[MD5: 4443AF]

蓝色牛仔裤

对4.33蜘蛛的报法无语。。

[Scan path] C:\Documents and Settings\Administrator\桌面\样本.rar
>>>C:\Documents and Settings\Administrator\桌面\样本.rar\安装程序.exe infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 3
Infected objects found: 1
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 39 Kb/s
Scan time: 00:00:00

ljabchn

Kaspersky Anti-Virus 6.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=101297 is infected with Trojan-PSW.Win32.WOW.qz virus

SONGBOWEN

卡巴斯基6：
已删除: 木马程序 Trojan-PSW.Win32.WOW.qz        文件: C:\Documents and Settings\Administrator\桌面\样本\安装程序.exe//UPX

SONGBOWEN

脱壳后：
已删除: 木马程序 Trojan-PSW.Win32.QQPass.up        文件: C:\Documents and Settings\Administrator\桌面\样本\321.exe

SONGBOWEN

脱壳前后病毒名居然会不一样？！
谁能解释一下？？？

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~ODD7C5.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files matching: D:\v\v\安装程序.exe
       78 ms D:\v\v\安装程序.exe                                          Trojan W32/Malware.UMI ()
- File D:\v\v\安装程序.exe quarantined.
- File D:\v\v\安装程序.exe deleted.

===================================================================================================

The scanning started: 2007/07/16 13:48:55
               ended: 2007/07/16 13:48:55
Logged on as        : Jason
on hostname         : JASON-PC

Scanning results:
   Total number of files found..............................:       1
   Number of files scanned..................................:       1
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2005 Norman ASA.