卡巴杀，红伞挂，应朋友要求鼓励下卡巴

zxgxxx

这几个是DLL文件，也请大家看看是什么马，我怀疑是鸽子，和我刚才发的那4个是一起的

xhtxht

解压微点没报，真的有木马么？

zxgxxx

我怀疑是僵尸了，但卡巴还是报了，红伞没报，别的我就不知道了

underoath

nod启发没报

mofunzone

感谢提供样本
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
202372         cmdbcs.dll         6.656         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
cmdbcs.dll         UNDER ANALYSIS


The file 'cmdbcs.dll' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
202373         mppdq.dll         6.144         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
mppdq.dll         UNDER ANALYSIS


The file 'mppdq.dll' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files contained inside archives alongside their results can be found below:File ID         Filename         Size (Byte)        Result
202374         upxdnd.dll         7.168         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
upxdnd.dll         UNDER ANALYSIS


The file 'upxdnd.dll' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

moonsilver

似乎是agent，不是鸽子

kp2006

在 C:\Documents and Settings\Administrator\桌面\木马过红伞.rar->upxdnd.dll 中发现 Trojan/PSW.Zhengtu.jl 病毒, 发现病毒
在 C:\Documents and Settings\Administrator\桌面\木马过红伞.rar->mppdq.dll 中发现 Trojan/PSW.GamePass.avk 病毒, 发现病毒

天空的蔚蓝

一点击,卡巴就报了

kasdywxx

扫出1个

worker321

avk全报
反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-2-4
开始时间: 2007-2-4 21:32
引擎: KAV 引擎 (AVK 16.10153), BD 引擎 (BD 16.6079)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: upxdnd.dll
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\木马过红伞.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎)
对象: cmdbcs.dll
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\木马过红伞.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎)
对象: mppdq.dll
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\木马过红伞.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎), Trojan.PWS.OnLineGames.AZ (BD 引擎)
对象: 木马过红伞.rar
        路径: C:\Documents and Settings\Administrator\桌面
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (3x) (KAV 引擎), Trojan.PWS.OnLineGames.AZ (BD 引擎)
扫描完成: 2007-2-4 21:32
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件