白宫

Nblock

多运行下 微点有反应

[ 本帖最后由 Nblock 于 2007-9-11 11:57 编辑 ]

平淡

AhnLab-V3	2007.9.11.0	2007.09.10	-
AntiVir	7.6.0.5	2007.09.10	-
Authentium	4.93.8	2007.09.11	-
Avast	4.7.1043.0	2007.09.10	-
AVG	7.5.0.485	2007.09.10	-
BitDefender	7.2	2007.09.11	-
CAT-QuickHeal	9.00	2007.09.10	-
ClamAV	0.91.2	2007.09.11	-
DrWeb	4.33	2007.09.10	-
eSafe	7.0.15.0	2007.09.04	suspicious Trojan/Worm
eTrust-Vet	31.1.5124	2007.09.10	-
Ewido	4.0	2007.09.10	-
FileAdvisor	1	2007.09.11	-
Fortinet	3.11.0.0	2007.09.11	-
F-Prot	4.3.2.48	2007.09.11	-
F-Secure	6.70.13030.0	2007.09.11	-
Ikarus	T3.1.1.12	2007.09.11	Worm.Win32.Autoit.T
Kaspersky	4.0.2.24	2007.09.11	-
McAfee	5116	2007.09.10	-
Microsoft	1.2803	2007.09.10	-
NOD32v2	2520	2007.09.11	-
Norman	5.80.02	2007.09.10	-
Panda	9.0.0.4	2007.09.11	-
Prevx1	V2	2007.09.11	-
Rising	19.40.10.00	2007.09.11	-
Sophos	4.21.0	2007.09.11	-
Sunbelt	2.2.907.0	2007.09.11	-
Symantec	10	2007.09.11	-
TheHacker	6.1.10.183	2007.09.10	-
VBA32	3.12.2.4	2007.09.09	-
VirusBuster	4.3.26:9	2007.09.10	-
Webwasher-Gateway	6.0.1	2007.09.10	Worm.Win32.ModifiedUPX.gen!90 (suspicious)

xiaosdsd

运行了一下，光驱被打开，自己提示有病毒

1688388728

调IE

[ 本帖最后由 1688388728 于 2007-9-11 14:05 编辑 ]

king6808

过nod32

wangjay1980

#####.exe_ - Trojan-Downloader.Win32.FlyStudio.f

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4203
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\白宮是魔鬼.exe

C:\Documents and Settings\uhthn\Desktop\白宮是魔鬼.exe - Suspicious of Trojan-Downloader.Small.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

capsshift

红伞报了。

AVEWIN32.DLL : 7.6.0.5     2789888 Bytes   2007/8/29 10:09:10

Start of the scan: 2007年9月11日  21:58

Starting the file scan:

Begin scan in 'C:\Users\lenovo\Downloads\白宫是魔鬼.rar'
C:\Users\lenovo\Downloads\白宫是魔鬼.rar
  [0] Archive type: RAR
  --> °×¹¬ÊÇħ¹í.exe
      [DETECTION] Is the Trojan horse TR/Dldr.FlyStudio.F
      [INFO]      The file was moved to 'ad15fab3.qua'!


End of the scan: 2007年9月11日  21:58
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

[ 本帖最后由 capsshift 于 2007-9-11 22:00 编辑 ]

Nblock

其他的呢

ssy275

Begin scan in 'C:\ssy\白宫是魔鬼.rar'

  [0] Archive type: RAR
  --> °×¹¬ÊÇħ¹í.exe
      [DETECTION] Is the Trojan horse TR/Dldr.FlyStudio.F
      [INFO]      The file was moved to 'ad15fab3.qua'!