virus

fengxing

virus

Palkia

rs miss 2

2052_zh_cn.exe

2052_zh_cn_se.exe

su-tt

C:\Documents and Settings\Administrator\桌面\afgr[1]\afgr\2052_zh_cn.exe > CAB > AVClientSpindle\spin\ITMCLient.spar > ZIP > scripts/dateTimeValidation.js - CRC 校验和错误，文件可能已损坏

2052_zh_cn_se.exe 无反应

其他ESET查杀

ghj89100062

卡巴剩下两个回复如下

尊敬的用户，您好！

2052_zh_cn.exe
2052_zh_cn_se.exe

以上文件中不包含恶意代码。



非常感谢您向我们提供可疑文件样本，有了您的支持我们将做得更好。
　　

感谢您对卡巴斯基的信任与支持！
我们诚恳地希望您来电或来信寻求关于产品的技术支持服务，如果您有关于卡巴斯基公司的合理化建议也希望您与我们联系。
24小时技术支持热线400-611-6633
中文主页：http://www.kaspersky.com.cn/
技术支持邮箱：support@kaspersky.com.cn
病毒上报邮箱：virus@kaspersky.com.cn

卡巴斯基中国技术服务中心            399号工程师为您服务
=======  2009-01-15  11:21:26 您在来信中写道：=======

kingmuro

sam.to

今晚有空測試一下

ghj89100062

记得给结果
我就不测了

Sherry.ai

RX To KL
Miss 2

08红伞威点

File ID  Filename Size (Byte) Result
25232602  afgrx2.rar 1.48 MB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25232453  2052_zh_cn.exe  1.14 MB  UNDER ANALYSIS
25232455  2052_zh_cn_se.exe  466.01 KB  UNDER ANALYSIS
---------------------------------------------------------------------------------------------------------------
to Avira。

Start of the scan: 2009年1月15日  17:15
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\afgr\A0045335.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '499efec9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\afgr\A0045462.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '499efeca.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\afgr\A0047313.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '48f500fb.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\afgr\A0047495.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '499efecc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\afgr\A0050809.dll
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '48f500fd.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\afgr\afgrxfndqfxxnji.dll
      [DETECTION] Is the TR/Drop.BHO.F.3 Trojan
    [NOTE]      A backup was created as '49d5ff01.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

08红伞威点

File ID  Filename Size (Byte) Result
25232453  2052_zh_cn.exe  1.14 MB  CLEAN
25232455  2052_zh_cn_se.exe  466.01 KB  CLEAN
干净。