来几个，一般般的[MD5: A5626C 4B79B8 04A6E8 35B824 92061E 3F77A9]

显示全部楼层 · 发表于 2007-7-8 17:18:08

好歹有几个过了卡7

显示全部楼层 · 发表于 2007-7-8 17:23:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\
  virus.rar
[0] Archive type: RAR
--> a.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> msdebug.dll
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [WARNING] Infected files in archives cannot be repaired!
--> msfeed.exe
--> NewInfo.bmt
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> RemoteDbg.dll
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [WARNING] Infected files in archives cannot be repaired!
--> windhcp.ocx
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '4702ad57.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-7-8 17:26:15

显示全部楼层 · 发表于 2007-7-8 17:28:37

刚换卡巴，卡巴一个也不报

显示全部楼层 · 发表于 2007-7-8 17:31:48

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.OnlineGames.dbd
病毒： Trojan.DL.Win32.Agent.woz
病毒： Trojan.PSW.Win32.OnlineGames.dbc
病毒： Trojan.PSW.Win32.OnlineGames.ce

用户来源：互联网

软件版本：19.30.62

显示全部楼层 · 发表于 2007-7-8 17:34:39

过了卡巴的,nod也不会好到哪里去

3.

Scan performed at: 2007-7-8 17:31:29
Scanning Log
NOD32 version 2384 (20070708) NT
Command line: F:\virus.rar
Operating memory - is OK

Date: 8.7.2007 Time: 17:31:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\virus.rar
F:\virus.rar ?RAR ?msdebug.dll - a variant of Win32/Agent.NIK trojan
F:\virus.rar ?RAR ?RemoteDbg.dll - a variant of Win32/Agent.NIK trojan
F:\virus.rar ?RAR ?windhcp.ocx - a variant of Win32/Agent.NIK trojan
Number of scanned files: 7
Number of threats found: 3

显示全部楼层 · 发表于 2007-7-8 17:37:26

病毒: Win32:Delf-EWR [Trj] (2x), Win32:Agent-HJW [Trj] (3x)
文件: virus[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\LKY2IBN5
进程: GreenBrowser.exe

显示全部楼层 · 发表于 2007-7-8 17:42:10

那个newinfo.bmt是a.exe放出来的..结果两个都pass了

显示全部楼层 · 发表于 2007-7-8 17:44:33

c:\ABC\virus.rar:\a.exe - Signature 'Trojan.Delf.NEB' found
c:\ABC\virus.rar:\msdebug.dll - Signature 'Trojan-Proxy.Win32.Small.DU' found
c:\ABC\virus.rar:\msfeed.exe
c:\ABC\virus.rar:\NewInfo.bmt - Signature 'Trojan.Delf.NEB' found
c:\ABC\virus.rar:\RemoteDbg.dll - Signature 'Trojan.Win32.Agent.abf' found
c:\ABC\virus.rar:\windhcp.ocx - Signature 'Trojan.Win32.Agent.abf' found
c:\ABC\virus.rar

7 Files scanned
(1 Archiv with 6 files)
5 Signatures found
0 Suspect code-parts found
Used time: 0:00.203

显示全部楼层 · 发表于 2007-7-8 17:45:31

msfeed.exe里面有毒网地址的

[病毒样本] 来几个，一般般的[MD5: A5626C 4B79B8 04A6E8 35B824 92061E 3F77A9]

本帖子中包含更多资源

本帖子中包含更多资源