继续，再来五个[MD5: B23EE1 21C21E DAC3DD 0249D9 89ABA2]

allenhippo

还是刚才那个毒网产物

红心王子

两个
斧头监控看守到位

kp2006

Kaspersky Anti-Virus 7.0The requested URL http://bbs.kafan.cn/attachment.php?aid=88395 is infected with Trojan-Downloader.Win32.Small.czl virus

allenhippo

发错了，漏了一个卡巴报的进来了，不报的那个我去找找

蓝色牛仔裤

漏一个dll 。


[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>C:\Documents and Settings\Administrator\桌面\virus.rar\1633[1].exe probably infected with BACKDOOR.Trojan
>C:\Documents and Settings\Administrator\桌面\virus.rar\163c[1].exe infected with Trojan.PWS.Wsgame
>>>>C:\Documents and Settings\Administrator\桌面\virus.rar\~Temp294.tmp infected with Trojan.DownLoader.origin
>>C:\Documents and Settings\Administrator\桌面\virus.rar\checkfile.dll - Ok
>C:\Documents and Settings\Administrator\桌面\virus.rar\163b[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

yashoo

2个

The EQs

Scan performed at: 2007-6-17 12:34:01
Scanning Log
NOD32 version 2335 (20070616) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 17.6.2007  Time: 12:34:05
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?1633[1].exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?163c[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?~Temp294.tmp - a variant of Win32/TrojanDownloader.Delf.BHO trojan
Number of scanned files: 6
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 12:34:06 Total scanning time: 1 sec (00:00:01)

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用



===============================================
   ___________病毒查杀结果__________________


===============================================

2007年6月17日12时35分36秒 开始查杀C:\Documents and Settings\Administrator\桌面\virus\virusw2
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virusw2\1633[1].exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\virusw2\checkfile.dll 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。


-----------------------------------------

2007年6月17日12时35分36秒收起线程…100% 查杀完毕！
扫描文件：5查杀病毒：2

Anycall-D908

那个dll和tmp文件不算吧?怎么运行,我想不出怎么用微点测试他.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus(2).rar'
C:\Documents and Settings\Administrator\My Documents\
  virus(2).rar
    [0] Archive type: RAR
    --> 1633[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 163c[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
    --> ~Temp294.tmp
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> checkfile.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLine.WY.11
        [WARNING]   Infected files in archives cannot be repaired!
    --> 163b[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!