U盘中截获的五只可疑木马。

剑舞江南

在客户U盘中截获的五只小马。红伞、avast！、AVG全部报告病毒。

检测报告：
Avira AntiVir Personal9.0
扫描开始于: 2009-10-28  17:48
开始文件扫描:
开始扫描 'H:\' <EUSTICK>
H:\RECYCLER.exe
    [检测]        Is the TR/Dropper.Gen Trojan
H:\Lenovo.exe
    [检测]        Is the TR/Dropper.Gen Trojan
H:\.vbs
    [检测]        Contains recognition pattern of the VBS/Agent.AB VBS script virus
H:\Windows.scr
    --> Object
      [检测]        Is the TR/Autorun.BK Trojan
H:\RavMon.exe
    [检测]        Is the TR/Agent.Abt.3 Trojan
AVG Free8.5
已完成扫描 "外壳扩展扫描（Shell Extension Scan）"。
感染;"6";"0";"6"
选择要扫描的文件夹：;"C:\Documents and Settings\Administrator\桌面\五只小马.rar;"
扫描开始时间：;"2009年10月29日 星期四, 11:08:52"
扫描完成时间：;"2009年10月29日 星期四, 11:08:55 (2 秒)"
扫描的对象总数：;"6"
文件;"感染";"结果"
C:\Documents and Settings\Administrator\桌面\五只小马.rar;"发现病毒 VBS/Agent";"已感染"
C:\Documents and Settings\Administrator\桌面\五只小马.rar:\.vbs;"发现病毒 VBS/Agent";"已感染"
C:\Documents and Settings\Administrator\桌面\五只小马.rar:\Lenovo.exe;"特洛伊木马 Downloader.Generic8.GRO";"已感染"
C:\Documents and Settings\Administrator\桌面\五只小马.rar:\RavMon.exe;"特洛伊木马 Generic2.UTK";"已感染"
C:\Documents and Settings\Administrator\桌面\五只小马.rar:\RECYCLER.exe;"特洛伊木马 Downloader.Generic8.GRO";"已感染"
C:\Documents and Settings\Administrator\桌面\五只小马.rar:\Windows.scr;"特洛伊木马 PSW.OnlineGames.KHV";"已感染"
Avast！Home　Edition4.8
2009-10-29 11:17:27 Administrator 4052 Sign of "Win32:Agent-HHM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\五只小马.rar\RavMon.exe" file.  
2009-10-29 11:17:34 Administrator 4052 Sign of "Win32:QQPass-TA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\五只小马.rar\Windows.scr" file.  
2009-10-29 11:17:39 Administrator 4052 Sign of "VBS:Malware-gen" has been found in "C:\Documents and Settings\Administrator\桌面\五只小马.rar\.vbs" file.  
2009-10-29 11:17:41 Administrator 4052 Sign of "Win32:Spyware-gen [Spy]" has been found in "C:\Documents and Settings\Administrator\桌面\五只小马.rar\Lenovo.exe" file.  
2009-10-29 11:17:43 Administrator 4052 Sign of "Win32:Spyware-gen [Spy]" has been found in "C:\Documents and Settings\Administrator\桌面\五只小马.rar\RECYCLER.exe" file.  


下载地址：http://d.namipan.com/d/4ff03e78daa04871ce406b8667a84dcbefd1a657c3e52900

kingmuro

病毒名称        文件名
Worm.Win32.Autorun.eyr        D:\MY DOCUMENTS\桌面\TEST\五只小马\RECYCLER.EXE
Worm.Win32.Autorun.eyr        D:\MY DOCUMENTS\桌面\TEST\五只小马\LENOVO.EXE
Trojan.PSW.Win32.OnlineGames.ysl        D:\MY DOCUMENTS\桌面\TEST\五只小马\WINDOWS.SCR>>upx_c>>DATAINFO
Trojan.Win32.Undef.tur        D:\MY DOCUMENTS\桌面\TEST\五只小马\RAVMON.EXE

kingmuro

----------------------
D:\My Documents\桌面\test\五只小马\RavMon.exe        Worm.Generic.54910        已删除
D:\My Documents\桌面\test\五只小马\Windows.scr        Trojan.Generic.2122935        已删除
D:\My Documents\桌面\test\五只小马\Lenovo.exe        Trojan.Spy.Agent.NXS        已删除
D:\My Documents\桌面\test\五只小马\RECYCLER.exe        Trojan.Spy.Agent.NXS        已删除

samtogo

NIS2010五只全杀。。。

z2665

McAfee kill all

尤金卡巴斯基

2009/10/30 0:04:33        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.deu        G:\Temp\Virus\五只小马.rar/Windows.scr               
2009/10/30 0:04:33        已清除        木马程序 Trojan.Win32.Agent.abt        G:\Temp\Virus\五只小马.rar/RavMon.exe               
2009/10/30 0:04:33        已清除        木马程序 Trojan-Downloader.Win32.VB.ixp        G:\Temp\Virus\五只小马.rar/RECYCLER.exe               
2009/10/30 0:04:33        已清除        病毒 Worm.Win32.FlyStudio.cc        G:\Temp\Virus\五只小马.rar/Lenovo.exe               
2009/10/30 0:04:33        已清除        病毒 Worm.VBS.Agent        G:\Temp\Virus\五只小马.rar/.vbs

strawman0719

NOD32 kill all（5）

lyqzg

下载后被KV查杀