
F:\000.zip=>system32.jmp        Infected: Generic.PWStealer.2C55F484
F:\000.zip=>system32.jmp        Disinfection failed
F:\000.zip=>system32.jmp        Deleted
F:\000.zip        Archive repacking successfully completed (actions successfully applied)
F:\000.zip=>System64.sys        Infected: Generic.PWStealer.002978EE
F:\000.zip=>System64.sys        Disinfection failed
F:\000.zip=>System64.sys        Deleted
F:\000.zip        Archive repacking successfully completed (actions successfully applied)
F:\000.zip=>~tmp.tmp        Infected: Generic.PWStealer.2C55F484
F:\000.zip=>~tmp.tmp        Disinfection failed
F:\000.zip=>~tmp.tmp        Deleted

harry_chang2003

PCC只殺一隻