3

sam.to

上报卡巴．．．

[ 本帖最后由 kato9096 于 2008-3-19 00:43 编辑 ]

The EQs

C:\Documents and Settings\Don johnson\桌面\2.rar » RAR » u.e2xe - probably a variant of Win32/Agent trojan

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\3'
C:\Documents and Settings\Administrator\My Documents\3\
  crack.exe7
    [0] Archive type: RSRC
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  Finish2.ee
    [0] Archive type: RSRC
      --> Object
        [1] Archive type: RSRC
        --> Object
  u.e2xe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object


End of the scan: 2008年3月18日  10:36
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
      3 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      1 Notes

stonejr

伞7杀1

漏了Finish2.EXE

U.EXE  是无界浏览器,貌似NOD32误报
2008-03-19 01:35:14        文件保护(创建文件)     操作:允许
进程路径:e:\Program Files\Real\RealPlayer\realplay.exe
文件路径:C:\RPStartupTime.txt
2008-03-19 01:35:03        应用程序保护(运行应用程序)     操作:允许
进程路径:C:\Program Files\Internet Explorer\iexplore.exe
文件路径:e:\Program Files\Real\RealPlayer\realplay.exe
命令行:/runevent "e:\Program Files\Real\RealPlayer\rpbrowserrecordupdate.dll" BrowserRecordUpdateAddEvent

挪威的冬天

金山 0

303898443

卡巴无声

无尽藏海

E:\VIRUS\3.rar>>crack.exe7>>emb-2.exe        TrojanDownloader.Vegoip.pwzk        木马        还未处理

啊弥陀佛

微点砍掉

欠妳緈諨

stonejr

hacktool是木马