c6ce6e

lanvin

wangjun1984

  SEP干掉了.

无尽藏海

Begin scan in 'E:\VIRUS\windows 2008.rar'
E:\VIRUS\windows 2008.rar
  [0] Archive type: RAR
    --> windows 2008.exe.vir
      [1] Archive type: RAR SFX (self extracting)
      --> crack.exe
          [DETECTION] Is the Trojan horse TR/Vundo.Gen
      --> keygen.exe
          [DETECTION] Is the Trojan horse TR/Dldr.Small.DDT.2
      --> serial.exe
          [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen

wangjay1980

detected: adware not-a-virus:AdWare.Win32.Virtumonde.gen        File: C:\Documents and Settings\Owner\×ÀÃæ\windows_2008.rar/windows 2008.exe.vir//data.rar/crack.exe
detected: Trojan program Trojan-Downloader.Win32.Small.iui        File: C:\Documents and Settings\Owner\×ÀÃæ\windows_2008.rar/windows 2008.exe.vir//data.rar/keygen.exe
detected: Trojan program Trojan-Downloader.Win32.Small.snf        File: C:\Documents and Settings\Owner\×ÀÃæ\windows_2008.rar/windows 2008.exe.vir//data.rar/serial.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX

Kakura

C:\Documents and Settings\Elvis\桌面\windows 2008.rar > RAR > windows 2008.exe.vir > RAR > serial.exe - Win32/TrojanDownloader.Small.IAW 特洛伊木马 的变种
C:\Documents and Settings\Elvis\桌面\windows 2008.rar > RAR > windows 2008.exe.vir > RAR > readme.bat - 可能是 Win32/Agent 特洛伊木马 的变种

woai_jolin

===================================================================================================
On-demand scanner 7.0.0.10

NSE revision 5.91.10
nvcbin.def revision 5.90.00 of 2008/03/07 16:10:27 (1356064 variants)
nvcmacro.def revision 5.90.00 of 2008/02/04 16:47:24 (20430 variants)
Total number of variants: 1376494
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files matching: G:\v\windows_2008.rar
        5 ms G:\v\windows_2008.rar : windows 2008.exe.vir                 Aggressive commersial Virtumonde.MOW ()
- File G:\v\windows_2008.rar quarantined.
        1 ms G:\v\windows_2008.rar                                       
        2 ms G:\v\windows_2008.rar:Zone.Identifier                       

===================================================================================================

The scanning started: 2008/03/09 00:03:57
               ended: 2008/03/09 00:03:57
Logged on as        : Jason
on hostname         : JASON-PC

Scanning results:
   Total number of files found..............................:       3
   Number of files scanned..................................:       3
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       1
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       1

Copyright (c) 1993-2007 Norman ASA.

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS 2008.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CRACK.EXE
2) C:\WINDOWS.0\SYSTEM32\OPNLIII.DLL
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KEYGEN.EXE
4) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SERIAL.EXE
是否删除木马程序及其衍生物?

solcroft

crack.exe如图
最后一个死的

kkgh

诺顿杀掉

qigang

rising20.34.60未知！