3个，只能过卡6[MD5: F991A4 8147F2 F5AE5A]

allenhippo

现在的质量越来越差了

The EQs

Scan performed at: 2007-7-7 18:50:59
Scanning Log
NOD32 version 2383 (20070706) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 7.7.2007  Time: 18:51:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?3[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?dllhost32.exe - a variant of Win32/PSW.OnLineGames.RC trojan
Number of scanned files: 4
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 18:51:05 Total scanning time: 1 sec (00:00:01)

woai_jolin

扫描进行于：2007/7/7 18:44:39
扫描日志
NOD32版本 2383 (20070706) NT
命令行： D:\上报
C:\Program Files\Eset\nod32.exe - 是正常的
1 的MBR区.物理磁盘 - 是正常的
1 的启动引导区.物理磁盘 - 是正常的

日期： 7.7.2007  时间：18:44:41
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：D:\上报\
D:\上报\3[1].exe - Win32/PSW.OnLineGames.YA 木马的变种
D:\上报\7.7免杀.rar >>RAR >>7.7免杀.exe - 错误的文件检查值(CRC)，此文件可能已被密码保护.
D:\上报\dllhost32.exe - Win32/PSW.OnLineGames.RC 木马的变种
D:\上报\reg.rar >>RAR >>reg.exe - 错误的文件检查值(CRC)，此文件可能已被密码保护.
D:\上报\reg.rar >>RAR >>Svchost.dll - 是正常的
D:\上报\~tmp.tmp - 是正常的
已扫描的文件数目：4
已发现的病毒数目：2
完成时间： 18:44:42 总扫描时间：1 秒 (00:00:01)

小邪邪

DEEPSCAN和BEHAVESLIKE一起来，BD真的挺变态

The EQs

那个tmp文件怎么运行？？？？修改成exe看看

Joker

detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/~tmp.tmp//UPack
detected: virus Invader (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/3[1].exe//PE_Patch//UPack
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/dllhost32.exe//PE_Patch//UPack

风雪

费尔3个启发。

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\virus.rar'
F:\病毒样本\virus.rar
  [0] Archive type: RAR
  --> ~tmp.tmp
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> dllhost32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
      [INFO]      The file was deleted!

Giggs

Start of the scan: 2007年7月7日  19:14

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> ~tmp.tmp
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> dllhost32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
      [INFO]      A backup was created as '47017613.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: 2007年7月7日  19:14
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      3 viruses and/or unwanted programs were found

Redevil

欺负卡6没启发
Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=97927 is infected with Trojan.Generic virus