[0215B4]

promised

微点卫士

费尔挂!!!

微点:
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.531\S168.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.BAK
2) C:\PROGRAM FILES\INTERNET EXPLORER\MSVCRT.DLL
3) C:\PROGRAM FILES\COMMON FILES\RELIVE.DLL
是否删除木马程序及其衍生物?

woai_jolin

FSCS PASS

The EQs

Scan performed at: 2007-7-26 19:58:49
Scanning Log
NOD32 version 2422 (20070726) NT
Command line: C:\Documents and Settings\EQ2\桌面\s168.zip
Operating memory - is OK

Date: 26.7.2007  Time: 19:58:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\s168.zip
C:\Documents and Settings\EQ2\桌面\s168.zip ?ZIP ?s168.exe - a variant of Win32/PSW.OnLineGames.NBR trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 19:58:56 Total scanning time: 1 sec (00:00:01)

红心王子

报出来的不多

AhnLab-V3	2007.7.27.0	2007.07.26	-
AntiVir	7.4.0.50	2007.07.26	TR/Autorun.BK
Authentium	4.93.8	2007.07.25	-
Avast	4.7.997.0	2007.07.26	Win32:Autorun-U
AVG	7.5.0.476	2007.07.26	-
BitDefender	7.2	2007.07.26	-
CAT-QuickHeal	9.00	2007.07.25	-
ClamAV	0.91	2007.07.26	Trojan.Delf-1251
DrWeb	4.33	2007.07.26	Win32.HLLW.Autoruner.175
eSafe	7.0.15.0	2007.07.24	suspicious Trojan/Worm
eTrust-Vet	31.1.5004	2007.07.25	Win32/Rodvir!generic
Ewido	4.0	2007.07.26	-
FileAdvisor	1	2007.07.26	-
Fortinet	2.91.0.0	2007.07.26	-
F-Prot	4.3.2.48	2007.07.25	-
F-Secure	6.70.13030.0	2007.07.26	-
Ikarus	T3.1.1.8	2007.07.26	Virus.Win32.AutoRun.bk
Kaspersky	4.0.2.24	2007.07.26	-
McAfee	5083	2007.07.26	PWS-OnlineGames.a
Microsoft	1.2704	2007.07.26	-
NOD32v2	2422	2007.07.26	a variant of Win32/PSW.OnLineGames.NBR
Norman	5.80.02	2007.07.25	-
Panda	9.0.0.4	2007.07.26	-
Rising	19.33.32.00	2007.07.26	-
Sophos	4.19.0	2007.07.26	-
Sunbelt	2.2.907.0	2007.07.26	-
Symantec	10	2007.07.26	W32.SillyFDC
TheHacker	6.1.7.154	2007.07.26	-
VBA32	3.12.2.1	2007.07.24	suspected of Trojan-PSW.Game.18 (paranoid heuristics)
VirusBuster	4.3.26:9	2007.07.25	-
Webwasher-Gateway	6.0.1	2007.07.26	Trojan.Autorun.BK

Nerazzurri

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Kevin\Desktop\病毒样本\s168.zip'
C:\Documents and Settings\Kevin\Desktop\病毒样本\s168.zip
  [0] Archive type: ZIP
  --> s168.exe
      [DETECTION] Is the Trojan horse TR/Autorun.BK
      [INFO]      The file was deleted!