還沒報的,快點上報吧...

蔚藍領域

木馬.....

Graybird

Starting the file scan:

Begin scan in 'E:\TEST 20.zip'
E:\TEST 20.zip
  [0] Archive type: ZIP
    --> TEST 20.scr
      [1] Archive type: RAR SFX (self extracting)
      --> svchostc.exe
          [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.idd
      [INFO]      The file was deleted!

BING126

NOD32扫描后仍没反应！

promised

C:\ABC\TEST_20.zip:\TEST 20.scr\svchostc.exe - 特征码 'Trojan-Spy.Win32.Banker.ahy' 被发现
        C:\ABC\TEST_20.zip
        C:\ABC\TEST_20.zip\TEST 20.scr
        C:\ABC\TEST_20.zip\TEST 20.scr\SfxArchiveData
        C:\ABC\TEST_20.zip\TEST 20.scr\SfxArchiveData\nice.jpg
        C:\ABC\TEST_20.zip\TEST 20.scr\SfxArchiveData\svchostc.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\TEST_20.zip\TEST 20.scr\SfxArchiveData\svchostc.exe

taopaolang1982

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.ipc        File: C:\Documents and Settings\Owner\×ÀÃæ\TEST_20.zip/TEST 20.scr//data.rar/svchostc.exe//UPack

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Agent.zri   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.52

SONGBOWEN

24:11:2007 20:19:38 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\Administrator\桌面\TEST 20.exe
File scanned: C:\Documents and Settings\Administrator\桌面\TEST 20.exe - SIGNATURE FOUND "Trojan-Spy.Win32.Banker.ahy"
24:11:2007 20:19:38 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

SONGBOWEN

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TEST 20.exe'
C:\Documents and Settings\Administrator\桌面\TEST 20.exe
  [0] Archive type: RAR SFX (self extracting)
  --> svchostc.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.idd
      [WARNING]   The file was ignored!

检测到：木马程序 Trojan-PSW.Win32.OnLineGames.ipc        文件: C:\Documents and Settings\Administrator\桌面\TEST 20.exe//data.rar/svchostc.exe//UPack

都能发现啊

wangfeng66

C:\TEST 20.zip\TEST 20.scr - infected with Trojan.Starter.275

Archive contains an infected item


DRWEB  4.44  0917