2

sam.to

已刪除: 病毒 Worm.Win32.Otwycal.b        檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒样本.rar/MSDOS.bat//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.Otwycal.b        檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒样本.rar/windows.ext//PE_Patch//UPack

The EQs

C:\Documents and Settings\Don johnson\桌面\2.rar » RAR » MSDOS.bat - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\2.rar » RAR » windows.ext - probably a variant of Win32/Genetik trojan

geforce

Starting the file scan:

Begin scan in 'C:\2.rar'
C:\2.rar
  [0] Archive type: RAR
  --> MSDOS.bat
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> windows.ext
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年4月6日  23:22
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
      4 Files were scanned
      2 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

SIGKILL

2008-4-6,23:27:32 [WARNING]  Suspicious file: Contains suspicious code HEUR/Crypted.E!
  C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\XGHIX7C9\2[1].rar
  Archive: RAR : MSDOS.bat
      [INFO] The file will be moved to quarantine.

moonsilver

病毒： Trojan.DL.Win32.Mnless.zef

aerbeisi

有点眼熟。

[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\2.rar->MSDOS.bat->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\2.rar->windows.ext->(UPack)

aribeth199

检测到：病毒 Worm.Win32.Otwycal.b        文件: F:\Download\2.rar/MSDOS.bat//PE_Patch//UPack
检测到：病毒 Worm.Win32.Otwycal.b        文件: F:\Download\2.rar/windows.ext//PE_Patch//UPack

挪威的冬天

信息        2008-04-07  13:11:08        您此次查毒清除了2个病毒                       
信息        2008-04-07  13:11:08        您此次查毒共查出2个病毒以及危险代码                       
信息        2008-04-07  13:11:08        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件6个                       
信息        2008-04-07  13:11:08        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-04-07  13:11:08        D:\Desktop\2.rar\windows.ext        Win32.Troj.AutoRunsT.m.991232        清除成功       
病毒        2008-04-07  13:11:08        D:\Desktop\2.rar\MSDOS.bat        Win32.Troj.AutoRunsT.m.991232        清除成功

qwer9909

C:\Documents and Settings\Administrator\桌面\2.rar>>autorun.inf        INF.Autorun.d        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\2.rar>>MSDOS.bat        Trojan.Cap832723.igoa        木马        还未处理
C:\Documents and Settings\Administrator\桌面\2.rar>>windows.ext        Trojan.Cap832723.igoa        木马        还未处理

啊弥陀佛

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2\WINDOWS.EXT
是木马程序!
已成功阻止其运行,是否要删除此文件?