老面孔更新了哦，来四个卡巴不报的[MD5: 0CDC71 F16D14 E068B1 5381FD]

allenhippo

还是毒网产物

[ 本帖最后由 allenhippo 于 2007-6-6 21:15 编辑 ]

caocao

KIS 7
已经隔离: 病毒 Downloader (变种)        文件: D:\Downloads\virus.rar/mm[1].exe

观弈书童

mm[1].exe - Win32/PSW.Delf.NHI 木马的变种
SysInfo.vxd - Win32/PSW.Delf.NHI 木马的变种

tracydk

估计是下载者,AVAST从来就不报下载者的

Redevil

已检测到: 风险软件 Invader        运行进程: C:\Documents and Settings\Redevil\Local Settings\Temp\Rar$EX01.578\mm[1].exe

promised

启发通杀
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\mm[1].exe : is suspected of Trojan-Spy.Delf.13
C:\...\romdrivers.dll : is suspected of Trojan-PSW.Lmir.83 (paranoid heuristics)
C:\...\smss[1].exe : is suspected of Trojan-PSW.Lmir.83 (paranoid heuristics)
C:\ABC\virus.rar:<RAR>\SysInfo.vxd : is suspected of Trojan-Spy.Delf.13
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 4       - total       : 17
- scanned         : 1       -  scanned    : 4       - scanned     : 16
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 4       - suspicious  : 1

Startup    : 21:21:24 06-06-2007
End        : 21:21:28 06-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

[ 本帖最后由 promised 于 2007-6-6 21:21 编辑 ]

carlcai

赛门铁克杀了一个！

mhj144007

Dr.Web
mm[1].exe;C:\Documents and Settings\Mahaijun\桌面\virus;Trojan.PWS.Gamania.origin;;
SysInfo.vxd;C:\Documents and Settings\Mahaijun\桌面\virus;Trojan.PWS.Gamania.origin;;

rasis

irus.rar
  [0] Archive type: RAR
  --> mm[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.QC.37
  --> romdrivers.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> smss[1].exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> SysInfo.vxd
      [DETECTION] Is the Trojan horse TR/PSW.Delf.QC.37

蓝色牛仔裤

郁闷。。。


Check system areas...
Check selected directories and files...
Object: mm[1].exe
        In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
        Status: Virus detected
        Virus: Generic.PWStealer.F77CD1C2 (BD-Engine)
Object: SysInfo.vxd
        In archive: C:\Documents and Settings\Administrator\桌面\virus.rar
        Status: Virus detected
        Virus: Trojan.PWS.Delf.QC (BD-Engine)
Object: virus.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Generic.PWStealer.F77CD1C2, Trojan.PWS.Delf.QC (BD-Engine)
Analysis complete: 2007-6-6 21:46
    1 files checked
    1 infected files detected
    0 suspected files detected