朋友机上抓的，挂的很多

shaw530

扫描一下，仅次5家报
AntiVir        7.6.0.35        7.0.1.16          2007-11-28  4.43   PCK/FSG

Dr.WEB         4.44.0.9170     2007.11.28        2007-11-28  6.17   Trojan.Hunder

卡巴斯基       5.5.10          2007.11.28        2007-11-28  11.40  Trojan.Win32.Agent.czg

SOPHOS         2.49.1          4.21              2007-11-28  7.83   Mal/Packer

VirusBuster    4.3.19:9        9.115.12/11.0     2007-11-28  1.93   Packed/FSG

Graybird

Starting the file scan:

Begin scan in 'E:\virus.zip'
E:\virus.zip
  [0] Archive type: ZIP
  --> н¨Îļþ¼Ð/pagefile.pif
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
      [INFO]      The file was deleted!

will

avast! 飘过~

附上两个衍生物

[ 本帖最后由 yimike 于 2007-11-28 20:20 编辑 ]

qigang

RX20.20.21过，等待查杀中。。

googlehack

肯定是新病毒了……

Graybird

Starting the file scan:

Begin scan in 'E:\新建文件夹.zip'
E:\新建文件夹.zip
  [0] Archive type: ZIP
  --> LSASS.EXE
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
      [INFO]      The file was deleted!

Graybird

原帖由 Graybird 于 2007-11-28 23:14 发表
Starting the file scan:

Begin scan in 'E:\新建文件夹.zip'
E:\新建文件夹.zip
  [0] Archive type: ZIP
  --> LSASS.EXE
      [DETECTION] File has been compressed with an unusual runtime compressio ...

Filename	Result
LSASS.EXE	MALWARE

The file 'LSASS.EXE' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Autorun.ES. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: PCK/FSG.

Filename	Result
netcfg.dll	MALWARE

The file 'netcfg.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Agent.czh. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

dreamsfar

ggcn

奇怪了，红伞没报呀，楼主怎么说红伞报了？

shaw530

原帖由 ggcn 于 2007-11-29 08:44 发表
奇怪了，红伞没报呀，楼主怎么说红伞报了？

那你可能没开高启发