快餐X3[MD5: BB285B C9CE50 9A5DDC]

promised

微点卫士

木马名称:Backdoor.Win32.Bifrose.ayc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\OPEN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.chg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\OOPE1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Agent.ecw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\OPENGL.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

Nerazzurri

扫描进行于：2007-10-3 17:17:25
扫描日志
NOD32版本 2568 (20071003) NT
命令行： F:\Documents and Settings\kafan\桌面\样本8.rar

日期： 3.10.2007  时间：17:17:28
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：F:\Documents and Settings\kafan\桌面\样本8.rar
F:\Documents and Settings\kafan\桌面\样本8.rar >>RAR >>open.exe - 未查明的 NewHeur_PE 病毒 [7]
F:\Documents and Settings\kafan\桌面\样本8.rar >>RAR >>oope1.EXE - Win32/TrojanDownloader.Small.NXD 木马
F:\Documents and Settings\kafan\桌面\样本8.rar >>RAR >>opengl.sys - Win32/Lurka.A 病毒
已扫描的文件数目：3
已发现的病毒数目：3
完成时间： 17:17:29 总扫描时间：1 秒 (00:00:01)

注意：
[7] 该文件可能感染上未知病毒。

=======================


Starting the file scan:

Begin scan in 'F:\Documents and Settings\kafan\桌面\样本8.rar'
F:\Documents and Settings\kafan\桌面\样本8.rar
  [0] Archive type: RAR
  --> open.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pakes Backdoor server programs
  --> oope1.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> opengl.sys
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.YPB.18 Backdoor server programs
      [INFO]      The file was deleted!

红心王子

2007-10-3        17:18:55        1191403135        Administrator        604        Sign of "Win32:Bifrose-IV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本8.rar\open.exe\[Embedded#4f04]\[eXPressor]" file.  
2007-10-3        17:19:01        1191403141        Administrator        604        Sign of "Win32:Agent-IPV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\样本8.rar\oope1.EXE\[NsPack]" file.

ivan_t

2007-10-3        17:38:07       
D:\Internet\Temp\lebs8p8x.rar\OPEN.EXE        W32/Lurka.a (病毒)

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\样本8.rar'
C:\Documents and Settings\tim\桌面\样本8.rar
  [0] Archive type: RAR
  --> open.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pakes Backdoor server programs
  --> oope1.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> opengl.sys
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.YPB.18 Backdoor server programs
      [INFO]      A backup was created as '473bcab3.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 289
Paranoia Database - 6697
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\open.exe - Suspected Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\oope1.EXE - Infected MalwareDetector:Trojan-Downloader.Agent.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\opengl.sys - Suspected Trojan-Downloader.Small.2

3 Files scanned
1 Infected files found
2 Suspected files found
0 Files cured
1 Files deleted

liunanyuan

...
20071003 121640        在 'C:\Documents and Settings\Administrator\桌面\样本8.rar\open.exe' 中检测到 病毒/间谍软件 'W32/Lurka-A' 。
20071003 121640        在 'C:\Documents and Settings\Administrator\桌面\样本8.rar\oope1.EXE' 中检测到 病毒/间谍软件 'Mal/Packer' 。
20071003 121640        在 'C:\Documents and Settings\Administrator\桌面\样本8.rar\opengl.sys' 中检测到 病毒/间谍软件 'W32/Lurka-A' 。
    ...
      (3 个项目)

king6808

已删除：木马程序 Backdoor.Win32.Bifrose.ago        文件　: G:\10.3\样本8.rar/open.exe
已删除：木马程序 Trojan-Downloader.Win32.Small.fso        文件　: G:\10.3\样本8.rar/oope1.EXE

taihuxian

Virus: Backdoor.Win32.Bifrose.ago (2x), Trojan-Downloader.Win32.Small.fso

Virus found while downloading Web content.

Address: bbs.kafan.cn