1x

qianwenxiang

http://222.233.53.123/help.htm
>>http://222.233.53.123/h.exe

Starting the file scan:

Begin scan in 'E:\AV\h.rar'
E:\AV\h.rar
  [0] Archive type: RAR
  --> h.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

sam.to

上报卡巴．．

mofunzone

上报给antivir

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\H.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DRIVERS\WINDF.EXE
2) C:\WINDOWS.0\SYSTEM32\DRIVERS\WINDF.HLP
是否删除木马程序及其衍生物?

sam.to

Hello,

h.exe_,
h.exe_.unp - Trojan-PSW.Win32.OnLineGames.uiw

These files are already detected. Please update your antivirus bases.

solcroft

Sign of "Win32:OnLineGames-BTI [Trj]" has been found in "http://222.233.53.123/h.exe\[ASPack]\[MaskPE]\[Embedded#0a06c]" file.

无尽藏海

2008-3-15 17:21:59        Kernel        File  'E:\VIRUS\h.rar' was sent to ESET for analysis.

qigang

rising20.35.52未杀！