两个[MD5: 508F3A 1973F9]

tracydk

他们是认为诺顿在样本区处于最地层,诺顿都报了,别的没道理不报

The EQs

Scan performed at: 2007-8-16 9:47:13
Scanning Log
NOD32 version 2465 (20070816) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 16.8.2007  Time: 09:47:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?QVGV.SYS - a variant of Win32/Rootkit.Agent.NCK trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?WPD8QM.DLL - a variant of Win32/TrojanDownloader.Agent.NPO trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 09:47:19 Total scanning time: 0 sec (00:00:00)

镭风

费尔也不报

king6808

a-squared 3.0.0.123 2007.08.15 2007-08-15 没有检测到病毒 3.756
Arcavir 1.0.4 200708151835 2007-08-15 没有检测到病毒 1.204
AVAST 1.0.8 000765-2 2007-08-15 Win32:Agent-JQD [Trj] 3.037
AVG 7.5.48.442 269.11.19/955 2007-08-15 没有检测到病毒 1.370
小红伞 7.4.1.62 6.39.1.7 2007-08-15 没有检测到病毒

uhthn2002

vba32 miss

taihuxian

Result: 2 malware found
Trojan-Downloader.Win32.QQHelper.xr (virus)
C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar\QVGV.SYS
C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar\WPD8QM.DLL

taihuxian

C:\Documents and Settings\Administrator\桌面\样本.rar »RAR »QVGV.SYS - a variant of Win32/Rootkit.Agent.NCK trojan
C:\Documents and Settings\Administrator\桌面\样本.rar »RAR »WPD8QM.DLL - a variant of Win32/TrojanDownloader.Agent.NPO trojan