[MD5: 9C330D 0AA5DE 6F6C2D 20CBFA 573C5E 71559C 133780]

zane_xzz

后门

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Agent.cvh        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/cmdbcs.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.boy        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/DbgHlp32.dll
detected: Trojan program Trojan-PSW.Win32.Nilage.boa        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/msccrt.dll
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/2CF1D2A4.EXE//ASPack

东京时空

AVAST直接拦截

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\system32.rar'
C:\Documents and Settings\Administrator\My Documents\
  system32.rar
    [0] Archive type: RAR
    --> E6D3E90.DLL
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> DiskMan32.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> cmdbcs.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> DbgHlp32.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> msccrt.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2CF1D2A4.EXE
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月5日  18:56
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      2 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      6 Files not concerned
      1 Archives were scanned
      8 Warnings
      0 Notes

欠妳緈諨

自由

微点只运行一个EXE。其他上报。

king6808

F:\system32.rar >>RAR >>E6D3E90.DLL - 可能是 Win32/Genetik 木马 的一个变种
F:\system32.rar >>RAR >>DiskMan32.dll - 可能是 Win32/Genetik 木马 的一个变种
F:\system32.rar >>RAR >>cmdbcs.dll - 可能是 Win32/Genetik 木马 的一个变种
F:\system32.rar >>RAR >>DbgHlp32.dll - 可能是 Win32/Genetik 木马 的一个变种
F:\system32.rar >>RAR >>upxdnd.dll - 可能是 Win32/Genetik 木马 的一个变种
F:\system32.rar >>RAR >>2CF1D2A4.EXE - 可能是 Win32/Genetik 木马 的一个变种

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3274
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\2

C:\Documents and Settings\uhthn\Desktop\2\E6D3E90.DLL - Suspicious of Trojan.Autorun.1
C:\Documents and Settings\uhthn\Desktop\2\DiskMan32.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\2\cmdbcs.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\2\DbgHlp32.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\2\upxdnd.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\2\msccrt.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\2\2CF1D2A4.EXE - Suspicious of Trojan-PSW.Game.8

7 Files scanned
0 Infected files found
7 Suspicious files found
0 Files cured
0 Files deleted

残缺的唯美

symantec 1个

平淡

驱逐舰直接拦截了