四样本

tonger2003

00

The EQs

Scan performed at: 2007-4-13 23:08:44
Scanning Log
NOD32 version 2187 (20070413) NT
Command line: C:\Documents and Settings\EQ2\桌面\m01.rar C:\Documents and Settings\EQ2\桌面\1.rar C:\Documents and Settings\EQ2\桌面\510392322.rar C:\Documents and Settings\EQ2\桌面\best90.rar
Operating memory - is OK

Date: 13.4.2007  Time: 23:08:48
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\m01.rar; C:\Documents and Settings\EQ2\桌面\1.rar; C:\Documents and Settings\EQ2\桌面\510392322.rar; C:\Documents and Settings\EQ2\桌面\best90.rar
C:\Documents and Settings\EQ2\桌面\1.rar ?RAR ?1.png - a variant of Win32/TrojanDownloader.Ani.Gen trojan
C:\Documents and Settings\EQ2\桌面\510392322.rar ?RAR ?510392322.exe - a variant of Win32/Spy.Delf.NEN trojan
Number of scanned files: 8
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 23:08:49 Total scanning time: 1 sec (00:00:01)

zzh161

NIS2个，费尔3个

Whitlack

kis6.0.2.621

已检测: 恶意程序 Exploit.Win32.IMG-ANI.gen (modification)        文件: D:\My Downloads\1.rar/1.png
已检测: 木马程序 Trojan-Downloader.JS.IstBar.ai        文件: D:\My Downloads\best90.rar/best90.asp
已检测: 木马程序 Trojan-PSW.Win32.Delf.qc        文件: D:\My Downloads\m01.rar/m01.exe//UPX

zxy900906

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\best90.rar'
Begin scan in 'C:\Documents and Settings\Administrator\桌面\m01.rar'
C:\Documents and Settings\Administrator\桌面\m01.rar
  [0] Archive type: RAR
  --> m01.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.27568
      [INFO]      A backup was created as '46509fa2.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\1.rar'
C:\Documents and Settings\Administrator\桌面\1.rar
  [0] Archive type: RAR
  --> 1.png
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
      [INFO]      A backup was created as '46919fa0.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\510392322.rar'
C:\Documents and Settings\Administrator\桌面\510392322.rar
  [0] Archive type: RAR
  --> 510392322.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      A backup was created as '464f9fa4.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

3个..

mofunzone

asp这种东西也可以算病毒？

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\m01.rar'
C:\Documents and Settings\morgan\My Documents\
  m01.rar
    [0] Archive type: RAR
    --> m01.exe
        [DETECTION] Is the Trojan horse TR/PSW.Steal.27568
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\1.rar'
C:\Documents and Settings\morgan\My Documents\
  1.rar
    [0] Archive type: RAR
    --> 1.png
        [DETECTION] Contains signature of the exploits EXP/Ani.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\510392322.rar'
C:\Documents and Settings\morgan\My Documents\
  510392322.rar
    [0] Archive type: RAR
    --> 510392322.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\best90.rar'
C:\Documents and Settings\morgan\My Documents\
  best90.rar
    [0] Archive type: RAR
    --> best90.asp

蓝色牛仔裤

beta蜘蛛又全杀了, 讨厌~
最好全部不杀, 好让人家说垃圾, 然后我就天天用垃圾 , 多爽~~
过几天换瑞星!

欠妳緈諨

avast!漏杀1个

harry_chang2003

PC-cillin 2007 殺3個

剑指七星

已检测到: 恶意程序 Exploit.Win32.IMG-ANI.gen (修改)        URL: http:/bbs.kafan.cn/attachment.php?aid=54726/1.png
已检测到: 木马程序 Trojan-Downloader.JS.IstBar.ai        URL: http:/bbs.kafan.cn/attachment.php?aid=54728/best90.asp
已检测到: 木马程序 Trojan-PSW.Win32.Delf.qc                        URL: http:/bbs.kafan.cn/attachment.php?aid=54729/m01.exe/UPX

第二个  过了     卡巴