4个[MD5: C0428B D4D030 65A1EB A8BCCB]

promised

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本1.rar'
C:\Documents and Settings\Administrator\桌面\样本1.rar
  [0] Archive type: RAR
  --> ll2t.dll
      [DETECTION] Is the Trojan horse TR/BHO.Soshelp
  --> tpqrvi62.dll
      [DETECTION] Is the Trojan horse TR/Click.Agent.OA
  --> tpqrvi62.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> updata.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.aaa.1
      [INFO]      The file was deleted!


AVG Anti-Spyware - Scan Report
---------------------------------------------------------
+ Created at: 9:13:56 2007-12-8
+ Scan result:

C:\Documents and Settings\Administrator\桌面\样本1.rar/updata.exe -> Logger.Delf.bbk : No action taken.

::Report end

[ 本帖最后由 nosferatu 于 2007-12-8 09:15 编辑 ]

cageblue

F-Secure  7.1

Result: 4 malware foundTrojan.Win32.BHO.aax (virus)

• C:\Documents and Settings\®à­±\4_1.rar\ll2t.dll

Trojan-Clicker.Win32.Agent.oa (virus)

• C:\Documents and Settings\®à­±\4_1.rar\tpqrvi62.dll

Rootkit.Win32.Agent.po (virus)

• C:\Documents and Settings\®à­±\4_1.rar\tpqrvi62.sys

Trojan-Spy.Win32.Delf.bbk (virus)

• C:\Documents and Settings\®à­±\4_1.rar\updata.exe

秋叶濛濛

Starting the file scan:

Begin scan in 'F:\Virus\样本1.rar'
F:\Virus\样本1.rar
  [0] Archive type: RAR
  --> ll2t.dll
      [DETECTION] Is the Trojan horse TR/BHO.Soshelp
  --> tpqrvi62.dll
      [DETECTION] Is the Trojan horse TR/Click.Agent.OA
  --> tpqrvi62.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> updata.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.aaa.1
      [INFO]      The file was deleted!


End of the scan: 2007年12月8日  09:36
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

4


detected: virus         File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/tpqrvi62.dll
detected: virus


































































































































































































êÔ’|ÿ

啊弥陀佛

木马名称:Trojan.Win32.BHO.gw
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\LL2T.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Agent.eov
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\TPQRVI62.SYS
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Agent.hqt
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\UPDATA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

kkgh

星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Mnless.zvr  
病毒： Trojan.Win32.Mnless.zud  
病毒： RootKit.Win32.Mnless.t   
病毒： Trojan.DL.Win32.Agent.yjl

用户来源：互联网

软件版本：20.21.42

挪威的冬天

信息        2007-12-08  10:10:14        您此次查毒共查出3个病毒以及危险代码                       
信息        2007-12-08  10:10:14        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件6个                       
信息        2007-12-08  10:10:14        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-08  10:10:14        C:\Documents and Settings\Norways Winter\桌面\样本1.rar\updata.exe        Win32.Troj.Delf.139264        跳过，未处理       
病毒        2007-12-08  10:10:14        C:\Documents and Settings\Norways Winter\桌面\样本1.rar\tpqrvi62.sys        Win32.Troj.Agent.12288        跳过，未处理       
病毒        2007-12-08  10:10:14        C:\Documents and Settings\Norways Winter\桌面\样本1.rar\tpqrvi62.dll        Win32.Troj.Clicker.oa.14848        跳过，未处理

欠妳緈諨

D:\病毒测试\未解压样本\样本1.rar » RAR » tpqrvi62.sys - a variant of Win32/Agent.ABE trojan
D:\病毒测试\未解压样本\样本1.rar » RAR » updata.exe - probably a variant of Win32/Spy.Delf trojan

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1056
Paranoia Database - 49719
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\ll2t.dll - Infected TROJAN.AGENT.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\tpqrvi62.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\tpqrvi62.sys - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\updata.exe - Suspected MaliciousScope:GENERIC.MALWARE.3

4 Files scanned
1 Infected files found
1 Suspected files found
0 Files disinfected
1 Files deleted