5个[MD5: 97D76C EF9561 0CA904 7B6E17 AD2A63]

promised

C:\ABC\样本\7793EF25.DLL - 特征码 'Virus.Win32.AutoRun.ic' 被发现
C:\ABC\样本\792405C6.EXE - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\样本\GenProtect.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\样本\K11958304222.EXE - 特征码 'Trojan-Spy.Win32.Agent.hz' 被发现
C:\ABC\样本\lin1g.exe - 特征码 'Packer.Malware.NSAnti.J' 被发现

Graybird

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> lin1g.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> K11958304222.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 792405C6.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 7793EF25.DLL
      [DETECTION] Is the Trojan horse TR/Autorun.CA
  --> GenProtect.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年11月24日  10:56
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

秋叶濛濛

原帖由 Graybird 于 2007-11-24 10:56 发表
Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> lin1g.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> K11958304222.EXE
      [D ...

省的我扫了...

天灰

大蜘蛛5个全灭

样本.rar\lin1g.exe;C:\Documents and Settings\77\My Documents\样本(1).rar;Trojan.Nsanti.Packed;;
样本.rar\K11958304222.EXE;C:\Documents and Settings\77\My Documents\样本(1).rar;Trojan.PWS.Wsgame.origin;;
样本.rar\792405C6.EXE;C:\Documents and Settings\77\My Documents\样本(1).rar;Trojan.Popwin.679;;
样本.rar\7793EF25.DLL;C:\Documents and Settings\77\My Documents\样本(1).rar;Trojan.Popwin.origin;;
样本.rar\GenProtect.dll;C:\Documents and Settings\77\My Documents\样本(1).rar;Trojan.PWS.Wsgame.origin;;
样本.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

[ 本帖最后由 天灰 于 2007-11-24 11:23 编辑 ]

浪滔天

卡巴 7.0.1.282 BETA 高启发
4个

已删除: 病毒 Heur.Trojan.Generic        文件: F:\病毒样本\样本.rar/lin1g.exe
已删除: 病毒 Virus.Win32.AutoRun.afk        文件: F:\病毒样本\样本.rar/792405C6.EXE
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ipf        文件: F:\病毒样本\样本.rar/K11958304222.EXE//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ipg        文件: F:\病毒样本\样本.rar/GenProtect.dll

风野胤

5
R:\��.rar » RAR » lin1g.exe - probably a variant of Win32/Pacex.Gen virus
R:\��.rar » RAR » K11958304222.EXE - a variant of Win32/PSW.OnLineGames.YA trojan
R:\��.rar » RAR » 792405C6.EXE - Win32/TrojanDownloader.Flux trojan
R:\��.rar » RAR » 7793EF25.DLL - Win32/TrojanDownloader.Flux trojan
R:\��.rar » RAR » GenProtect.dll - a variant of Win32/PSW.OnLineGames.HCV trojan

will

"Win32:AutoRun-IC" has been found in "7793EF25.DLL".
"Win32:AutoRun-IC" has been found in "792405C6.EXE\[NsPack]\[Embedded#05010]".
"Win32:OnLineGames-BHW [Trj]" has been found in "GenProtect.dll".
"Win32:OnLineGames-BHW [Trj]" has been found in "K11958304222.EXE\[Upack]\[Embedded#4060]".

jimmyleo

D:\DOWNLOAD\VIRUSSCAN\792405C6.EXE ... Found trojan or variant New Malware.dm !!!
D:\DOWNLOAD\VIRUSSCAN\7793EF25.DLL ... Found the BackDoor-DKA trojan !!!




PS 风野好久不见~

flykiss

C:\Documents and Settings\Administrator\桌面\样本.rar\lin1g.exe - infected with Trojan.Nsanti.Packed
C:\Documents and Settings\Administrator\桌面\样本.rar\K11958304222.EXE - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本.rar\792405C6.EXE - infected with Trojan.Popwin.679
C:\Documents and Settings\Administrator\桌面\样本.rar\7793EF25.DLL - infected with Trojan.Popwin.origin
C:\Documents and Settings\Administrator\桌面\样本.rar\GenProtect.dll - infected with Trojan.PWS.Wsgame.origin

Archive contains 5 infected items

DR.WEB 4.44.1 ~~

jimmyleo

Trojan.Nsanti.Packed
drweb……