1

tonger2003

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\y.rar'
C:\Documents and Settings\morgan\My Documents\
  y.rar
    [0] Archive type: RAR
    --> y.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
  y.rar:Zone.Identifier

Starting the file scan:

Begin scan in 'E:\AV\y.rar'
E:\AV\y.rar
  [0] Archive type: RAR
  --> y.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The file was deleted!

palfan

25031297  y.exe  36.96 KB  UNDER ANALYSIS

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.5.29.0	2008.05.28	-
AntiVir	7.8.0.19	2008.05.28	HEUR/Crypted
Authentium	5.1.0.4	2008.05.28	W32/Downloader.J.gen!Eldorado
Avast	4.8.1195.0	2008.05.29	-
AVG	7.5.0.516	2008.05.28	-
BitDefender	7.2	2008.05.29	GenPack:Generic.Malware.P!Pk!g.391632E7
CAT-QuickHeal	9.50	2008.05.28	Win32.Packed.Klone.ap03
ClamAV	0.92.1	2008.05.28	-
DrWeb	4.44.0.09170	2008.05.28	-
eSafe	7.0.15.0	2008.05.28	suspicious Trojan/Worm
eTrust-Vet	31.4.5831	2008.05.28	-
Ewido	4.0	2008.05.28	Downloader.Delf.hxt
F-Prot	4.4.4.56	2008.05.28	W32/D_Downloader!GSA
F-Secure	6.70.13260.0	2008.05.29	-
Fortinet	3.14.0.0	2008.05.29	-
GData	2.0.7306.1023	2008.05.29	-
Ikarus	T3.1.1.26.0	2008.05.29	Backdoor.Win32.Agent.ahj
Kaspersky	7.0.0.125	2008.05.29	-
McAfee	5305	2008.05.28	New Malware.dw
Microsoft	1.3520	2008.05.29	-
NOD32v2	3142	2008.05.28	probably a variant of Win32/TrojanDownloader.Delf.OBZ
Norman	5.80.02	2008.05.28	-
Panda	9.0.0.4	2008.05.28	Suspicious file
Prevx1	V2	2008.05.29	-
Rising	20.46.22.00	2008.05.28	Trojan.DL.Win32.Delf.fxb
Sophos	4.29.0	2008.05.29	Mal/Behav-204
Sunbelt	3.0.1123.1	2008.05.17	-
Symantec	10	2008.05.29	-
TheHacker	6.2.92.322	2008.05.28	-
VBA32	3.12.6.6	2008.05.28	-
VirusBuster	4.3.26:9	2008.05.28	Packed/NSPack
Webwasher-Gateway	6.6.2	2008.05.28	Heuristic.Crypted

palfan

话说瑞星都入库了，卡巴和红伞都没入.................耻辱啊

挪威的冬天

金山毒霸 0

sam.to

to kl,antivir

电影结束了

allinwonderi

MISS

allinwonderi

[Found security risk]         <W32/D_Downloader!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\y.rar->y.exe->(NSPack)->(PE_Patch)->(Klone.AF)