7个，avast飘2个

qianwenxiang

Win32:Agent-JZN [Trj] | 75mn1.dll
不报 | ctfmen.exe
Win32:QQRob-BK [Trj] ,Win32:QQRob-BK [Trj],Win32:Trojano-2575 [Trj]| RpcS.exe
Win32:QQRob-BK [Trj] | RpcS.Dll
不报 | winsys16_071108.dllWin32:Agent-ICL [Trj] | winsys32_071108.dll
Win32:Agent-GZY [Wrm]|SysIdt0.dll

Graybird

Starting the file scan:

Begin scan in 'E:\system32.rar'
E:\system32.rar
  [0] Archive type: RAR
  --> winsys32_071108.dll
      [DETECTION] Is the Trojan horse TR/Baidu.L
  --> 75mn1.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ctfmen.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> RpcS.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> RpcS.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
  --> SysIdt0.dll
      [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
  --> winsys16_071108.dll
      [DETECTION] Is the Trojan horse TR/Spy.Pophot.WU
      [INFO]      The file was deleted!

sweeb

金山砍5

wangjay1980

deleted: Trojan program Trojan-Spy.Win32.Pophot.wu        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/winsys32_071108.dll
deleted: Trojan program Trojan-Downloader.Win32.Delf.cug        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/ctfmen.exe//NSPack
deleted: Trojan program Backdoor.Win32.Delf.bkt        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/RpcS.dll
deleted: Trojan program Backdoor.Win32.Delf.bvf        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/RpcS.exe//SimplePack
deleted: Trojan program Backdoor.Win32.Sheldor.n        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/SysIdt0.dll
deleted: Trojan program Trojan-Spy.Win32.Pophot.wu        File: C:\Documents and Settings\Owner\×ÀÃæ\system32.rar/winsys16_071108.dll

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.cug    檔案: C:\Documents and Settings\kato9096\桌面\163982\ctfmen.exe//NSPack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.bkt    檔案: C:\Documents and Settings\kato9096\桌面\163982\RpcS.dll
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.bvf    檔案: C:\Documents and Settings\kato9096\桌面\163982\RpcS.exe//SimplePack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Sheldor.n    檔案: C:\Documents and Settings\kato9096\桌面\163982\SysIdt0.dll
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.wu    檔案: C:\Documents and Settings\kato9096\桌面\163982\winsys16_071108.dll
已刪除: 特洛伊木馬程式 Trojan-Spy.Win32.Pophot.wu    檔案: C:\Documents and Settings\kato9096\桌面\163982\winsys32_071108.dll

有一个不杀,已上报

sam.to

原帖由 kato9096 于 2007-11-29 23:14 发表
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.cug    檔案: C:\Documents and Settings\kato9096\桌面\163982\ctfmen.exe//NSPack
已刪除: 特洛伊木馬程式 Backdoor.Win32.Delf.bkt    檔案: C:\Documents ...

Hello.

New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

--
Regards, Ilya Goncharov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

dukudanxiao

C:\Documents and Settings\wyj\桌面\system32.rar ?RAR ?75mn1.dll - Win32/TrojanDownloader.Agent.NPO 特洛伊木马
C:\Documents and Settings\wyj\桌面\system32.rar ?RAR ?ctfmen.exe - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\wyj\桌面\system32.rar ?RAR ?RpcS.dll - Win32/PSW.QQRob.NAQ 特洛伊木马 的变种
C:\Documents and Settings\wyj\桌面\system32.rar ?RAR ?RpcS.exe - Win32/PSW.QQRob.NAQ 特洛伊木马 的变种

xemacs

费尔4个

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49298
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\winsys32_071108.dll - Infected WIN32.TROJAN.AGENT.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\75mn1.dll - Suspected TROJAN-DOWNLOADER.AGENT.1
C:\Documents and Settings\Uhthn\Desktop\New Folder\ctfmen.exe - Infected MaliciousScope:WIN32.TROJAN-DOWNLOADER.AGENT.3 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\RpcS.dll - Infected WIN32.BACKDOOR.DELF.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\RpcS.exe - Infected WIN32.BACKDOOR.DELF.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\SysIdt0.dll - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)
C:\Documents and Settings\Uhthn\Desktop\New Folder\winsys16_071108.dll - Infected WIN32.VIRUS.AUTORUN.5 - Deleted

7 Files scanned
5 Infected files found
2 Suspected files found
0 Files disinfected
5 Files deleted

ggcn

Begin scan in 'C:\Documents and Settings\Administrator\桌面\system32.rar'
C:\Documents and Settings\Administrator\桌面\system32.rar
  [0] Archive type: RAR
  --> winsys32_071108.dll
      [DETECTION] Is the Trojan horse TR/Baidu.L
  --> 75mn1.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ctfmen.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> RpcS.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> RpcS.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
  --> SysIdt0.dll
      [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
  --> winsys16_071108.dll
      [DETECTION] Is the Trojan horse TR/Spy.Pophot.WU
      [INFO]      A backup was created as '47c25b82.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!