MD5: 6A09EF

自由

win13.exe_ - Trojan-PSW.Win32.WOW.sb

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

The EQs

Scan performed at: 2007-8-18 14:30:26
Scanning Log
NOD32 version 2469 (20070818) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
D:\Program Files\Eset\nod32.exe - is OK
Operating memory - is OK
MBR sector of the 1. physical disk - is OK
Active boot sector of the 1. physical disk - is OK

Date: 18.8.2007  Time: 14:30:32
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?win13.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 14:30:32 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

woai_jolin

BitDefender Log File
Product : Bitdefender Internet Security
Version : BitDefender UIScanner v.11
Log date : 14:35:14 18/08/2007
Log path : C:\Documents and Settings\Administrator\Application Data\BitDefender\Desktop\Profiles\Logs\contextual\1187418914_9_02.xml

Scan Paths: Path0000: F:\v\样本.rar


Scan Options: Scan for viruses : Yes
Scan for adware : Yes
Scan for spyware : Yes
Scan for applications : Yes
Scan for dialers : Yes
Scan for rootkits : No


Target selection options: Scan registry keys : No
Scan cookies : No
Scan boot sectors : No
Scan memory processes : No
Scan archives : Yes
Scan runtime packers : Yes
Scan email : Yes
Scan all files : No
Heuristic Scan : Yes
Scanned extenstions : (null)
Exclude extensions :  


Target Processing Default action for infected objects : Disinfect
Default action for suspicious objects : None
Default action for hidden objects : None


Scan engines summary Number of virus signatures : 793346
Archive plugins : 40
Email plugins : 6
Scan plugins : 12
Archive plugins : 40
System plugins : 4
Unpack plugins : 6


Overall scan summary Scanned items : 4
Infected items : 2
Suspicious items : 0
Resolved items : 0
Individual viruses found : 2
Scanned directories : 0
Scanned boot sectors : 0
Scanned archives : 2
Input-output errors : 0
Scan time : 00:00:00:05
Files per second : 0


Scanned files summary Scanned : 4
Infected : 2


Scanned processes summary Scanned : 0
Infected : 0


Scanned registry keys summary Scanned : 0
Infected : 0


Scanned cookies summary Scanned : 0
Infected : 0


Remaining issues:Object Name Threat Name  Final Status


Resolved issues:Object Name Threat Name  Final Status
F:\v\样本.rar Generic.PWS.WoW.009F8963 Deleted

微点卫士

micropoint
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WIN13.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINOW.EXE
2) C:\WINDOWS.0\WINOW.DLL
是否删除木马程序及其衍生物?

FBAV

为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]              
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……


[C:\Documents and Settings\Administrator\桌面\virus\Trojan-PSW.Win32.WOW.sb.rar]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\Trojan-PSW.Win32.WOW.sb.rar]
                    …………引擎[2]发现病毒:Win32.Unknow
OK  扫描完毕！

hkt988

Product: BitDefender 9 Professional Plus
//        Version: 9.5
//
//        创建在:        18/08/2007        08:58:06
//
//-----------------------------------------------------------------


病毒统计

扫描路径        : D:\下载文件夹\样本.rar
文件夹        : 0
文件        :  2
存档        : 1
被压缩的文件        : 0
被识别的病毒        : 1
被感染文件        : 1
警告        : 0

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\样本.rar'
C:\Documents and Settings\dell\桌面\样本.rar
  [0] Archive type: RAR
  --> win13.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [INFO]      The file was successfully wiped!

tracydk

诺顿....

红心王子

扫描不报，运行主动防御拦截，报了未知
上报。。

taihuxian

http://www.bitdefender.com/vfind/?q=Generic.PWS.WoW.009F8963