偶也来几个样本

gzg

扫扫看

lvjie

NOD32

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\新建文件夹.rar'
C:\Documents and Settings\Administrator\My Documents\
  新建文件夹.rar
    [0] Archive type: RAR
    --> н¨Îļþ¼Ð\0.exe
        [DETECTION] Is the Trojan horse TR/Agent.41984.14
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\100.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\101.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\102.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\103.exe
        [DETECTION] Is the Trojan horse TR/PSW.Delf.aaw
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\104.exe
        [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
        [WARNING]   Infected files in archives cannot be repaired!
    --> н¨Îļþ¼Ð\wd0618.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月20日  23:27
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      8 Warnings
      0 Notes

绅博周幸

Begin scan in 'D:\н¨Îļþ¼Ð.rar'
D:\н¨Îļþ¼Ð.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\0.exe
      [DETECTION] Is the Trojan horse TR/Agent.41984.14
  --> н¨Îļþ¼Ð\100.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> н¨Îļþ¼Ð\101.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> н¨Îļþ¼Ð\102.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> н¨Îļþ¼Ð\103.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.aaw
  --> н¨Îļþ¼Ð\104.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> н¨Îļþ¼Ð\wd0618.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!


End of the scan: 2007年9月20日  23:11
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

红心王子

2007-9-21        14:47:35        1190357255        Administrator        3228        Sign of "Win32:Delf-EPC [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\0.exe" file.  
2007-9-21        14:47:38        1190357258        Administrator        3228        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\100.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-21        14:47:38        1190357258        Administrator        3228        Sign of "Win32:OnLineGames-SR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\100.exe" file.  
2007-9-21        14:47:38        1190357258        Administrator        3228        Sign of "Win32:Onlinegames-BBY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\101.exe\[UPX]\[Embedded#1e60]" file.  
2007-9-21        14:47:39        1190357259        Administrator        3228        Sign of "Win32:Onlinegames-ASX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\104.exe\[UPX]\[Embedded#2260]" file.  
2007-9-21        14:47:39        1190357259        Administrator        3228        Sign of "Win32:Onlinegames-BCD [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\wd0618.exe\[UPX]" file.

啊弥陀佛

程序: C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\新建文件夹\102.EXE 木马程序生成以下文件: 1) C:\PROGRAM FILES\NETMEETING\RAVZTMON.EXE 2) C:\PROGRAM FILES\NETMEETING\RAVZTMON.DAT 是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\新建文件夹\WD0618.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSIMMS32.EXE
2) C:\WINDOWS\SYSTEM32\MSIMMS32.DLL
是否删除木马程序及其衍生物?

cmf0707

还没下载下来就被驱逐舰干掉了！

wangjay1980

detected: virus Virus.Win32.AutoRun.ms        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\0.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ddd        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\100.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cav        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\101.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dbr        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\102.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Delf.aaw        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\103.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wp        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\104.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dez        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\wd0618.exe//PE_Patch.UPX//UPX

zszzd

KILL7.1 五只

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 164
Paranoia Database - 5417
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\o

C:\Documents and Settings\uhthn\Desktop\o\0.exe - Infected with SDB:Win32.Virus.autorun.ms - Deleted
C:\Documents and Settings\uhthn\Desktop\o\100.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\o\101.exe - Infected with SDB:Trojan-PSW.OnLineGames.cav - Deleted
C:\Documents and Settings\uhthn\Desktop\o\102.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\o\103.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\o\104.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\o\wd0618.exe - Suspicious of Trojan-PSW.Game.1

7 Files scanned
2 Infected files found
5 Suspicious files found
0 Files cured
2 Files deleted