one

tonger2003

1993yixin

Start of the scan: 2008年2月14日 星期四  22:04

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本\k.rar'
C:\Documents and Settings\Administrator\桌面\样本\k.rar
  [0] Archive type: RAR
  --> k.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.cka
      [WARNING]   The file was ignored!


End of the scan: 2008年2月14日 星期四  22:05
Used time: 00:13 min

The scan has been done completely.

      0 Scanning directories
      2 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

冷冷

IK
I:\virus\k.rar:\k.exe - Suspect code-parts found (Level: 10)
I:\virus\k.rar

        2 Files scanned
          (1 Archiv with 1 file)
        0 Signatures found
        1 Suspect code-part found
        Used time: 0:00.016

solcroft

leonfg

FS沙盘报
SDBot.gen10

chabosh

正在扫描日志
病毒库版本: 2874 (20080214)
日期: 2008-02-14  时间: 23:14:27
已扫描的磁盘、文件夹和文件: E:\Downloads\NewFiles\k.rar
E:\Downloads\NewFiles\k.rar>RAR>k.exe - 可能是 Win32/Genetik 特洛伊木马 的变种 - 是已删除对象的一部分
已扫描的对象数: 2
发现的威胁数: 1
完成时间: 23:14:27  总扫描时间: 0 秒 (00:00:00)

zhr5898

程序:
D:\K\K.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\SVCHOST.EXE
2) C:\WINDOWS\SYSTEM32\MICROSOFT.EXE
3) C:\WINDOWS\SYSTEM32\SP00LV.EXE

woai_jolin

2008/2/14 23:29:47        Real-time file system protection        file        G:\v\k.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

spaceplane

avast 过

su-tt

k.rar\k.exe;C:\Documents and Settings\Administrator\桌面\k.rar;可能 DLOADER.Trojan;;
k.rar;C:\Documents and Settings\Administrator\桌面;发现档案文件中有受感染的对象;;