一堆共23个，红伞杀21个，你的哪？？？

绅博周幸

Starting the file scan:
Begin scan in 'C:\Documents and Settings\Chou\My Documents\未知2\未知2\1-23.rar'
C:\Documents and Settings\Chou\My Documents\未知2\未知2\1-23.rar
  [0] Archive type: RAR
  --> 6.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.ejw.18
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.ejw.18
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHelper.WD.1
  --> 10.dll
      [DETECTION] Is the Trojan horse TR/Agent.nma.1
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Agent.20480.85
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Drop.Online.rt.2
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 15.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.KW.198
  --> 17.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 20.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.24064.2
  --> 23.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> 18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 21.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SK
  --> 22.dll
      [DETECTION] Is the Trojan horse TR/Drop.NSAnti.N
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 3.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> 5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

End of the scan: 2007年5月12日  01:21
Used time: 00:11 min
The scan has been done completely.
      0 Scanning directories
     24 Files were scanned
     21 viruses and/or unwanted programs were found
      4 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
      0 Hidden objects were found

红伞不报已知的全部上报了

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Small.ejw        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/7.exe
detected: Trojan program Trojan-Downloader.Win32.Small.ejw        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/8.exe
detected: Trojan program Trojan-Downloader.Win32.QQHelper.wd        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/9.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/10.dll//UPack
detected: Trojan program Trojan-Downloader.Win32.QQHelper.rb        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/11.exe
detected: Trojan program Backdoor.Win32.Agent.air        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/12.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sk        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/13.exe
detected: Trojan program Backdoor.Win32.Agent.sp        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/14.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kw        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/15.dll
detected: Trojan program Trojan-PSW.Win32.Agent.jp        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/17.dll
detected: Trojan program Trojan-PSW.Win32.Small.cn        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/20.dll
detected: Trojan program Backdoor.Win32.Hupigon.ete        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/23.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sk        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/21.exe
detected: Trojan program Rootkit.Win32.Vanti.eu        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/22.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\1-23.rar/4.exe//PE_Patch.NSAnti//NSAnti

Joker

其实红伞么多少已知。。卡巴还不错！

金剑

0000000000000
风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!
===============================================
   ___________病毒查杀结果__________________

===============================================
2007年5月12日16时33分11秒 开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\6.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\7.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\8.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\12.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\23.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\18.exe 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\1.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\2.exe 为可疑文件
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\3.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\4.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\10.dll
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\10.dll 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\15.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\17.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\20.dll
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\20.dll 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\22.dll
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\22.dll 操作:阻止运行
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\23.exe 带壳文件:Aspack加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\1-23\22.dll 带壳文件:UPX加壳
-----------------------------------------
2007年5月12日16时33分24秒收起线程…100% 查杀完毕！
扫描文件：23查杀病毒：17

[ 本帖最后由 金剑 于 2007-5-12 16:33 编辑 ]

The EQs

nod32成绩不理想。。。上报。。。。

Joker

无语。。。。。。。速度真快

[ 本帖最后由 dark1109 于 2007-5-12 16:36 编辑 ]

金剑

原帖由 dark1109 于 2007-5-12 16:33 发表
无语。。。。。。。速度真快

beat2

蜘蛛官网绿色版，一个都没报

harry_chang2003

PCC 啟發4隻
      已知1隻

bridgewr

刨掉6个dll没办法运行测试，其他可执行的等会上结果