3.22样本一只...

alainhenri

AntiVir	Found nothing
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found VB.AW
BitDefender	Found BehavesLike:Win32.VBMalware (probable variant)
ClamAV	Found nothing
Dr.Web	Found Trojan.Nufa
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found nothing
Fortinet	Found nothing
Kaspersky Anti-Virus	Found nothing
NOD32	Found probably unknown NewHeur_PE (probable variant)
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
VirusBuster	Found nothing
VBA32	Found nothing

已上报红伞....

allenhippo

不是吧,norton居然能查

Nblock

创建者WMPLAYER.EXE

创建时间                     生成物文件名
2007-03-22 09:55:44 C:\WINDOWS\SYSTEM32\FILE32.EXE   
2007-03-22 09:55:45 C:\WINDOWS\RENCOM.EXE   
2007-03-22 09:55:48 D:\IGPXE.EXE     

2007-03-22 09:55:44 HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ FILE32  C:\WINDOWS\SYSTEM32\FILE32.EXE   C:\DOCUMENTS AND SETTINGS\NEW\桌面\WMPLAYER\WMPLAYER.EXE

2007-03-22 09:55:44 HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUNSERVICES\ RENCOM  C:\WINDOWS\RENCOM.EXE   C:\DOCUMENTS AND SETTINGS\NEW\桌面\WMPLAYER\WMPLAYER.EXE

[ 本帖最后由 Nblock 于 2007-3-22 10:04 编辑 ]

傻猪猪米走鸡

掃描進行於：2007-3-22 10:00:32
掃描日誌
NOD32版本 2133 (20070321) NT
指令行： C:\Documents and Settings\Administrator\桌面\wmplayer.rar
C:\Program Files\Eset\nod32.exe - OK
1 的MBR區。實體磁碟 - OK
1 的活躍開機磁區。實體磁碟 - OK
2 的活躍開機磁區。實體磁碟 - OK

日期： 22.3.2007  時間：10:00:38
已開啟反隱藏功能.
已掃描的磁碟，目錄及檔案：C:\Documents and Settings\Administrator\桌面\wmplayer.rar
C:\Documents and Settings\Administrator\桌面\wmplayer.rar >>RAR >>wmplayer.exe - 未查明的 NewHeur_PE virus [7]
C:\Documents and Settings\Administrator\桌面\wmplayer.rar:Zone.Identifier - OK
已掃描的檔案數目：2
已發現的病毒數目：1
完結時間： 10:00:38 總掃描時間：0 秒 (00:00:00)

注意：
[7] 這文件大概感染上一個未知的病毒。

蓝色牛仔裤

Check system areas...
Check selected directories and files...
Object: wmplayer.exe
        In archive: D:\wmplayer.rar
        Status: Suspected virus
        Virus: BehavesLike:Win32.VBMalware (BD-Engine)
Object: wmplayer.rar
        Path: D:
        Status: Suspected virus
        Virus: BehavesLike:Win32.VBMalware (BD-Engine)
Analysis complete: 2007-3-22 10:27
    1 files checked
    0 infected files detected
    1 suspected files detected

The EQs

Scan performed at: 2007-3-22 11:49:11
Scanning Log
NOD32 version 2134 (20070322) NT
Command line: C:\Documents and Settings\EQ2\桌面\wmplayer.rar
Operating memory - is OK

Date: 22.3.2007  Time: 11:49:15
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\wmplayer.rar
C:\Documents and Settings\EQ2\桌面\wmplayer.rar ?RAR ?wmplayer.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 11:49:15 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

小邪邪

mcafee

solcroft

把虚拟机系统修好了，Cyberhawk恢复正常营业

The EQs

LS的那个中文名是什么？？红鹰？？

solcroft

这就不太清楚了，好像没汉化版，所以也没有正式的中文名...