用犀牛抓了支给大家玩儿

Nblock

1[1].rar
Status:	INFECTED/MALWARE
MD5	b239c766d7f72fb03bf00cd2776638c5
Packers detected:	UPX
Scanner results
Scan taken on 03 Apr 2007 03:19:40 (GMT)
AntiVir	Found TR/PSW.Steal.27486
ArcaVir	Found nothing
Avast	Found nothing
AVG Antivirus	Found Generic3.QPI
BitDefender	Found Generic.PWStealer.E5CD9AFB
ClamAV	Found nothing
Dr.Web	Found nothing
F-Prot Antivirus	Found nothing
F-Secure Anti-Virus	Found Trojan-PSW.Win32.Delf.qc
Fortinet	Found PossibleThreat
Kaspersky Anti-Virus	Found Trojan-PSW.Win32.Delf.qc
NOD32	Found Win32/PSW.Delf.NGG
Norman Virus Control	Found nothing
Panda Antivirus	Found nothing
Rising Antivirus	Found nothing
VirusBuster	Found Trojan.PWS.Delf.Gen.2
VBA32	Found Trojan-Spy.Delf.13 (probable variant)

小邪邪

1[1]jpg\1[1].jpg       
Exploit-ANIfile.c (ED) (特洛伊)

mmll888

Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\1[1]jpg.rar'
C:\Documents and Settings\zxb\桌面\1[1]jpg.rar
  [0] Archive type: RAR
  --> 1[1].jpg
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [INFO]      The file was deleted!


Starting the file scan:

Begin scan in 'C:\Documents and Settings\zxb\桌面\1[1].rar'
C:\Documents and Settings\zxb\桌面\1[1].rar
  [0] Archive type: RAR
  --> 1[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27486
      [INFO]      The file was deleted!

xpn282

操作:阻止
进程路径:C:\Program Files\Internet Explorer\IEXPLORE.EXE
文件路径:C:\WINDOWS\system32\cmd.exe
规则:黑名单->禁止启用CMD命令->C:\WINDOWS\system32\cmd.exe

caocao

已删除: 木马程序 Trojan-PSW.Win32.Delf.qc        文件: D:\Downloads\1[1].rar.td\1[1].exe/UPX
已删除: 恶意程序 Exploit.Win32.IMG-ANI.k        文件: D:\Downloads\1[1]jpg.rar.td\1[1].jpg