[MD5: 9338A9 E6BD1E 9F4EE0 AD6F92]

tonger2003

红心王子

狮子不杀

The EQs

Scan performed at: 2007-7-2 10:44:18
Scanning Log
NOD32 version 2368 (20070701) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 2.7.2007  Time: 10:44:22
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?2.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?11.exe - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 5
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 10:44:22 Total scanning time: 0 sec (00:00:00)

wangjay1980

没启发出来
Hello,

11.exe_ - Trojan-PSW.Win32.QQPass.qg,
13.exe_ - Trojan-Spy.Win32.Delf.uv,
2.exe_ - Trojan-Proxy.Win32.Small.du,
9.exe_ - Trojan.Win32.Agent.arg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Roman Gavrilchenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2007-7-2 11:39 编辑 ]

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 13.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.136
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

promised

C:\ABC\样本.rar:\2.exe - Signature 'Trojan-PWS.OnlineGames.AYD' found
C:\ABC\样本.rar:\9.exe - Signature 'Trojan-Downloader.Win32.Small.czl' found
C:\ABC\样本.rar:\11.exe - Signature 'Trojan-PWS.Win32.Nilage.bga' found
C:\ABC\样本.rar:\13.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
C:\ABC\样本.rar

        5 Files scanned
          (1 Archiv with 4 files)
        4 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.235

fromworld

扫描统计:
  扫描时间: 6
  扫描选项:
  扫描目标: D:\Users\Administrator\Desktop\样本.rar
  计数:
   扫描的项目总数: 5
   - 文件和目录: 5
   - 注册表项: 0
   - 进程和启动项目: 0
   - 网络和浏览器项目: 0
   - 其他: 0

   检测到的安全风险总数: 2
   已解决的项目总数: 0
   需要注意的项目总数: 2

已解决的风险:


未解决的风险:
Infostealer.Gampass
病毒 ID: 40673
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 个文件
[2.exe] 位于[d:\users\administrator\desktop\样本.rar] - 已感染


Trojan.Dropper
病毒 ID: 11027
类型: 已压缩
风险: 高 (高 隐蔽性，高 清除，高 性能，高 隐私)  
类别: 病毒
状态: 删除失败
-----------
1 个文件
[11.exe] 位于[d:\users\administrator\desktop\样本.rar] - 已感染

风野胤

9.exe貌似是死的
13.exe上报了

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 11.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.136
      [INFO]      The file was deleted!

wangjay1980

Hello,

11.exe_ - Trojan-PSW.Win32.QQPass.qg,
13.exe_ - Trojan-Spy.Win32.Delf.uv,
2.exe_ - Trojan-Proxy.Win32.Small.du,
9.exe_ - Trojan.Win32.Agent.arg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Roman Gavrilchenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.