第536次更新orz下载器，见1887楼.（过主流高品质）

woai_jolin

Scan Log
Version of virus signature database: 3615 (20081115)
Date: 2008-11-15  Time: 20:11:25
Scanned disks, folders and files: G:\v\orz.rar
G:\v\orz.rar » RAR » ORZ\orz.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\orz.rar » RAR » ORZ\ORZ1.EXE - probably a variant of Win32/TrojanDownloader.Agent.NWE trojan - was a part of the deleted object
G:\v\orz.rar » RAR » ORZ\orz2.exe - a variant of Win32/TrojanDownloader.Small.OEZ trojan - was a part of the deleted object
G:\v\orz.rar » RAR » ORZ\orz3.exe - Win32/TrojanDownloader.Small.WGA trojan - was a part of the deleted object
G:\v\orz.rar » RAR » ORZ\orz4.exe - probably a variant of Win32/TrojanDownloader.Small.NZK trojan - was a part of the deleted object
Number of scanned objects: 5
Number of threats found: 5
Number of cleaned objects: 5
Time of completion: 20:11:28  Total scanning time: 3 sec (00:00:03)

woai_jolin

Scan Log
Version of virus signature database: 3615 (20081115)
Date: 2008-11-15  Time: 20:11:22
Scanned disks, folders and files: G:\v\new_orz.rar
G:\v\new_orz.rar » RAR » new orz.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
Number of scanned objects: 1
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 20:11:22  Total scanning time: 0 sec (00:00:00)

F-Secure

W32/Packed_Upack.A (virus)
C:\DOCUMENTS AND SETTINGS\SK\桌面\VIRUSRUN\081115\ORZ\NEW ORZ.EXE Action: deleted

尤金卡巴斯基

Hello,

neworz.exe_ - Exploit.Win32.IMG-WMF.fx

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

quke1985

诺顿全部隔离！

allinwonderi

allinwonderi

[发现可能为病毒：]        <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)>        C:\TMP\new orz.rar->new orz.exe
[发现可能为病毒：]        <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)>        C:\TMP\orz.rar->ORZ\orz.exe
[发现安全风险： ]        <W32/SuspPack.C.gen!Eldorado (dropper, 损坏, not disinfectable, 普通)>        C:\TMP\orz.rar->ORZ\ORZ1.EXE->(embedded)
[发现自动下载软件：]        <W32/Downldr2.DVGX (确切, not disinfectable)>        C:\TMP\orz.rar->ORZ\orz2.exe
[发现自动下载软件：]        <W32/DownloaderX.ASJZ (确切, not disinfectable)>        C:\TMP\orz.rar->ORZ\orz3.exe
[发现可能安全风险：]        <W32/Heuristic-210!Eldorado (损坏, not disinfectable)>        C:\TMP\orz.rar->ORZ\orz4.exe->(UPack)

---------------------------------------------------------------------
扫描已结束:        2008-11-15, 21:08:15
用时:        0:00:01

扫描结果:

已扫描的文件:                 7
已感染的对象:         6
已清除的对象:         0
已隔离的文件:         0
---------------------------------------------------------------------

allinwonderi

[Scanning : C:\TMP]


C:\TMP\new orz.rar<RAR>:new orz.exe<UPack>:new orz.exe <- Heur.RoundKick : No action
C:\TMP\orz.rar<RAR>:orz.exe<UPack>:orz.exe <- Heur.RoundKick : No action
C:\TMP\orz.rar<RAR>:ORZ1.EXE <- Heur.RoundKick : No action
C:\TMP\orz.rar<RAR>:orz2.exe <- Downloader.Small.Zek : No action
C:\TMP\orz.rar<RAR>:orz3.exe <- Downloader.Agent.Rqj : No action
C:\TMP\orz.rar<RAR>:orz4.exe<UPack>:orz4.exe <- Downloader.Agent.Tyc : No action
C:\TMP\orz.rar<RAR>:orz4.exe<UPack>:orz4.exe<DLLRES>:res1.exe <- Trojan.Dropper.Agent.Xls : No action



Scanned objects : 14

Infected objects : 7

[ 本帖最后由 allinwonderi 于 2008-11-15 21:11 编辑 ]

08红伞威点

解压。。。红伞全歼。

马力

KV 2009