[MD5: 2C50DC E46164 8C7484 997200 16A8B1]

qianwenxiang

[MD5: 2C50DC E46164 8C7484 997200 16A8B1]

avast3个
winow.dll   |   Win32:Delf-DTT [Trj]
winow.exe\[Upack]\[Embedded#DOWN]  |  Win32:Delf-DTT [Trj]
3jow6.dll  |  Win32:Agent-JQD [Trj]

红心王子

Trojan.PSW.Win32.WoWar.te.a
Trojan.PSW.Win32.WoWar.te

hj5abc

Scanning Log
NOD32 version 2442 (20070807) NT
Command line: F:\windows.rar
Operating memory - is OK

Date: 8.8.2007  Time: 18:37:36
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\windows.rar
F:\windows.rar ?RAR ?f5s3.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
F:\windows.rar ?RAR ?winow.dll - Win32/PSW.WOW.RO trojan - was a part of the deleted object
F:\windows.rar ?RAR ?winow.exe - Win32/PSW.WOW.RO trojan - was a part of the deleted object
F:\windows.rar ?RAR ?3jow6.dll - a variant of Win32/TrojanDownloader.Agent.NPO trojan
F:\windows.rar ?RAR ?ana4ko1.sys - a variant of Win32/Rootkit.Agent.NCK trojan
Number of scanned files: 6
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 18:37:36 Total scanning time: 0 sec (00:00:00)

The EQs

woai_jolin

Scan performed at: 2007/8/8 18:53:29
Scanning Log
NOD32 version 2442 (20070807) NT
Command line: G:\v\windows.rar

Date: 8.8.2007  Time: 18:53:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\windows.rar
G:\v\windows.rar ?RAR ?f5s3.sys - a variant of Win32/Rootkit.Agent.NBQ trojan
G:\v\windows.rar ?RAR ?winow.dll - Win32/PSW.WOW.RO trojan - was a part of the deleted object
G:\v\windows.rar ?RAR ?winow.exe - Win32/PSW.WOW.RO trojan - was a part of the deleted object
G:\v\windows.rar ?RAR ?3jow6.dll - a variant of Win32/TrojanDownloader.Agent.NPO trojan
G:\v\windows.rar ?RAR ?ana4ko1.sys - a variant of Win32/Rootkit.Agent.NCK trojan
Number of scanned files: 6
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 18:53:33 Total scanning time: 1 sec (00:00:01)

1688388728

D:\病毒库\windows.rar=>winow.dll        感染: Generic.PWS.WoW.B0C1E3EC
D:\病毒库\windows.rar=>winow.dll        杀毒失败
D:\病毒库\windows.rar=>winow.dll        移动失败
D:\病毒库\windows.rar=>winow.exe        感染: Generic.PWS.WoW.F8F058D2
D:\病毒库\windows.rar=>winow.exe        杀毒失败
D:\病毒库\windows.rar=>winow.exe        移动失败

uhthn2002

vba32

微点卫士

微点：
木马名称:Trojan-PSW.Win32.WOW.att
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINOW.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

woai_jolin

hahacomcn

Start of the scan: 2007年8月9日  00:23

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\windows.rar'
C:\Documents and Settings\Administrator\桌面\windows.rar
  [0] Archive type: RAR
  --> f5s3.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> winow.dll
      [DETECTION] Is the Trojan horse TR/PSW.33792.1
  --> winow.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 3jow6.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ana4ko1.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen