病毒

seamonkey

在江民论坛发现的。

伯夷叔齐

D:\病毒木马样本\1243.rar
  [0] Archive type: RAR
  --> 200752233141576\н¨Îļþ¼Ð\ycnt5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> 200752233141576\н¨Îļþ¼Ð\ycnt7.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!

End of the scan: 2007年5月22日  19:16
Used time: 00:10 min
The scan has been done completely.
      0 Scanning directories
      7 Files were scanned
      2 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
      0 Hidden objects were found

风雪

费尔启发有问题。完了上报。

电影结束了

已删除: 木马程序 Trojan-Proxy.Win32.Small.du        文件: C:\Documents and Settings\wangcheng\桌面\123.rar/200752233141576\新建文件夹\ycnt5.exe//PE_Patch//UPack//CELINDRIVER.SYS
已删除: 木马程序 Trojan-Proxy.Win32.Small.du        文件: C:\Documents and Settings\wangcheng\桌面\123.rar/200752233141576\新建文件夹\ycnt7.exe//PE_Patch//UPack//CELINDRIVER.SYS

promised

VBA全挂了

tracydk

Starting the file scan:

Begin scan in 'F:\样本\123.rar'
F:\样本\123.rar
  [0] Archive type: RAR
  --> 200752233141576\н¨Îļþ¼Ð\ycnt5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> 200752233141576\н¨Îļþ¼Ð\ycnt7.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was deleted!

hj5abc

NOD32一个也不报 ..
一个也不..
no..

l784588

avast报了!

鼻耳盖子

电影结束了

Hello,

ycnt1.exe_, ycnt6.exe_, ycnt8.exe_

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: ?????.rar

>     password:virus