5个[MD5: C1C2F8 48E188 84C67D 8F3B47 C576A0]

promised

taihuxian

http://bbs.kafan.cn/attachment.php?aid=112805\EE99C835.EXE\[NsPack]\[Embedded#04010] [L] Win32:Agent-JOF [Trj] (0)
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\EE99C835.EXE\[NsPack]\[Embedded#04010] [L] Win32:Agent-JOF [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\husjdd8s.exe\[NsPack]\[Embedded#04010]\[Embedded#06000]\[NsPack] [L] Win32:Agent-IPV [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\winsys32_070812.dll [L] Win32:Delf-ECV [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\winupdate.exe\[PECompact] [L] Win32:Delf-FKI [Trj] (0)
During the file repair, error occurred: The file was not repaired.
File was successfully moved to chest...
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\dodolook133.exe\[Embedded#0466b] [L] Win32:Small-DJC [Trj] (0)
During the file repair, error occurred: The file was not repaired.
While moving file to chest, error occurred: 另一个程序正在使用此文件，进程无法访问。
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\G5UZGL6R\样本[1].rar\dodolook133.exe\[Embedded#0c23e] [L] Win32:Adware-gen. [Adw] (0)
During the file repair, error occurred: The file was not repaired.
While moving file to chest, error occurred: 另一个程序正在使用此文件，进程无法访问。

The EQs

liaoying112

krea

我的瑞星2007也是发现2个

FBAV

为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反病毒               
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\5本\EE99C835.EXE]
                    …………引擎[2]发现病毒:Win32.Nop [)
[C:\Documents and Settings\Administrator\桌面\virus\5本\husjdd8s.exe]
                    …………引擎[2]发现病毒:Win32.Nop JyG
[C:\Documents and Settings\Administrator\桌面\virus\5本\dodolook133.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5本\dodolook133.exe]
                    …………引擎[2]发现病毒:Win32.NkHack.FSG.A
文件数:5   病毒数:4  比重:0.8
OK  扫描完毕！

yashoo

漏一个！
已删除: 病毒 Heur.Trojan.Generic (变种)        文件: E:\test\样本.rar/EE99C835.EXE
已删除: 病毒 Heur.Trojan.Generic (变种)        文件: E:\test\样本.rar/husjdd8s.exe
已删除: 病毒 Heur.Trojan.Generic (变种)        文件: E:\test\样本.rar/winupdate.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Trojan-Downloader.Win32.QQHelper.xb        文件: E:\test\样本.rar/dodolook133.exe//UPX

东京时空

残缺的唯美

--> EE99C835.EXE
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> husjdd8s.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> winsys32_070812.dll
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> winupdate.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> dodolook133.exe
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cinmus.HV
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '46f2c5ce.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

woai_jolin