同学机子上搞来的

leonfg

应该是上网中的，一直不断重启。教他用dr.cureit解决，结果我一没注意就被他全删了，只抢救出这两个。
测了一下，其中一个过小A，BD。
jotti上也过瑞星，实际好像没有过

ESET
d:\My Documents\My Documents.rar>RAR>1.exe - 未查明的 NewHeur_PE 病毒
d:\My Documents\My Documents.rar>RAR>2.exe - Win32/TrojanDownloader.Delf.OBY 特洛伊木马

FS扫描沙盘都报

[ 本帖最后由 leonfg 于 2008-2-27 09:57 编辑 ]

28654621

D:\download\My Documents.rar>>1.exe        TrojanDropper.Agent.env.bklv        木马        还未处理
D:\download\My Documents.rar>>2.exe        TrojanDownloader.Delf.epw.tmkj        木马        还未处理

spaceplane

哎，BD查出来了

项目: 1.exe
        检查档案: E:\pic\_PICtemp\My.rar
        状态: 发现病毒
        病毒: DeepScan:Generic.Malware.Bdld!!.82C38301 (BD 引擎)
项目: 2.exe
        检查档案: E:\pic\_PICtemp\My.rar
        状态: 发现病毒
        病毒: Trojan.Dropper.Agent.TOH (BD 引擎)

秋叶濛濛

Begin scan in 'F:\Virus\My Documents.rar'
F:\Virus\My Documents.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
      [INFO]      The file was deleted!

taiw_1144

木马名称:Trojan-Dropper.Win32.Agent.geo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.375\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Delf.izd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.375\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

hljdqzr

kaba

xiaoxmj

信息        2008-02-27  12:18:19        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-02-27  12:18:19        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件5个                       
信息        2008-02-27  12:18:19        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-27  12:18:18        C:\Documents and Settings\Administrator\桌面\My Documents.rar\2.exe        Win32.TrojDownloader.Delf.43008        跳过，未处理       
病毒        2008-02-27  12:18:18        C:\Documents and Settings\Administrator\桌面\My Documents.rar\1.exe        Win32.Troj.Downloader.ex.23552        跳过，未处理       
信息        2008-02-27  12:18:12        金山毒霸主程序启动查毒过程，查毒方式：命令行查毒                       
信息        2008-02-27  12:18:11        金山毒霸主程序 启动                       
信息        2008-02-27  12:16:55        金山毒霸主程序 退出

ballakay

Scanning Report
27 February 2008 13:24:07 - 13:24:10
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\My_Documents.rar


--------------------------------------------------------------------------------

Result: 2 malware found
Trojan-Dropper.Win32.Agent.env (virus)
C:\Users\Administrator\Desktop\My_Documents.rar\1.exe
Trojan-Downloader.Win32.Delf.epw (virus)
C:\Users\Administrator\Desktop\My_Documents.rar\2.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 3
Not scanned: 0
Result:
Viruses: 2
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-02-27_01
Spyware: 2008-02-27_01
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-02-27
F-Secure Libra: 2.04.01, 2008-02-21
F-Secure Orion: 1.02.38, 2008-02-27
F-Secure Draco: 1.00.35, 2008-02-13
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Quarantine and delete
Spyware: Quarantine and delete

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\My_Documents.rar'
C:\Documents and Settings\haha\桌面\My_Documents.rar
  [0] Archive type: RAR
    --> 1.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 2.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Delf.epw.1
      [INFO]      A backup was created as '48240061.qua'  ( QUARANTINE )


End of the scan: 2008年2月27日  14:15
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      2 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wolffshen

FS结果: 找到 2 恶意软件
Trojan-Dropper.Win32.Agent.env (病毒)
D:\Virus\Test\1.exe 操作: 删除
Trojan-Downloader.Win32.Delf.epw (病毒)
D:\Virus\Test\2.exe 操作: 删除