4

sam.to

Scanned file:   4.rar  - Infected
4.rar/ebaysetup.exe/data0001 - OK
4.rar/ebaysetup.exe/data0002/stream/Script - OK
4.rar/ebaysetup.exe/data0002/stream - OK
4.rar/ebaysetup.exe/data0002 - OK
4.rar/ebaysetup.exe/data0003 - OK
4.rar/ebaysetup.exe/data0004 - OK
4.rar/ebaysetup.exe/data0005 - OK
4.rar/ebaysetup.exe/data0006 - OK
4.rar/ebaysetup.exe/data0007 - OK
4.rar/ebaysetup.exe - OK
4.rar/7040.exe - infected by Trojan-PSW.Win32.WOW.aur
4.rar/Ying-UnInstall.exe - OK
4.rar/27534.exe - infected by Trojan-PSW.Win32.WOW.aur

上报上巴


Hello,

AutoRun.inf, DeepFrz.sys, np27.tmp_, np28.tmp_, np29.tmp_, tem14.tmp_, tmp37.tmp_, tmp3F.tmp_, tmp52.tmp_, tmp53.tmp_, tmp54.tmp_, upload.dll, Ying-UnInstall.exe_

No malicious code were found in these files.

ebaysetup.exe_ - not-a-virus:AdWare.NSIS.Agent.b

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

[ 本帖最后由 kato9096 于 2008-4-29 15:09 编辑 ]

红心王子

木马名称:Trojan-PSW.Win32.WOW.mtl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\7040.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.WOW.mtl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\27534.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹\4.rar'
E:\AV\新建文件夹\4.rar
  [0] Archive type: RAR
  --> ebaysetup.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.GUT
  --> 7040.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.NCN
  --> 27534.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.NCN
      [NOTE]      The file was deleted!

The file 'Ying-UnInstall.exe' has been determined to be 'CLEAN'.

残缺的唯美

D:\Documents and Settings\EKINCHENG\桌面\4.rar » RAR » 7040.exe - a variant of Win32/TrojanDownloader.VB.CEJ trojan
D:\Documents and Settings\EKINCHENG\桌面\4.rar » RAR » 27534.exe - a variant of Win32/TrojanDownloader.VB.CEJ trojan

wangjay1980

k

28654621

D:\download\4.rar>>7040.exe        TrojanPSW.WOW.aur.wzow        木马        还未处理
D:\download\4.rar>>27534.exe        TrojanPSW.WOW.aur.wzow        木马        还未处理


ebaysetup.exe

广告程序(Adware.Ourxin.mzdl.arc): D:\Sandbox\Administrator\Virus\drive\C\Program Files\AD4All\Install.exe


Ying-UnInstall.exe
运行 费尔没反应

[ 本帖最后由 28654621 于 2008-4-28 20:07 编辑 ]

qigang

rising20.42.01未杀！

allinwonderi

ArcaVir

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:7040.exe <- Trojan.Psw.Wow.Aur : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:27534.exe <- Trojan.Psw.Wow.Aur : No action



Scanned objects : 13

Infected objects : 2

allinwonderi

感觉换了FP6.0.9.0侦测率变低了。