5个

qianwenxiang

avast

nitroticket2018.exe\$TEMP\00.exe\01.exe  |  Win32:DNSChanger-KQ [Trj]

平淡

F:\病毒\05.rar>>nitroticket2018.exe        Trojan.DNSChanger.ik.bolo.arc        木马        还未处理

The EQs

C:\Documents and Settings\Don johnson\桌面\05.rar » RAR » nitroticket2018.exe » NSIS » 00.exe » RAR » 01.exe - a variant of Win32/TrojanDownloader.Zlob trojan
C:\Documents and Settings\Don johnson\桌面\05.rar » RAR » video.exe - probably a variant of Win32/Statik application
C:\Documents and Settings\Don johnson\桌面\05.rar » RAR » freeday.exe - probably a variant of Win32/TrojanDownloader.Dluca trojan

Starting the file scan:

Begin scan in 'E:\05.rar'
E:\05.rar
  [0] Archive type: RAR
  --> nitroticket2018.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.CA.3
  --> video.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> freeday.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

Palkia

在 C:\Documents and Settings\Administrator\桌面\05.rar->freeday.exe 中发现 TrojanDownloader.Dluca.jt 病毒, 已删除

qigang

Packer.RyCrypt

hj5abc

原帖由 qianwenxiang 于 2008-4-4 20:30 发表
avast

nitroticket2018.exe\$TEMP\00.exe\01.exe  |  Win32:DNSChanger-KQ  

你是不是直接解压了?

Sign of "Win32:Zlob-BVC [Trj]" has been found in "F:\05.rar\video.exe" file.

Sign of "Win32:DNSChanger-KQ [Trj]" has been found in "F:\05.rar\nitroticket2018.exe\$TEMP\00.exe\01.exe" file.  

sam.to

已刪除: 特洛伊木馬程式 Trojan.Win32.DNSChanger.ik        檔案: C:\Documents and Settings\kato9096\桌面\05.rar/nitroticket2018.exe//stream
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Exchanger.f        檔案: C:\Documents and Settings\kato9096\桌面\05.rar/video.exe
已刪除: Riskware not-a-virus:Dialer.Win32.Small.gen        檔案: C:\Documents and Settings\kato9096\桌面\05.rar/freeday.exe//PE_Patch.PECompact//PecBundle//PECompact

上报2

醉一生爱妍

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-04-04
        更新日期 2008-03-21

扫描目标 d:\我的文档\桌面\05.rar

开始时间 2008-03-21 08:28:28

在 d:\我的文档\桌面\05.rar->freeday.exe 中发现 TrojanDownloader.Dluca.jt 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :12                                  病毒体 :1         
                   删除 :1                                     解毒 :0         
    扫描速度(千字节/秒) :54                                扫描时间 :00:00:18
    扫描文件速度(个/秒) :0

    - - - - -   - - - - - - -   - - - - - - -    - - - - - - -    - - - - - - -     - - - - - - -   - - - - -

The file '404.exe' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 6.39.1.86.

The file 'ldr.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Spy.ZBot.AY.26. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.03.120.

The file 'freeday.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Clicker.ABJ. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.