早点 99c6e2 7ec3f5 45a6c9 05e1de

wangjay1980

如题

自由

程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\4\1.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVZTMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVZTMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\4\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SYSTEM.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\4\3.EXE
木马程序生成以下文件:
1) C:\WINDOWS\CMDBCS.EXE
2) C:\WINDOWS\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\4\4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\9A5FAAE2.EXE
是否删除木马程序及其衍生物?

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\4.zip'
C:\Documents and Settings\Administrator\My Documents\
  4.zip
    [0] Archive type: ZIP
    --> 4.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

残缺的唯美

Scan performed at: 2007-9-11 11:54:32
Scanning Log
NOD32 version 2520 (20070911) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\4.zip

Date: 11.9.2007  Time: 11:54:34
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\4.zip
D:\Documents and Settings\EKINCHENG\桌面\4.zip ?ZIP ?4.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\4.zip ?ZIP ?1.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\4.zip ?ZIP ?3.exe - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 11:54:36 Total scanning time: 2 sec (00:00:02)

[Scan path] C:\Documents and Settings\Administrator\桌面\4.zip
>>>C:\Documents and Settings\Administrator\桌面\4.zip\4.exe probably infected with MULDROP.Trojan
>>C:\Documents and Settings\Administrator\桌面\4.zip\1.exe probably infected with BACKDOOR.Trojan
>>C:\Documents and Settings\Administrator\桌面\4.zip\2.exe probably infected with MULDROP.Trojan
>>>C:\Documents and Settings\Administrator\桌面\4.zip\3.exe infected with Trojan.PWS.Lineage.3471
C:\Documents and Settings\Administrator\桌面\4.zip - archive contains infected objects

1688388728

检测到：木马程序 Backdoor.Win32.Agent.bqa        URL: http://bbs.kafan.cn/attachment.php?aid=126385/4.exe//ASPack

king6808

F:\9.11\4.zip >>ZIP >>4.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.11\4.zip >>ZIP >>1.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\9.11\4.zip >>ZIP >>3.exe - Win32/PSW.OnLineGames.YA 木马的变种

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4203
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Suspicious of Trojan-PSW.Game.1

4 Files scanned
0 Infected files found
4 Suspicious files found
0 Files cured
0 Files deleted