继续挖，貌似没几个报的[MD5: E0E564 E36398]

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.cyr    檔案: C:\Documents and Settings\kato9096\桌面\XQDBHO.rar/XQDBHO5.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.cxq    檔案: C:\Documents and Settings\kato9096\桌面\XQDBHO.rar/XQDBHO.dll//PE_Patch.UPX//UPX

碧水寒潭

Start of the scan: 2007年11月16日  20:15

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\样本.rar
  [0] Archive type: RAR
  --> XQDBHO5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> XQDBHO.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.cxq
      [INFO]      The file was deleted!


End of the scan: 2007年11月16日  20:15
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
      3 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 878
Paranoia Database - 48756
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\XQDBHO5.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.17
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\XQDBHO.dll - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.17

2 Files scanned
0 Infected files found
2 Suspected files found
0 Files disinfected
0 Files deleted