几个样本，大家看看

蓝色牛仔裤

AVK只杀了11个..
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-9
Start time: 2007-3-11 0:58
Engine(s): KAV engine (AVK 17.3157), BD-Engine (BD 17.2348)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: old date.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.bi (KAV engine)
Object: old iexpl0re.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.fb (KAV engine)
Object: old mal.exe
        In archive: D:\old.rar
        Status: Dialer found
        Dialler: Trojan.Win32.Dialer.qy (KAV engine)
Object: old muma.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.QQPass.ro (KAV engine)
Object: old nettool.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Virus.Win32.Small.p (KAV engine)
Object: old qing.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Agent.ue (KAV engine)
Object: old Setup.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Backdoor.Win32.Hupigon.aqw (KAV engine)
Object: old TdTKYiR.com
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Backdoor.Win32.Agent.air (KAV engine)
Object: old ThankYou.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.QQPass.qi (KAV engine)
Object: old zt.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.Delf.lx (KAV engine)
Object: old ~tmp7687.exe
        In archive: D:\old.rar
        Status: Virus detected
        Virus: Backdoor.Win32.Agent.air (KAV engine)
Object: old.rar
        Path: D:
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.bi, Trojan-PSW.Win32.OnLineGames.fb, Trojan.Win32.Dialer.qy, Trojan-PSW.Win32.QQPass.ro, Virus.Win32.Small.p, Trojan-Downloader.Win32.Agent.ue, Backdoor.Win32.Hupigon.aqw, Backdoor.Win32.Agent.air (2x), Trojan-PSW.Win32.QQPass.qi, Trojan-PSW.Win32.Delf.lx (KAV engine)
Analysis complete: 2007-3-11 0:59
    1 files checked
    1 infected files detected
    0 suspected files detected

蓝色牛仔裤

starting the file scan:

Begin scan in 'D:\old.rar'
D:\old.rar
  [0] Archive type: RAR
  --> old\auto.bat
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> old\date.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> old\ewtRmLR.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> old\iexpl0re.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> old\login.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> old\mal.exe
      [DETECTION] Is the Trojan horse TR/Dialer.QY.31
  --> old\muma.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.RP
  --> old\nettool.exe
      [DETECTION] Is the Trojan horse TR/VB.avf.1
  --> old\qing.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.19968.1
  --> old\Setup.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> old\svchost.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> old\svchost2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> old\system.bat
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> old\TdTKYiR.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> old\ThankYou.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.44649
  --> old\update1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> old\zt.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.CC.1
  --> old\~tmp7687.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> old\µÇ½Æ÷.exe
      [DETECTION] Contains signature of the application APPL/ePL4000
      [INFO]      The file was deleted!

bridgewr

好多啊

bridgewr

还有哪