据说是最新的样本~~~~~~~~~~~~

cown

一共13个~~~试试你的杀软~~~~~~~~

说是江民KV2007一个也查不出

[ 本帖最后由 02170511 于 2007-11-26 17:16 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\13.rar'
E:\13.rar
  [0] Archive type: RAR
  --> 13\11.22_1.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 13\11.22_2.exe
      [DETECTION] Is the Trojan horse TR/Conime.8192
  --> 13\11.22_3.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
  --> 13\11.22_4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 13\11.22_5.exe
      [DETECTION] Is the Trojan horse TR/Agent.cue
  --> 13\11.22_6.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hwt
  --> 13\11.22_7.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 13\11.22_9.exe
      [DETECTION] Is the Trojan horse TR/Agent.2560.156
  --> 13\11.22_10.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Small.PD.5 Backdoor server programs
  --> 13\11.22_11.exe
      [DETECTION] Is the Trojan horse TR/Agent.6656.142
  --> 13\11.22_12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 13\11.22_13.exe
      [DETECTION] Is the Trojan horse TR/Agent.4096.151
      [INFO]      The file was deleted!


End of the scan: 2007年11月26日  12:17
Used time: 00:24 min

The scan has been done completely.

      0 Scanning directories
     14 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

cown

你好有速度哦~~~~~~~~~是小红伞？？？？

Graybird

是的~

Graybird

The file '11.22_8.exe' has been determined to be 'DAMAGED FILE (UNKNOWN)'. In particular this means that this file is damaged and not working properly. We could not find any malicious content. However the heuristic detection module may still detect this particular file even though it is damaged. In that case we will not adjust and remove detection for this damaged file.

cown

茫然中~~~~~~~~~~~~~~~~

sam.to

学校的nod32杀到,但我不知道卡巴杀不杀到，我已上报给卡巴

[ 本帖最后由 kato9096 于 2007-11-26 12:28 编辑 ]

baba

扫描日志
NOD32版本 2684 (20071125) NT
命令行： C:\Documents and Settings\Administrator\桌面\13.rar

日期： 26.11.2007  时间：12:22:09
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Administrator\桌面\13.rar
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_1.exe - Win32/TrojanDownloader.Delf.NHL 木马的变种
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_2.exe - 可能是 Win32/TrojanDownloader.Small 木马 的一个变种
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_3.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_6.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_7.exe - Win32/TrojanDownloader.SMW.A 木马
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_9.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator\桌面\13.rar >>RAR >>13\11.22_13.exe - Win32/TrojanDownloader.Small.NEC 木马的变种
已扫描的文件数目：13
已发现的病毒数目：7
完成时间： 12:22:23 总扫描时间：14 秒 (00:00:14)

注意：
[7] 该文件可能感染上未知病毒。

leonfg

ESET高启出两个。红伞更强，好像没启就出来了

挪威的冬天

信息        2007-11-26  12:58:54        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-11-26  12:58:54        C:\Documents and Settings\Norways Winter\桌面\13.rar\13\11.22_13.exe        Win32.Troj.OnLinesGameT.uv.90112        跳过，未处理       
病毒        2007-11-26  12:58:54        C:\Documents and Settings\Norways Winter\桌面\13.rar\13\11.22_7.exe        Win32.Hack.Huigezi.mk.14848        跳过，未处理       
病毒        2007-11-26  12:58:54        C:\Documents and Settings\Norways Winter\桌面\13.rar\13\11.22_6.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-11-26  12:58:54        C:\Documents and Settings\Norways Winter\桌面\13.rar\13\11.22_2.exe        Win32.TrojDownloader.Small.32768        跳过，未处理       
病毒        2007-11-26  12:58:54        C:\Documents and Settings\Norways Winter\桌面\13.rar\13\11.22_1.exe        Win32.TrojDownloader.Delf.14848        跳过，未处理