[2C9BBE]红伞挂

promised

a-squared	3.0.0.123	2007.09.06	2007-09-06	-	3.664
Arcavir	1.0.4	200709071807	2007-09-07	-	1.218
AVAST	1.0.8	000773-2	2007-09-07	-	3.046
AVG	7.5.48.442	269.13.7/992	2007-09-06	-	1.575
BitDefender	7.60825.868252	7.14664	2007-09-08	BehavesLike:Trojan.ShellStartup (suspected)	3.162
CA (VET)	8.4.0.24	31.1.5119	2007-09-08	-	0.845
ClamAV	0.91.1	4189	2007-09-08	-	0.016
Comodo	2.11	2.0.0.277	2007-09-07	-	1.017
ewido	4.0.0.2	2007.09.07	2007-09-07	-	2.013
F-SECURE	5.51.6100	2007.09.07.08	2007-09-07	-	2.601
Hauri	20070907	2007.09.07	2007-09-07	-	0.445
IKARUS	T3.1.1.12	2007.09.07.69467	2007-09-07	BehavesLikeTrojan.ShellStartup	1.212
MKS_VIR	2.01	2007.09.08	2007-09-08	-	1.863
NOD32	2.70.8	2514	2007-09-08	-	0.189
nProtect	2007-09-07.00	909334	2007-09-07	BehavesLike:Trojan.ShellStartup	10.583
QuickHeal	9.00	2007.09.07	2007-09-07	Suspicious - DNAScan	2.232
SOPHOS	2.49.1	4.21	2007-09-08	-	2.532
The Hacker	6.1.9	v00181	2007-09-07	-	0.690
VBA32	3.12.2.4	20070907.0759	2007-09-07	Malware.VB.60 (paranoid heuristics) (suspicious)	0.830
VirusBuster	4.3.19:9	9.103.1/11.0	2007-09-07	-	0.965
冰岛杀毒	3.16.16	2007.09.07	2007-09-07	-	0.869
卡巴斯基	5.5.10	2007.09.08	2007-09-08	-	0.086
大蜘蛛	4.33	2007.09.07	2007-09-07	-	4.910
小红伞	7.6.0.5	6.39.1.105	2007-09-07	-	2.305
江民杀毒	10.00.650	2007.09.06	2007-09-06	-	0.773
熊猫卫士	9.04.03.0001	2007.09.07	2007-09-07	Suspicious file	3.426
瑞星	19.0	19.39.42.00	2007-09-07	-	1.514
诺曼	5.91.07	5.90	2007-09-07	-	3.748
赛门铁克	1.3.0.24	20070907.007	2007-09-07	-	0.275
趋势	8.500-1001	4.703.00	2007-09-07	-	0.368
迈克菲	5.2.00	5115	2007-09-07	-	1.716
金山毒霸	2007.6.20.249	2007.9.7	2007-09-07	-	1.118

[ 本帖最后由 promised 于 2007-9-8 09:52 编辑 ]

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

[C:\Documents and Settings\Administrator\桌面\virus\soa\soa.exe]
                    …………引擎[3]发现Suspicious File
OK  扫描完毕！

平淡

费尔过了

微笑的前奏

BehavesLike:Trojan.ShellStartup

无敌敏敏

这是什么品种的木马我没见过~

mofunzone

缺少dll没法运行

promised

实机运行正常
sandbox有bug，在sb论坛看到有人提这个组件调用失败的bug
不过不知道哪个版本会解决

woai_jolin

fsis pass

saga3721

过了红伞，伴侣报了

程序:
C:\DOCUMENTS AND SETTINGS\X\桌面\SOA.EXE
是否删除木马程序及其衍生物?

未知木马
SOA.EXE

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3882
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\soa.exe

C:\Documents and Settings\uhthn\Desktop\soa.exe - Suspicious of Trojan-PSW.Game.16

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted