一个【MD5:a7f0c0】

wangjay1980

RT

卡巴启发

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Trojan.Downloader.Agent.XZO
http://www.bitdefender.com/vfind/?q=Trojan.Muldrop.ARH

tracydk

红伞挂了...上报...

promised

酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /n.../af+ /fd+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\123\123.exe:<CAB>\avp.exe : infected Trojan.MulDrop.6952
C:\ABC\123\123.exe:<CAB>\ie.exe : infected MalwareScope.Trojan-PSW.Game.14
Program execution terminated by user


Directories       : 5       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 18
- scanned         : 1       -  scanned    : 2       - scanned     : 17
- contain viruses : 1       -  infected   : 2       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 19:39:49 13-07-2007
End        : 19:39:52 13-07-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

promised

解包以后再加入
C:\ABC\123\123\avp.exe - 特征码 'Trojan.BAT.Agent.v' 被发现
C:\ABC\123\123\ie.exe - 特征码 'Trojan-PWS.Win32.QQPass.pb' 被发现

        2 个文件被扫描
          (0 个压缩档 0 个文件)
        2 个特征码被侦测
        0 个可疑代码段被发现
        耗时: 0:00.031

tracydk

AhnLab-V3	2007.7.13.0	2007.07.13	no virus found
AntiVir	7.4.0.39	2007.07.13	no virus found
Authentium	4.93.8	2007.07.13	no virus found
Avast	4.7.997.0	2007.07.12	Win32:Delf-DNR
AVG	7.5.0.476	2007.07.12	no virus found
BitDefender	7.2	2007.07.13	Trojan.Muldrop.ARH
CAT-QuickHeal	9.00	2007.07.12	no virus found
ClamAV	devel-20070416	2007.07.13	no virus found
DrWeb	4.33	2007.07.13	Trojan.MulDrop.6952
eSafe	7.0.15.0	2007.07.10	suspicious Trojan/Worm
eTrust-Vet	30.8.3783	2007.07.13	no virus found
Ewido	4.0	2007.07.13	Dropper.DN
FileAdvisor	1	2007.07.13	no virus found
Fortinet	2.91.0.0	2007.07.13	no virus found
F-Prot	4.3.2.48	2007.07.13	no virus found
Ikarus	T3.1.1.8	2007.07.13	no virus found
Kaspersky	4.0.2.24	2007.07.13	no virus found
McAfee	5073	2007.07.12	no virus found
Microsoft	1.2704	2007.07.12	Trojan:Win32/Agent.gen!J
NOD32v2	2396	2007.07.12	no virus found
Norman	5.80.02	2007.07.12	no virus found
Panda	9.0.0.4	2007.07.12	no virus found
Sophos	4.19.0	2007.07.06	Mal/DelpDldr-C
Sunbelt	2.2.907.0	2007.07.12	no virus found
Symantec	10	2007.07.13	no virus found
TheHacker	6.1.6.145	2007.07.12	no virus found
VBA32	3.12.0.2	2007.07.13	Trojan.MulDrop.6952
VirusBuster	4.3.23:9	2007.07.12	no virus found
Webwasher-Gateway	6.0.1	2007.07.13	Trojan.Delphi.Downloader.Gen

l784588

avast! 拦截,报Win32:Delf-DNR [Trj]

promised

antivir也解不了包

hj5abc

又是cabinet self-extractor..运行报了就行.antivir连NSIS都不解..

2007-7-13 19:47:51 AMON file C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\ie.exe a variant of Win32/TrojanDownloader.Delf.AXB trojan
2007-7-13 19:47:50 AMON file C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\IXP000.TMP\avp.exe BAT/Agent.Y trojan



[ 本帖最后由 hj5abc 于 2007-7-13 19:51 编辑 ]

风雪

费尔木马