一支

Nblock

HKLM\SYSTEM\CURRENTCONTROLSET\SERVICES\VGADOWN\ IMAGEPATH  C:\WINDOWS\AVP.EXE

rest1min

KV2007和驱逐舰可以查杀。

wangjay1980

detected: Trojan program Trojan-PSW.Win32.Maran.jh        URL: http://bbs.kafan.cn/attachment.php?aid=118821//·s¸ê®Æ§¨/jpg101.pif//data.rar//server.exe//UPack

zane_xzz

Begin scan in 'C:\Documents and Settings\Administrator\桌面\pif.rar'
C:\Documents and Settings\Administrator\桌面\pif.rar
  [0] Archive type: RAR
    --> ·s¸ê®Æ§¨\jpg101.pif
      [1] Archive type: RAR SFX (self extracting)
      --> server.exe
          [DETECTION] Is the Trojan horse TR/PSW.Maran.JH.10
      [INFO]      The file was deleted!

欠妳緈諨

hkt988

Product: BitDefender 9 Professional Plus
//        Version: 9.5
//
//        创建在:        25/08/2007        14:51:39
//
//-----------------------------------------------------------------


病毒统计

扫描路径        : D:\下载文件夹\pif.rar
文件夹        : 0
文件        :  5
存档        : 3
被压缩的文件        : 0
被识别的病毒        : 1
被感染文件        : 1
警告        : 0

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\pif.rar'
F:\病毒样本\pif.rar
  [0] Archive type: RAR
    --> ·s¸ê®Æ§¨\jpg101.pif
      [1] Archive type: RAR SFX (self extracting)
      --> server.exe
          [DETECTION] Is the Trojan horse TR/PSW.Maran.JH.10
      [INFO]      The file was deleted!

The EQs

Scan performed at: 2007-8-25 21:17:00
Scanning Log
NOD32 version 2484 (20070825) NT
Command line: C:\Documents and Settings\Don johnson\桌面\pif.rar
Operating memory - is OK

Date: 25.8.2007  Time: 21:17:05
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\pif.rar
C:\Documents and Settings\Don johnson\桌面\pif.rar ?RAR ?穝戈?Ж\jpg101.pif ?RAR ?server.exe - probably a variant of Win32/PSW.Maran trojan - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:17:06 Total scanning time: 1 sec (00:00:01)

碧水寒潭

Start of the scan: 2007年8月25日  21:18

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\pif.rar
  [0] Archive type: RAR
    --> ·s¸ê®Æ§¨\jpg101.pif
      [1] Archive type: RAR SFX (self extracting)
      --> server.exe
          [DETECTION] Is the Trojan horse TR/PSW.Maran.JH.10
      [INFO]      The file was deleted!


End of the scan: 2007年8月25日  21:18
Used time: 00:14 min

The scan has been done completely.

ykz1991

原帖由 rest1min 于 2007-8-25 20:32 发表
KV2007和驱逐舰可以查杀。

KV2007样本区表现一直不错哈