4个+1

qianwenxiang

http://ww.avpkav.com/ver.txt <－速度超慢
  to
http://fff.tesekl.info/winint.exe http://fff.tesekl.info/winsys.inf http://fff.tesekl.info/winsys.exe

补一个http://ee.avpkav.com/m1.exe

[ 本帖最后由 qianwenxiang 于 2008-1-25 21:38 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\01254.rar'
E:\01254.rar
  [0] Archive type: RAR
  --> ver.txt
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> winint.exe
      [DETECTION] Is the Trojan horse TR/Agent.Dein.17408
      [WARNING]   The file was ignored!

The file 'winsys.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'winsys.inf' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Starting the file scan:
Begin scan in 'E:\m1.rar'
E:\m1.rar
  [0] Archive type: RAR
  --> m1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!

[ 本帖最后由 Graybird 于 2008-1-25 21:39 编辑 ]

492052134

卡巴MISS

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.qn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.42

The EQs

01254.rar » RAR » ver.txt - a variant of Win32/TrojanDownloader.Delf.NUM trojan

qianwenxiang

怪不得刚才不小心打开了winsys没出啥问题呢...

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.qn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.42

hj5abc

Sign of "Win32:Delf-GXQ [Trj]" has been found in "F:\ver.txt\[UPX]" file.  
Sign of "Win32:Delf-GXQ [Trj]" has been found in "http://ee.avpkav.com/m1.exe\[UPX]" file.

Palkia

C:\Documents and Settings\Administrator\桌面\01254.rar ?RAR ?ver.txt - Win32/TrojanDownloader.Delf.NUM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\m1.rar ?RAR ?m1.exe - Win32/TrojanDownloader.Delf.NUM 特洛伊木马 的变种

spaceplane

AVAST 2个
大蜘蛛 2个