U

zlq7zj

几个小 东西

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\folder.rar'
C:\Users\morgan\Documents\
  folder.rar
    [0] Archive type: RAR
    --> folder.exe
    --> mwtkwro.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> RECYCLER\RECYCLER\autorun.exe
        [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> autorun.inf
        [DETECTION] Is the Trojan horse TR/Agent.amp
        [WARNING]   Infected files in archives cannot be repaired!
    --> desktop.exe
        [DETECTION] Contains detection pattern of the worm WORM/VB.GB
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

Nerazzurri

扫描进行于：2007-10-18 23:08:10
扫描日志
NOD32版本 2600 (20071018) NT
命令行： C:\Documents and Settings\Deepin\桌面\folder.rar

日期： 18.10.2007  时间：23:08:13
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Deepin\桌面\folder.rar
C:\Documents and Settings\Deepin\桌面\folder.rar >>RAR >>mwtkwro.exe - Win32/PSW.OnLineGames.UW 木马
C:\Documents and Settings\Deepin\桌面\folder.rar >>RAR >>RECYCLER\RECYCLER\autorun.exe - Win32/PcClient.WI 木马的变种
C:\Documents and Settings\Deepin\桌面\folder.rar >>RAR >>desktop.exe - Win32/VB.NIS 蠕虫
已扫描的文件数目：6
已发现的病毒数目：3
完成时间： 23:08:13 总扫描时间：0 秒 (00:00:00)

Nerazzurri

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Deepin\桌面\folder.rar'
C:\Documents and Settings\Deepin\桌面\folder.rar
  [0] Archive type: RAR
  --> mwtkwro.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> RECYCLER\RECYCLER\autorun.exe
      [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
  --> autorun.inf
      [DETECTION] Is the Trojan horse TR/Agent.amp
  --> desktop.exe
      [DETECTION] Contains detection pattern of the worm WORM/VB.GB
      [INFO]      The file was deleted!

The EQs

C:\Documents and Settings\Don johnson\桌面\folder.rar » RAR » mwtkwro.exe - Win32/PSW.OnLineGames.UW trojan
C:\Documents and Settings\Don johnson\桌面\folder.rar » RAR » RECYCLER\RECYCLER\autorun.exe - a variant of Win32/PcClient.WI trojan
C:\Documents and Settings\Don johnson\桌面\folder.rar » RAR » desktop.exe - Win32/VB.NIS worm

mofunzone

A listing of files alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
152543          folder.exe          121.77 KB          KNOWN CLEAN


Please find a detailed report concerning each individual sample below:
Filename         Result
folder.exe          KNOWN CLEAN

The file 'folder.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Ostrosoft Internet Tools 6.2'.

remind_me

咖啡都认识。。。估计大部分都认识的说～～～

zlq7zj

貌似有4个

wangjay1980

detected: virus Virus.Win32.AutoRun.f        File: C:\Documents and Settings\Owner\×ÀÃæ\folder.rar/mwtkwro.exe
detected: Trojan program Backdoor.Win32.PcClient.wi        File: C:\Documents and Settings\Owner\×ÀÃæ\folder.rar/RECYCLER\RECYCLER\autorun.exe
detected: Trojan program Trojan.Win32.Agent.amp        File: C:\Documents and Settings\Owner\×ÀÃæ\folder.rar/autorun.inf
detected: virus Worm.Win32.VB.dz        File: C:\Documents and Settings\Owner\×ÀÃæ\folder.rar/desktop.exe//PE_Patch.UPX//UPX

欠妳緈諨