小小的两个

beat2

红伞继续飘过

fanrubin

卡6

The EQs

Scan performed at: 2007-5-16 10:20:45
Scanning Log
NOD32 version 2269 (20070516) NT
Command line: C:\Documents and Settings\EQ2\桌面\2.zip
Operating memory - is OK

Date: 16.5.2007  Time: 10:20:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\2.zip
C:\Documents and Settings\EQ2\桌面\2.zip ?ZIP ?wincab.sys - a variant of Win32/Rootkit.Vanti.EE trojan
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 10:20:49 Total scanning time: 0 sec (00:00:00)

tracydk

mofunzone

File ID          Filename          Size (Byte)         Result
545562          preupd.dll          20.34 KB          UNDER ANALYSIS
545563          wincab.sys          21.14 KB          UNDER ANALYSIS

moonsilver

C:\Documents and Settings\moonsilver\桌面\2.zip>>
preupd.dll

Trojan.PSW.ROCOnline.fp

C:\Documents and Settings\moonsilver\桌面\2.zip>>
wincab.sys

RootKit.Torn.v

瑞星

欠妳緈諨

全杀

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\2.zip'
D:\Documents and Settings\dell\桌面\
D:\Documents and Settings\dell\桌面\2.zip
  [0] Archive type: ZIP
  --> preupd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QW.17
      [WARNING]   Infected files in archives cannot be repaired!
  --> wincab.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.OS.2
      [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!

mofunzone

雨伞的速度真是[:26:]
File ID          Filename          Size (Byte)         Result
545561          2.zip         10.24 KB         OK

A listing of files contained inside archives alongside their results can be found below:
File ID          Filename          Size (Byte)         Result
545562          preupd.dll          20.34 KB          MALWARE
545563          wincab.sys          21.14 KB          MALWARE


Please find a detailed report concerning each individual sample below:
Filename         Result          preupd.dll          MALWARE

The file 'preupd.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnLineGames.QW.17. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.148.
Filename         Result          wincab.sys          MALWARE

The file 'wincab.sys' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnLineGames.OS.2. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 6.38.01.148.

[ 本帖最后由 mofunzone 于 2007-5-15 23:40 编辑 ]

wangjay1980

比卡巴差点