一小包。

hlx98007

也别跟我说个个都OK啊。。。
卡巴都没查出来。。

无尽藏海

F:\virus\SmallBag.rar » RAR » Real player.exe - probably a variant of Win32/Agent trojan
F:\virus\SmallBag.rar » RAR » skluelnh.exe - Win32/ProcKill.B application
F:\virus\SmallBag.rar » RAR » tsrnue.exe - Win32/ProcKill.B application

无尽藏海

File ID  Filename  Size (Byte) Result
237054  MSINET.OCX  129.77 KB  KNOWN CLEAN
3729990  MSJDrvr.sys  2.47 KB  UNDER ANALYSIS
3729991  pe.vbs  123 Byte  UNDER ANALYSIS
203219  Real player.exe  108.5 KB  MALWARE     TR/Agent.111104.4 trojan
203101  RootCert.dll  36 KB  CLEAN
515230  sessmgr.exe  133.5 KB  KNOWN CLEAN
203699  tsrnue.exe  1 KB  CLEAN
203109  SubmitControl.dll  64 KB  CLEAN
3729992  temB3B.exe  12.42 KB  UNDER ANALYSIS
202552  test0.exe  3.47 KB  CLEAN
203699  tsrnue.exe  1 KB  CLEAN
203117  USBKey.dll  56 KB  CLEAN
21074  viaide.sys  5.25 KB  KNOWN CLEAN
203093  war3Search2.js  2.2 KB  MALWARE    the file contains malicious HTML script code
204067  Win32B.exe  6.76 KB  CLEAN
3729993  yt.vbs  85 Byte  UNDER ANALYSIS

冷冷

IK
I:\virus\February\20\SmallBag.rar:\MSINET.OCX
I:\virus\February\20\SmallBag.rar:\MSJDrvr.sys
I:\virus\February\20\SmallBag.rar:\pe.vbs
I:\virus\February\20\SmallBag.rar:\Real player.exe
I:\virus\February\20\SmallBag.rar:\RootCert.dll
I:\virus\February\20\SmallBag.rar:\sessmgr.exe
I:\virus\February\20\SmallBag.rar:\skluelnh.exe - Signature 'Trojan.Win32.Zapchast.cp' found
I:\virus\February\20\SmallBag.rar:\SubmitControl.dll
I:\virus\February\20\SmallBag.rar:\temB3B.exe - File is maybe corrupt
I:\virus\February\20\SmallBag.rar:\test0.exe
I:\virus\February\20\SmallBag.rar:\tsrnue.exe - Signature 'Trojan.Win32.Zapchast.cp' found
I:\virus\February\20\SmallBag.rar:\USBKey.dll
I:\virus\February\20\SmallBag.rar:\viaide.sys
I:\virus\February\20\SmallBag.rar:\war3Search2.js
I:\virus\February\20\SmallBag.rar:\Win32B.exe
I:\virus\February\20\SmallBag.rar:\yt.vbs
I:\virus\February\20\SmallBag.rar

        17 Files scanned
          (1 Archiv with 16 files)
        2 Signatures found
        0 Suspect code-parts found
        Used time: 0:02.594

傻猪猪米走鸡

冷冷用的ik是什么版的？命令行？

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\SmallBag.rar'
C:\Documents and Settings\Administrator\My Documents\
  SmallBag.rar
    [0] Archive type: RAR
    --> MSINET.OCX
    --> MSJDrvr.sys
    --> pe.vbs
    --> Real player.exe
        [DETECTION] Is the Trojan horse TR/Agent.111104.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> RootCert.dll
    --> sessmgr.exe
    --> skluelnh.exe
    --> SubmitControl.dll
    --> temB3B.exe
    --> test0.exe
    --> tsrnue.exe
    --> USBKey.dll
    --> viaide.sys
    --> war3Search2.js
    --> Win32B.exe
    --> yt.vbs
      [WARNING]   The file was ignored!
  SmallBag.rar:Zone.Identifier


End of the scan: 2008年2月20日  11:31
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     18 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      1 Archives were scanned
      2 Warnings
      0 Notes

capsshift

等红伞升了级再扫。

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DelMMedia.a      
病毒： Trojan.Xtssksastsm      
病毒： Trojan.VBS.Runner.b      

用户来源：互联网

软件版本：20.32.12

lwjcxy

铁克ＳＥＰ1375

微点卫士

恶意程序名称:Malware.Win32.DelFile.c

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SMALLBAG\REAL PLAYER.EXE
是恶意程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.xtTro.a

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SMALLBAG\SKLUELNH.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.xtTro.a

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SMALLBAG\TSRNUE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

sessmgr.exe