偶也来发一个

gzg

大家来测试一下

The EQs

Scan performed at: 2007-7-11 21:12:46
Scanning Log
NOD32 version 2392 (20070711) NT
Command line: C:\Documents and Settings\EQ2\桌面\1111.rar
Operating memory - is OK

Date: 11.7.2007  Time: 21:12:52
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\1111.rar
C:\Documents and Settings\EQ2\桌面\1111.rar ?RAR ?1111\New Folder\~Temp6589.tmp - a variant of Win32/PSW.OnLineGames.NBR trojan
C:\Documents and Settings\EQ2\桌面\1111.rar ?RAR ?1111\New Folder\S168.exe - a variant of Win32/PSW.OnLineGames.NBR trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 21:12:52 Total scanning time: 0 sec (00:00:00)

moonsilver

RS pass

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\1111.rar'
F:\病毒样本\1111.rar
  [0] Archive type: RAR
  --> 1111\New Folder\~Temp6589.tmp
      [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> 1111\New Folder\S168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [INFO]      The file was deleted!

taitan001

这不是greendown的两个吗   
晕  还把压缩包名字给改了
vba
F:\1111.rar:<RAR>\1111\New Folder\~Temp6589.tmp : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)
F:\1111.rar:<RAR>\1111\New Folder\S168.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)

[ 本帖最后由 taitan001 于 2007-7-11 21:28 编辑 ]

欠妳緈諨

AVAST飘过

promised

转绅博的吧

1688388728

程序:
E:\病毒库\1111\1111\NEW FOLDER\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.DLL
3) C:\PROGRAM FILES\COMMON FILES\RELIVE.DLL
是否删除木马程序及其衍生物?



Do you want to allow this change ?

File(s): hosts

Information:
An attempt is being made to change the host fil

moonsilver

尊敬的客户，您好！
    您的邮件已经收到，感谢您对瑞星的支持。

    我们已经详细分析过您的问题和文件，以下是您上传的文件的分析结果：
    1.文件名：S168.exe
    病毒名：Worm.Win32.Agent.za

    2.文件名：~Temp6589.tmp
    病毒名：Worm.Win32.Agent.za

    您所上报的病毒文件将在19.31.31版本中处理解决。

注意：如果您上报的文件损坏或者压缩包有密码保护，会导致我们无法正确分析，请您确认文件正常且压缩包中无密码后再提交。
如有问题，您可以通邮件服务中心与我们联系，详细描述您的问题，并且提供此封邮件主题中的流水单号以及上报所用的电子邮件地址。
提 醒：为保证收到您的来信，请勿直接回复本邮件!!!
-------------------------------------------------------------
发送邮件：请用IE等浏览器访问网址 http://csc.rising.com.cn
-------------------------------------------------------------

wangjay1980

A-Squared  Found nothing
AntiVir  Found TR/Autorun.BK  
ArcaVir  Found nothing
Avast  Found nothing
AVG Antivirus  Found nothing
BitDefender  Found nothing
ClamAV  Found nothing
Dr.Web  Found Win32.HLLW.Autoruner.175  
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found nothing
Fortinet  Found nothing
Kaspersky Anti-Virus  Found nothing
NOD32  Found a variant of Win32/PSW.OnLineGames.NBR  
Norman Virus Control  Found nothing
Panda Antivirus  Found nothing
Rising Antivirus  Found nothing
Sophos Antivirus  Found nothing
VirusBuster  Found nothing
VBA32  Found Trojan-PSW.Game.18 (paranoid heuristics) (probable variant)