病毒

kp2006

已提取

[ 本帖最后由 promised 于 2007-10-9 21:55 编辑 ]

promised

C:\ABC\test.rar:\test.gif - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
C:\ABC\test.rar

        2 文件被扫描
          (1 压缩档 1 文件)
        1 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.000

promised

F-PROT Antivirus version 6.2.1
FRISK Software International (C) Copyright 1989-2007

Engine version: 4.3.3.49
Virus signatures: 200710041535e63534e608f23b7de3e198c8eca81208
                  (C:\Documents and Settings\All Users.WINDOWS\Application Data\FRISK Software\F-PROT Antivirus for Windows\antivir.def)

[Found possible virus] <W32/Threat-HLLIN-Slipper-based!Maximus (not disinfectable)>         C:\ABC\test.rar->test.gif
[Contains infected objects]        C:\ABC\test.rar


Results:

Files: 1
Skipped files: 0
MBR/boot sectors checked: 0
Objects scanned: 2
Infected objects: 1
Files with errors: 0
Disinfected: 0

The EQs

C:\Documents and Settings\Don johnson\桌面\test.rar &raquo; RAR &raquo; test.gif - probably a variant of Win32/Genetik trojan

wangjay1980

detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\test.rar/test.gif//NSPack

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 352
Paranoia Database - 7002
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\test.gif

C:\Documents and Settings\uhthn\Desktop\test.gif - Infected MalwareDetector:Win32.Trojan-Downloader.Agent.3

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files cured
1 Files deleted

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\test.rar'
C:\Users\morgan\Documents\
  test.rar
    [0] Archive type: RAR
    --> test.gif
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Users\morgan\Documents\2007109213425259.rar'
C:\Users\morgan\Documents\
  2007109213425259.rar
    [0] Archive type: RAR
    --> ÍøÕ¾²¡¶¾Ñù±¾\s[1].rar
        [1] Archive type: RAR
        --> s[1].htm
            [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
            [WARNING]   Infected files in archives cannot be repaired!
    --> ÍøÕ¾²¡¶¾Ñù±¾\s[2].rar
        [1] Archive type: RAR
        --> s[2].htm
            [DETECTION] Contains detection pattern of the HTML script virus HTML/ADODB.Exploit.Gen
            [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!