10几个小文件，还暂时未确定是否malware!

fengxing

过karspersky...

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\4c1210ec8fa8259a71da39df91cbe957.bin'
E:\新建文件夹 (2)\4c1210ec8fa8259a71da39df91cbe957.bin
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\8e36b9f075ecc91330202598c9c5b112.bin'
Begin scan in 'E:\新建文件夹 (2)\44be4f6698d0f5eede30d523d768354b.bin'
E:\新建文件夹 (2)\44be4f6698d0f5eede30d523d768354b.bin
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\80cef452332ea39001d632f307cdcd35.bin'
Begin scan in 'E:\新建文件夹 (2)\425dbfd77283a5f3255b94fe76ac2a2a.bin'
Begin scan in 'E:\新建文件夹 (2)\895ed7255a5a42aa895f18ebe8760bec.bin'
E:\新建文件夹 (2)\895ed7255a5a42aa895f18ebe8760bec.bin
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\10518da49a1cf2899f86f7e5e5f2718c.bin'
Begin scan in 'E:\新建文件夹 (2)\468573056ac597dfb64a73ffda840c34.bin'
E:\新建文件夹 (2)\468573056ac597dfb64a73ffda840c34.bin
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\a9764a69d6b093a38bea58b56778fa58.bin'
E:\新建文件夹 (2)\a9764a69d6b093a38bea58b56778fa58.bin
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\c5267352295bd4906f104f645ae1efe3.bin'
Begin scan in 'E:\新建文件夹 (2)\d95f765e278dbe4ddb310776e36d5cf6.bin'
Begin scan in 'E:\新建文件夹 (2)\e696c76c0ca87715c5a2febe8d661d10.bin'
E:\新建文件夹 (2)\e696c76c0ca87715c5a2febe8d661d10.bin
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\新建文件夹 (2)\f5156a4396210a454548a3dd13011171.bin'
E:\新建文件夹 (2)\f5156a4396210a454548a3dd13011171.bin
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4823e951.qua'!
Begin scan in 'E:\新建文件夹 (2)\fc1cdd3bae7242bb69feded6883eee8a.bin'
Begin scan in 'E:\新建文件夹 (2)\ffa4eba13d374d804c8ef71efa4ffb31.bin'
E:\新建文件夹 (2)\ffa4eba13d374d804c8ef71efa4ffb31.bin
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!


End of the scan: 2008年4月2日  10:02
Used time: 00:23 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
      7 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      7 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

3806145  fc1cdd3bae7242bb6...8a.bin  16 KB  UNDER ANALYSIS
3806146  8e36b9f075ecc9133...12.bin  18.79 KB  UNDER ANALYSIS
3806147  80cef452332ea3900...35.bin  25.5 KB  UNDER ANALYSIS
3806148  425dbfd77283a5f32...2a.bin  17.53 KB  UNDER ANALYSIS
3806149  10518da49a1cf2899...8c.bin  18.8 KB  UNDER ANALYSIS
3806150  c5267352295bd4906...e3.bin  16 KB  UNDER ANALYSIS
3806151  d95f765e278dbe4dd...f6.bin  16 KB  UNDER ANALYSIS
3806170  f5156a4396210a454...71.bin  16 KB  UNDER ANALYSIS

[ 本帖最后由 Exia 于 2008-4-2 10:09 编辑 ]

yclidong

C:\Documents and Settings\Administrator\桌面\test.rar > RAR > d95f765e278dbe4ddb310776e36d5cf6.bin - Win32/TrojanClicker.Agent.NCZ 特洛伊木马
C:\Documents and Settings\Administrator\桌面\test2.rar > RAR > ffa4eba13d374d804c8ef71efa4ffb31.bin - Win32/Rootkit.Agent.NCK 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\test2.rar > RAR > a9764a69d6b093a38bea58b56778fa58.bin - Win32/Rootkit.Agent.NCK 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\test2.rar > RAR > 4c1210ec8fa8259a71da39df91cbe957.bin - Win32/Rootkit.Agent.NCK 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\test2.rar > RAR > 468573056ac597dfb64a73ffda840c34.bin - 可能是 Win32/Rootkit.Agent.NCK 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\test2.rar > RAR > e696c76c0ca87715c5a2febe8d661d10.bin - Win32/Rootkit.Agent.NCK 特洛伊木马 的变种

fengxing

都是什么av检查到的？能否注明一下？

无尽藏海

E:\VIRUS\TEST4.2\895ed7255a5a42aa895f18ebe8760bec.bin        Heuri.Suspicious.ERNM        启发式扫描        还未处理
E:\VIRUS\TEST4.2\f5156a4396210a454548a3dd13011171.bin        Trojan.Agent.anoy.oylm        木马        还未处理

aerbeisi

[Found adware]         <W32/Cinmus.E.gen!Eldorado (not disinfectable, generic)>        C:\test\gg\test2\ffa4eba13d374d804c8ef71efa4ffb31.bin
[Found adware]         <W32/Cinmus.E.gen!Eldorado (not disinfectable, generic)>        C:\test\gg\test2\a9764a69d6b093a38bea58b56778fa58.bin
[Found adware]         <W32/Cinmus.E.gen!Eldorado (not disinfectable, generic)>        C:\test\gg\test2\4c1210ec8fa8259a71da39df91cbe957.bin
[Found adware]         <W32/Cinmus.E.gen!Eldorado (not disinfectable, generic)>        C:\test\gg\test2\468573056ac597dfb64a73ffda840c34.bin
[Found adware]         <W32/Cinmus.E.gen!Eldorado (not disinfectable, generic)>        C:\test\gg\test2\e696c76c0ca87715c5a2febe8d661d10.bin

爱·妖姬

20080402 024349        扫描 '单击右键扫描' 已启动。
20080402 024349        在 'D:\test.rar\895ed7255a5a42aa895f18ebe8760bec.bin' 中检测到 病毒/间谍软件 'Mal/Packer' 。
20080402 024349        在 'D:\test.rar\f5156a4396210a454548a3dd13011171.bin' 中检测到 病毒/间谍软件 'Mal/Behav-156' 。
20080402 024349        在 'D:\test.rar\44be4f6698d0f5eede30d523d768354b.bin' 中检测到 病毒/间谍软件 'Mal/HckPk-E' 。
20080402 024350        扫描 '单击右键扫描' 已完成。
20080402 024350        扫描'单击右键扫描'摘要：
                已扫描项目：8
                错误：0
                已隔离项目：1
                已处置项目：0

啊弥陀佛

又是bin

sam.to

上报卡巴看看