更新

qianwenxiang

无尽藏海

6个
Begin scan in 'D:\Downloads\样本\GreetingCard.rar'
D:\Downloads\样本\GreetingCard.rar
  [0] Archive type: RAR
  --> GreetingCard.exe
      [DETECTION] Contains detection pattern of the dropper DR/Runner.I.1
      [1] Archive type: RAR SFX (self extracting)
      --> sup.exe
          [DETECTION] Contains detection pattern of the dropper DR/Runner.B
      --> a.reg
          [DETECTION] Contains detection pattern of the IRC virus IRC/Cloner.BI
      --> csrss.exe
          [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/mIRC-593262.A Backdoor server programs
      --> mirc.ini
          [DETECTION] Is the Trojan horse TR/PSW.Zapchast.847
      --> nicks.txt
          [DETECTION] Is the Trojan horse TR/IRC.Flood.EV



D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » script.ini - probably a variant of IRC/Cloner.BI trojan
D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » sup.exe - BAT/Netstop.NAA trojan
D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » a.reg - IRC/Cloner.BI trojan
D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » csrss.exe - Win32/Mirc_based trojan
D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » mirc.ini - IRC/Zapchast trojan
D:\Downloads\样本\GreetingCard.rar » RAR » GreetingCard.exe » RAR » nicks.txt - IRC/Cloner.AX trojan

Nerazzurri

deleted: Trojan program Trojan.BAT.Runner.i        File: C:\Users\Nerazzurri\Desktop\GreetingCard.rar/GreetingCard.exe//data.rar/sup.exe
deleted: riskware not-a-virus:Client-IRC.Win32.mIRC.601        File: C:\Users\Nerazzurri\Desktop\GreetingCard.rar/GreetingCard.exe//data.rar/csrss.exe//PE_Patch//MewBundle//MEW
deleted: Trojan program Backdoor.IRC.Zapchast        File: C:\Users\Nerazzurri\Desktop\GreetingCard.rar/GreetingCard.exe//data.rar/mirc.ini

傻猪猪米走鸡

F:\virus\GreetingCard\GreetingCard.exe » RAR » script.ini - probably a variant of IRC/Cloner.BI trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe » RAR » sup.exe - BAT/Netstop.NAA trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe » RAR » a.reg - IRC/Cloner.BI trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe » RAR » csrss.exe - Win32/Mirc_based trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe » RAR » mirc.ini - IRC/Zapchast trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe » RAR » nicks.txt - IRC/Cloner.AX trojan - was a part of the deleted object
F:\virus\GreetingCard\GreetingCard.exe - multiple threats - deleted - quarantined

我爱舒畅

木马名称:Trojan.BAT.Runner.b

程序:
C:\DOCUMENTS AND SETTINGS\CHOEL\LOCAL SETTINGS\TEMP\TWIEX3\SUP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Mirc_based.a

程序:
C:\DOCUMENTS AND SETTINGS\CHOEL\LOCAL SETTINGS\TEMP\TWIEX3\CSRSS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

dianziliqi

版主的几个病毒，全被查杀了、、、
有没有猛点的

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.BAT.CopyRun.a      
病毒： Backdoor.Agent.iak      
病毒： Backdoor.mIRC-based.bj   
病毒： Backdoor.IRC.Flood.cc   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25.11

gho

Result: 1 malware found
Trojan.BAT.Runner.i (virus)
C:\Documents and Settings\gho\×ÀÃæ\GreetingCard.exe Action: renamed

y37007

   小红伞杀6个

韩若雪

GreetingCard！！见面礼--贺卡！！
果然是病毒窝！！！