费尔报病毒木马

kp2006

快杀

The EQs

nod32第一个未报，第二个杀
Scan performed at: 2007-3-12 2:11:21
Scanning Log
NOD32 version 2107 (20070311) NT
Command line: C:\Documents and Settings\EQ2\桌面\mppds.rar
Operating memory - is OK

Date: 12.3.2007  Time: 02:11:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\mppds.rar
C:\Documents and Settings\EQ2\桌面\mppds.rar ?RAR ?mppds.exe - probably a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\mppds.rar ?RAR ?mppds.dll - Win32/PSW.Agent.NCC trojan - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 02:11:26 Total scanning time: 1 sec (00:00:01)

jlennon

熊猫报第二个

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-11
Start time: 2007-3-12 3:10
Engine(s): KAV engine (AVK 17.3208), BD-Engine (BD 17.2388)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: mppds.exe
        In archive: C:\Documents and Settings\Administrator\桌面\mppds.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.Agent.ANV (BD-Engine)
Object: mppds.dll
        In archive: C:\Documents and Settings\Administrator\桌面\mppds.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.PWS.OnlineGames.CW (BD-Engine)
Object: mppds.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (2x) (KAV engine), Trojan.Agent.ANV, Trojan.PWS.OnlineGames.CW (BD-Engine)
Analysis complete: 2007-3-12 3:10
    2 files checked
    1 infected files detected
    0 suspected files detected

鱼是一只我

驱逐舰
2007-3-12 7:09:31        mppds.rar        (S)C:\Documents and Settings\xxx\桌面        Trojan.Packed.49        12

蓝色牛仔裤

Starting the file scan:

Begin scan in 'D:\mppds.rar'
D:\mppds.rar
  [0] Archive type: RAR
  --> mppds.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.ES.820
  --> mppds.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.ES.819
      [INFO]      The file was deleted!

都是报第一个的,第二个是否误报?

蓝色牛仔裤

第二个蜘蛛报了!!!

蓝色牛仔裤

Antivirus	Version	Update	Result
AntiVir	7.3.1.41	03.11.2007 [td]no virus found
Authentium	4.93.8	03.09.2007 [td]no virus found
Avast	4.7.936.0	03.11.2007 [td]no virus found
AVG	7.5.0.447	03.11.2007 [td]no virus found
BitDefender	7.2	03.11.2007 [td]no virus found
CAT-QuickHeal	9.00	03.10.2007 [td]no virus found
ClamAV	devel-20060426	03.12.2007 [td]no virus found
DrWeb	4.33	03.11.2007	DLOADER.Trojan
eSafe	7.0.14.0	03.11.2007 [td]no virus found
eTrust-Vet	30.6.3469	03.10.2007 [td]no virus found
Ewido	4.0	03.11.2007 [td]no virus found
FileAdvisor	1	03.12.2007 [td]no virus found
Fortinet	2.85.0.0	03.11.2007 [td]no virus found
F-Prot	4.3.1.45	03.09.2007 [td]no virus found
F-Secure	6.70.13030.0	03.11.2007 [td]no virus found
Ikarus	T3.1.1.3	03.11.2007 [td]no virus found
Kaspersky	4.0.2.24	03.11.2007 [td]no virus found
McAfee	4981	03.09.2007 [td]no virus found
Microsoft	1.2306	03.11.2007 [td]no virus found
NOD32v2	2107	03.11.2007 [td]no virus found
Norman	5.80.02	03.10.2007 [td]no virus found
Panda	9.0.0.4	03.11.2007 [td]no virus found
Prevx1	V2	03.12.2007 [td]no virus found
Sophos	4.15.0	03.10.2007	Mal/Packer
Sunbelt	2.2.907.0	03.10.2007 [td]no virus found
Symantec	10	03.11.2007 [td]no virus found
TheHacker	6.1.6.073	03.09.2007 [td]no virus found
UNA	1.83	03.11.2007 [td]no virus found
VBA32	3.11.2	03.10.2007 [td]no virus found
VirusBuster	4.3.19:9	03.11.2007 [td]no virus found

mofunzone

hotunist
番茄花园工具条。。
费尔直接木马，无语。。
上报antivir做ad/spy了。。
Thank you for your submission. Below you can see the current status of the uploaded files.


A listing of files alongside their results can be found below:File ID         Filename         Size (Byte)        Result
221080         hotunist.exe         544.768         UNDER ANALYSIS



Please find a detailed report concerning each individual sample below: Filename        Result
hotunist.exe         UNDER ANALYSIS


The file 'hotunist.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.

hsjj2005

卡巴