貌似就铁壳没报~~

schumi小粉

http://virscan.org/report/dbda29bf0c3cdb073bc318b16f0cd491.html

Found Sandbox: W32/DLoader.NGYO.dropper; [ General information ]

* File length: 128305 bytes.

[ Changes to filesystem ]
* Creates directory C:.
* Creates directory C:\WINDOWS.
* Creates file C:\WINDOWS\__tmp_rar_sfx_access_check_55383377.
* Deletes file __tmp_rar_sfx_access_check_55383377.
* Creates file C:\WINDOWS\)\x99k\xe8.exe.
* Creates file C:\WINDOWS\tl.exe.

[ Process/window information ]
* Creates a dialogbox with caption "WinRAR \xea\xe3\x8b\x87\xf6".
* Buttons found in dialogbox: id102[278,173]"O\xc8(&W)..." id1[211,223]"\x89\xc5" id2[278,223]"\xd6\x88" .
* Creates a dialogbox with caption "".
* Buttons found in dialogbox: id1[211,223]"\xa5\xd7" id2[278,223]"\xd2\xdd" .
* Pressing button with id 1 "".
* Attempts to open CLSID {00000005-0000-0000-2C00-000094590500}.
* Attemps to NULL C:\WINDOWS\)\x99k\xe8.exe NULL.
* Creates process ")\x99k\xe8.exe".

[ Signature Scanning ]
* C:\WINDOWS\)\x99k\xe8.exe (20480 bytes) : no signature detection.
* C:\WINDOWS\tl.exe (22859 bytes) : W32/DLoader.NGYO.

黑衣~魂

dr.web殺而且沒有報殼
1.exe\tl.exe---Trojan.PWS.Gamania.17197
1.exe---Archive contains infected objects

ledled

名称: Trojan.OnlineGames.Gen.107
类型: Virus

描述:


文件:
c:\users\administrator\desktop\1\1.exe|tl.exe

xxl

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
469830&k=4eaab391a4d91331cba75e237971782
9&t=1235150365

发生下列错误：

请求的对象被感染，发现下列病毒 Worm.Win32.Downloader.aaz


如有疑问，请联系您的技术支持
创建日期：
Sat Feb 21 01:19:48 2009
Kaspersky Lab

Sebastian

TR/Spy.Gen

hljdqzr

360报了