间谍

allinwonderi

[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\1.rar->DDD.PIF->(RAR)->1.exe->(NSPack)->(PE_Patch)->(PE_Patch.MaskPE)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\1.rar->1.EXE->(NSPack)->(PE_Patch)->(PE_Patch.MaskPE)
[Found downloader]         <W32/Downldr2.BAWC (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\pop.rar->POP.EXE->(ZIP)->2221.exe
[Found downloader]         <W32/Downldr2.BAWC (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\pop.rar->11E.EXE->(RAR)->pop.exe->(ZIP)->2221.exe

---------------------------------------------------------------------
Scan ended:        2008-4-2, 22:09:08
Duration:        0:00:14

Scan result:

Scanned files:                 7
Infected objects:         4
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

The EQs

C:\Documents and Settings\Don johnson\桌面\1.rar » RAR » DDD.PIF » RAR » 1.exe - a variant of Win32/PSW.OnLineGames.NNS trojan
C:\Documents and Settings\Don johnson\桌面\1.rar » RAR » 1.EXE - a variant of Win32/PSW.OnLineGames.NNS trojan
C:\Documents and Settings\Don johnson\桌面\pop.rar » RAR » POP.EXE » ZIP » 2221.exe - Win32/TrojanDownloader.VB.NOH trojan
C:\Documents and Settings\Don johnson\桌面\pop.rar » RAR » 11E.EXE » RAR » pop.exe » ZIP » 2221.exe - Win32/TrojanDownloader.VB.NOH trojan

wangjay1980

TO KL

swans

第一个包费尔报了两个，第二个就虾米都