14/39

醉一生爱妍

wrq

file:
C:\Users\wrq\Desktop\2830891.rar->2830891.exe->(RarSfx)->88.exe->(RarSfx)->6.exe->(RarSfx)->3.exe->(RarSfx)->55.exe->(UPX)

filelocalcopy:
C:\ProgramData\Microsoft\Windows Defender\LocalCopy\{C4327C35-89ED-4082-97E5-47B2858FBA8B}-2830891.rar

Palkia

to rs

黑衣~魂

他也壓縮太多毒在裡面了吧....

2830891.exe/88.exe/6.exe/3.exe/i06.exe\data002;D:\Documents and Settings\Administrator\桌面\2830891.exe/88.exe/6.exe/3.exe/i06.exe;Trojan.Click.origin;;
i06.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
2830891.exe/88.exe/6.exe/3.exe/55.exe\data004;D:\Documents and Settings\Administrator\桌面\2830891.exe/88.exe/6.exe/3.exe/55.exe;Probably DLOADER.Trojan;;
55.exe;D:\Documents and Settings\Administrator\桌面;Container contains infected objects;;
3.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
2830891.exe/88.exe/6.exe\7.exe;D:\Documents and Settings\Administrator\桌面\2830891.exe/88.exe/6.exe;Trojan.Click.24756;;
6.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
2830891.exe/88.exe/5.exe\2.exe;D:\Documents and Settings\Administrator\桌面\2830891.exe/88.exe/5.exe;Probably BACKDOOR.Trojan;;
5.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
88.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;
2830891.exe;D:\Documents and Settings\Administrator\桌面;Archive contains infected objects;;

xxl

KIS8.0 Kill

cftbhumko

微点已测试

xiaoqiang305

to jiangmin

尤金卡巴斯基

Kaspersky Kill All

woai_jolin

Start of the scan: 2009年3月22日  13:43

Starting the file scan:

Begin scan in 'C:\Users\Jason\Downloads\2830891.rar'
C:\Users\Jason\Downloads\2830891.rar
  [0] Archive type: RAR
    --> 2830891.exe
      [1] Archive type: RAR SFX (self extracting)
      --> 111.exe
        [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
      --> 88.exe
        [2] Archive type: RAR SFX (self extracting)
        --> 6.exe
          [3] Archive type: RAR SFX (self extracting)
          --> 3.exe
            [4] Archive type: RAR SFX (self extracting)
            --> i06.exe
              [5] Archive type: NSIS
              --> main/msci06.exe
                [6] Archive type: RSRC
                [DETECTION] Is the TR/Spy.Gen Trojan
            --> 55.exe
              --> Object
                [DETECTION] Contains recognition pattern of the ADSPY/Agent.XA adware or spyware
          --> 7.exe
            [DETECTION] Is the TR/Spy.Gen Trojan
        --> 5.exe
          [3] Archive type: RAR SFX (self extracting)
          --> 2.exe
            [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
          --> 1.exe
            [4] Archive type: RAR SFX (self extracting)
            --> 91.exe
              [5] Archive type: NSIS
              --> ProgramFilesDir/10.exe
                [DETECTION] Is the TR/Spy.Gen Trojan
            --> server.exe
              [DETECTION] Is the TR/Spy.Gen Trojan

Beginning disinfection:
C:\Users\Jason\Downloads\2830891.rar
    [NOTE]      The file was moved to '49f8d04b.qua'!


End of the scan: 2009年3月22日  13:43
Used time: 00:00 Minute(s)

The scan has been done completely.

      0 Scanned directories
     18 Files were scanned
      7 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      0 files were deleted
      0 Viruses and unwanted programs were repaired
      1 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      9 Archives were scanned
      0 Warnings
      1 Notes

ledled

Name: Packed/FSG
Type: Sequence

Description:


Files:
c:\users\administrator\desktop\2830891.exe|88.exe|5.exe|2.exe