4个[MD5: 5A6224 6CCA95 DC2728 261411]

promised

sophos
C:\ABC\x\iexplroer.dll
C:\ABC\x\iexplroer.exe
C:\ABC\x\iexplroer.exe\FILE:0000
>>> File "C:\ABC\x\iexplroer.exe" has been identified as suspicious 'Sus/Malware-A'.
C:\ABC\x\MSSCKETS.DLL
>>> File "C:\ABC\x\MSSCKETS.DLL" has been identified as suspicious 'Sus/Malware-A'.
C:\ABC\x\upbho.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\x\upbho.exe

Graybird

Starting the file scan:

Begin scan in 'E:\样本1.rar'
E:\样本1.rar
  [0] Archive type: RAR
  --> MSSCKETS.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> upbho.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Perez.E.1
  --> iexplroer.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> iexplroer.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!

上报~

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��1.rar'
C:\Users\morgan\Documents\
  ��1.rar
    [0] Archive type: RAR
    --> MSSCKETS.DLL
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> upbho.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Perez.E.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> iexplroer.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
      --> iexplroer.exe
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年12月1日  00:27
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      1 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      2 Archives were scanned
      4 Warnings
      0 Notes

sam.to

已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Perez.e        檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/MSSCKETS.DLL
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Perez.e        檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/upbho.exe//FSG


两个不报,已上报

BING126

扫描开始时间: 2007-12-1 16:53:42
扫描日志
NOD32 版本 2696 (20071130) NT
命令行: C:\Documents and Settings\Administrator\桌面\样本1.rar

日期: 2007年12月1日  时间: 16:53:44
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\样本1.rar
C:\Documents and Settings\Administrator\桌面\样本1.rar ?RAR ?iexplroer.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
已扫描文件数量: 4
已发现病毒数量: 1
完成时间: 16:53:45 总共扫描时间: 1 秒 (00:00:01)

注意:
[7] 文件可能感染了未知病毒。

gogo8989

FS报

左手心

C:\Documents and Settings\c\桌面\样本1.rar &raquo; RAR &raquo; iexplroer.exe - probably unknown NewHeur_PE virus - was a part of the deleted object
C:\Documents and Settings\c\桌面\样本1.rar - probably unknown NewHeur_PE virus - deleted - quarantined

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： AdWare.Win32.Agent.ziq   
病毒： AdWare.Win32.Agent.ziq   
病毒： Win32.Downloader.m      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.20.52

lmzlll

木马名称:Trojan-Downloader.Win32.Perez.b

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\样本1\MSSCKETS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\样本1\IEXPLROER.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\IEXPLROER.EXE
2) C:\WINDOWS\SYSTEM32\IEXPLROER.DLL
3) C:\WINDOWS\SYSTEM32\IEXPLROER.DLL
是否删除木马程序及其衍生物?


木马名称:Trojan-Downloader.Win32.Perez.b

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\_TMP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

傻猪猪米走鸡

Scan Log
Version of virus signature database: 2696 (20071130)
Date: 2007-12-2  Time: 0:11:50
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\样本1.rar
C:\Documents and Settings\Administrator\桌面\样本1.rar » RAR » iexplroer.exe - probably unknown NewHeur_PE virus [7]
Number of scanned objects: 4
Number of threats found: 1
Time of completion: 00:11:52  Total scanning time: 2 sec (00:00:02)
Notes:
[7] Object is probably infected with an unknown virus.