发现一个DD,卡巴诺顿全PASS

醉一生爱妍

C:\Documents and Settings\Administrator\桌面\SAMPLE1.rar >>RAR >>360tray.exe - 未查明的 NewHeur_PE 病毒 [7]

其余DLL.TXT不报

Graybird

Starting the file scan:

Begin scan in 'E:\SAMPLE1.rar'
E:\SAMPLE1.rar
  [0] Archive type: RAR
  --> 360tray.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> getkey.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!

The file 'Mswinsck.ocx' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

[ 本帖最后由 Graybird 于 2008-1-21 20:59 编辑 ]

haol

avast found Win32:BlackHole-G [Trj]

BING126

McAfee  MISS

shengyuan

NOD32  杀

文件 C:\Documents and Settings\Owner\桌面\virus.zip 受到 未查明的 NewHeur_PE 病毒 感染.

碧水寒潭

Start of the scan: 2008年1月21日  21:02

Starting the file scan:

Begin scan in 'I:\样本'
I:\样本\virus.zip
  [0] Archive type: ZIP
  --> MS-DOS.exe
      [DETECTION] Is the Trojan horse TR/Agent.87197
      [INFO]      The file was deleted!

Joker

detected: Trojan program Trojan-Spy.Win32.Delf.jv (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\SAMPLE1.rar/360tray.exe//PE_Patch//NSPack//#//NSPack//PEPatch
detected: Trojan program Trojan-Spy.Win32.Delf.jv (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\SAMPLE1.rar/getkey.dll//NSPack//PEPatch

悠柚

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

Graybird

The file '360tray.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Agent.87197. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.02.24. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

mr_hyde