来来来，毒网产品当早点

allenhippo

一包8个，那个microsoft是网马，其他都是它载来的。

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!
===============================================
   ___________病毒查杀结果__________________

===============================================
2007年6月3日8时32分54秒 开始查杀C:\Documents and Settings\Administrator\桌面\virus\virus
  未知的可疑率60%的文件(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\down[1].exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\down[1].exe 操作:阻止运行
  未知的可疑率80%的文件(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\2[1].exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\2[1].exe 操作:阻止运行
  未知的可疑率80%的文件(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\rxso.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\rxso.exe 操作:阻止运行
  未知的可疑率80%的文件(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\Microsoft.com 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virus\Microsoft.com 操作:阻止运行
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------
2007年6月3日8时32分56秒收起线程…100% 查杀完毕！
扫描文件：7查杀病毒：4

[ 本帖最后由 金剑 于 2007-6-3 08:32 编辑 ]

wangjay1980

detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/9[1].exe//FSG

seamonkey

deleted: virus Invader (modification)        File: D:\virus.rar/9[1].exe//FSG

电影结束了

Scan performed at: 2007-6-3 9:24:33
Scanning Log
NOD32 version 2305 (20070601) NT
Command line: C:\Documents and Settings\wangcheng\桌面\virus.rar
C:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK - Error reading disk sectorError reading disk sectorError reading disk sector

Date: 3.6.2007  Time: 09:24:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\virus.rar
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?down[1].exe - Win32/Delf.BS worm
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?Microsoft.com - Win32/Delf.BS worm
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?9[1].exe - a variant of Win32/PSW.OnLineGames.NAL trojan
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?2[1].exe - Win32/Pacex.Gen virus
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?rxso.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?4[1].exe - Win32/Pacex.Gen virus
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?qjso.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\wangcheng\桌面\virus.rar ?RAR ?7[2].exe - is OK
Number of scanned files: 9
Number of threats found: 7
Number of active threats: 1
Time of completion: 09:24:44 Total scanning time: 1 sec (00:00:01)

taihuxian

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> down[1].exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Microsoft.com
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 9[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 2[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> rxso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 4[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> qjso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      A backup was created as '46d41f24.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

Giggs

Start of the scan: 2007年6月3日  10:00

Starting the file scan:

Begin scan in 'E:\virus.rar'
E:\virus.rar
  [0] Archive type: RAR
  --> down[1].exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Microsoft.com
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 9[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 2[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> rxso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 4[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> qjso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      A backup was created as '46d4212b.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: 2007年6月3日  10:00
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      7 viruses and/or unwanted programs were found
      3 classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

蓝色牛仔裤

3个。。上报了。。。


[Scan path] C:\Documents and Settings\Administrator\桌面\virus
C:\Documents and Settings\Administrator\桌面\virus\2[1].exe - Ok
C:\Documents and Settings\Administrator\桌面\virus\4[1].exe - Ok
C:\Documents and Settings\Administrator\桌面\virus\7[2].exe - Ok
>C:\Documents and Settings\Administrator\桌面\virus\9[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\virus\down[1].exe infected with Win32.HLLW.Autoruner
C:\Documents and Settings\Administrator\桌面\virus\Microsoft.com infected with Win32.HLLW.Autoruner
C:\Documents and Settings\Administrator\桌面\virus\qjso.exe - Ok
C:\Documents and Settings\Administrator\桌面\virus\rxso.exe - Ok

7506318

avast过

woai_jolin

2007/6/3 10:45:48        Scanning Log
2007/6/3 10:45:48        Version of virus signature database: 2305 (20070601)
2007/6/3 10:45:48        Date: 3.6.2007  Time: 10:45:48
2007/6/3 10:45:48        Scanned disks, folders and files: E:\病毒测试\
2007/6/3 10:45:52        E:\病毒测试\virus.rar - multiple threats - deleted
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » down[1].exe - Win32/Delf.BS worm
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » Microsoft.com - Win32/Delf.BS worm
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » 9[1].exe - a variant of Win32/PSW.OnLineGames.NAL trojan
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » 2[1].exe - Win32/Pacex.Gen virus
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » rxso.exe - Win32/Pacex.Gen virus
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » 4[1].exe - Win32/Pacex.Gen virus
2007/6/3 10:45:52        E:\病毒测试\virus.rar » RAR » qjso.exe - Win32/Pacex.Gen virus
2007/6/3 10:45:52        Number of scanned files: 9