10X

Palkia

目测

qianwenxiang

SUPERAntiSpyware Scan Log
http://www.superantispyware.com

Generated 11/16/2008 at 07:01 PM

Application Version : 4.21.1004

Core Rules Database Version : 3639
Trace Rules Database Version: 1622

Scan type       : Custom Scan
Total Scan Time : 00:00:01

Memory items scanned      : 0
Memory threats detected   : 0
Registry items scanned    : 0
Registry threats detected : 0
File items scanned        : 9
File threats detected     : 1

Trojan.Vundo-Variant/Small-GEN
        C:\TEST\0811\12\SYSTEM32\URQPFGYP.DLL

wu19934718

费尔报一个。。

luxiao200888

C:\Documents and Settings\Owner\桌面\SYSTEM32.rar > RAR > sh21012.dll - Win32/PSW.OnLineGames.NRW 特洛伊木马 的变种
C:\Documents and Settings\Owner\桌面\SYSTEM32.rar > RAR > vmdetdhc.exe - 可能是 Win32/Genetik 特洛伊木马 的变种

fzz8848

File ID	Filename	Size (Byte)	Result
25189715	msflxgr.ocx.dll	29.02 KB	MALWARE
25189716	sh21012.add	2.81 KB	UNDER ANALYSIS
25189717	sh21012.dll	23.5 KB	MALWARE
25189718	Beep.sys	13.28 KB	UNDER ANALYSIS
25189719	urqPfGYP.dll	34.5 KB	UNDER ANALYSIS
25189720	vmdetdhc.exe	52.5 KB	MALWARE
233779	HIMEM.SYS	4.66 KB	KNOWN CLEAN
4218658	r21012.exe	32 KB	KNOWN CLEAN
4218678	spcss.dll	390 KB	KNOWN CLEAN
4039214	secdrv.sys	0 Byte	KNOWN CLEAN

BING126

McAfee  报了2个。。

beep.sys              no  
himem.sys            no  
msflxgr.ocx.dll       no  
r21012.exe           no  
secdrv.sys            no  
sh21012.add        no  
sh21012.dll          generic pws.y              
spcss.dll               no  
urqpfgyp.dll          vundo.gen.m               
vmdetdhc.exe       no

无尽藏海

Resolved Threats:
Backdoor.Trojan
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[vmdetdhc.exe] inside of [d:\virus\system32.zip] - Deleted

wangjay1980

TO KL

尤金卡巴斯基

报了一个
2008/11/16 20:38:39        已杀毒        木马程序 Trojan-Dropper.Win32.Agent.yzy        G:\Temp\Virus\SYSTEM32.rar/sh21012.dll//#

allinwonderi

[Scanning : C:\TMP]


C:\TMP\SYSTEM32.rar<RAR>:sh21012.dll<DLLRES>:res0.exe <- Trojan.Dropper.Agent.Yzy : No action



Scanned objects : 14

Infected objects : 1