4个[MD5: ED37C4 6E7BBD 6E8069 D5EBD3]

promised

微点卫士

微点：
木马名称:Backdoor.Win32.Delf.bnz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TIMPLATFOML.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.QQRob.crz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TIMPLATFOM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KERNL32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


剩下DLL一个加载了也不报的哦

欠妳緈諨

The EQs

Scan performed at: 2007-9-2 17:29:20
Scanning Log
NOD32 version 2497 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\1.rar
Operating memory - is OK

Date: 2.9.2007  Time: 17:29:23
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\1.rar
C:\Documents and Settings\Don johnson\桌面\1.rar ?RAR ?timplatfoml.dll - Win32/PSW.QQRob.NAQ trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\1.rar ?RAR ?timplatfom.exe - a variant of Win32/PSW.QQRob.NAQ trojan
C:\Documents and Settings\Don johnson\桌面\1.rar ?RAR ?kernl32.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 17:29:24 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\样本.rar'
C:\Documents and Settings\dell\桌面\样本.rar
  [0] Archive type: RAR
  --> g4m4aipuul.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> timplatfoml.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> timplatfom.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING]   The file was ignored!

1688388728

已检测到: 木马程序 Backdoor.Win32.Delf.ash        URL: http://bbs.kafan.cn/attachment.php?aid=122439//timplatfoml.dll

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2488
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\g4m4aipuul.dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\timplatfoml.dll - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\timplatfom.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder\kernl32.exe - Suspicious of Win32.Backdoor.Hupigon.5

4 Files scanned
0 Infected files found
4 Suspicious files found
0 Files cured
0 Files deleted

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\样本.rar'
C:\Documents and Settings\tim\桌面\样本.rar
  [0] Archive type: RAR
  --> g4m4aipuul.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> timplatfoml.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> timplatfom.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47090918.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!