转一个[FD823A]

promised

wangfeng66

F:\SVCH0ST.rar\SVCH0ST.EXE - infected with Trojan.PWS.Maran

Archive contains an infected item

DRWEB 4.44

红心王子

2007-10-6        18:30:31        1191666631        SYSTEM        1276        Sign of "Win32:Maran-AS [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=136231\SVCH0ST.EXE\[NsPack]\[NsPack]\[Embedded#IPFILTER]\[NsPack]\[NsPack]\[NsPack]" file.

風中Dè殘雲

K7KAV

已检测到: 木马程序 Trojan-PSW.Win32.Maran.qk        URL: http://bbs.kafan.cn/attachment.p ... EXE//NSPack//NSPack
已检测到: 木马程序 Trojan-PSW.Win32.Maran.qk        URL: http://bbs.kafan.cn/attachment.p ... ack//NSPack//NSPack
已检测到: 木马程序 Trojan-PSW.Win32.Maran.qk        文件: C:\Documents and Settings\Administrator\桌面\SVCH0ST.rar/SVCH0ST.EXE//NSPack//NSPack


kav2007


[ 本帖最后由 風中Dè殘雲 于 2007-10-6 18:55 编辑 ]

Love=卡巴+费尔

光华

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 325
Paranoia Database - 6878
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\SVCH0ST.EXE

C:\Documents and Settings\uhthn\Desktop\SVCH0ST.EXE - Infected MalwareDetector:Win32.Trojan-Downloader.Agent.3

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

king6808

已删除：木马程序 Trojan-PSW.Win32.Maran.qk        文件　: G:\10.6\SVCH0ST.rar/SVCH0ST.EXE//NSPack//NSPack

微点卫士

解压马上蓝屏，这毒厉害 。上报

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\SVCH0ST.rar'
C:\Users\morgan\Documents\
  SVCH0ST.rar
    [0] Archive type: RAR
    --> SVCH0ST.EXE
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

timhas266

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=136231 is infected with Trojan-PSW.Win32.Maran.qk virus