来一个样本

gzg

扫扫看

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.cnn        URL: http://bbs.kafan.cn/attachment.php?aid=122217//system[1].dat/system.dat//PE_Patch.UPX//UPX

2007zxf1

小红伞5个

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\system[1].dat.rar'
F:\病毒样本\system[1].dat.rar
  [0] Archive type: RAR
  --> system[1].dat\lin.dat
      [DETECTION] Is the Trojan horse TR/PSW.5632.3
  --> system[1].dat\zero3.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> system[1].dat\zero3explorer.dat
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> system[1].dat\zhu.dat
      [DETECTION] Is the Trojan horse TR/PSW.5632.4
  --> system[1].dat\system.dat
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.cnn
      [INFO]      The file was deleted!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 1443
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\lin.dat - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\linexplorer.dat - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\zero3.dat - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\zero3explorer.dat - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\zhu.dat - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\zhuexplorer.dat - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\system.dat - Suspicious of Trojan-Downloader.VB.1
C:\Documents and Settings\uhthn\Desktop\New Folder\system.dat.reg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\0002.reg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\0003.reg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\shellhook.reg - OK

11 Files scanned
0 Infected files found
5 Suspicious files found
0 Files cured
0 Files deleted

wxy85997380

怎么卡巴只找到一个呢

欠妳緈諨

残缺的唯美

咖啡发现0个

kp2006

kv2008

timhas266

Begin scan in 'C:\Documents and Settings\tim\桌面\system[1].dat.rar'
C:\Documents and Settings\tim\桌面\system[1].dat.rar
  [0] Archive type: RAR
  --> system[1].dat\lin.dat
      [DETECTION] Is the Trojan horse TR/PSW.5632.3
  --> system[1].dat\zero3.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> system[1].dat\zero3explorer.dat
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> system[1].dat\zhu.dat
      [DETECTION] Is the Trojan horse TR/PSW.5632.4
  --> system[1].dat\system.dat
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.cnn
      [INFO]      A backup was created as '474d1dac.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!