今天最后两个吧[MD5: D68F7E AF013B]

allenhippo

反正是毒网下载得的，没仔细验证，一个启发一个不报。

最近工作太忙，唉

157131

卡巴飘了

tracydk

moonsilver

上报

wangjay1980

detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/bt9[1].exe//PE_Patch.UPX

1688388728

C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N\virus[1].rar\bt9[1].exe - infected with Trojan.PWS.Wsgame

Archive contains an infected item
病毒: Win32:Onlinegames-ACS [Trj]
檔案: virus[2].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\YEAJUU4N
處理序: GreenBrowser.exe

[ 本帖最后由 1688388728 于 2007-6-26 21:39 编辑 ]

aerbeisi

2007-6-26 21:39:30        Process btf[1].exe (PID: 2812): suspicious action.

Attempt to  list of modules executed during system startup (key \REGISTRY\MACHINE\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\ShellExecuteHooks, value C:\WINDOWS\System32\tmpFil, data ).

The EQs

Scan performed at: 2007-6-26 21:43:18
Scanning Log
NOD32 version 2355 (20070626) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 26.6.2007  Time: 21:43:22
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?bt9[1].exe - a variant of Win32/PSW.OnLineGames.RC trojan
Number of scanned files: 3
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 21:43:23 Total scanning time: 1 sec (00:00:01)

promised

两个启发
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\bt9[1].exe : is suspected of Downloader.Small.160
C:\ABC\...\btf[1].exe : is suspected of Trojan-PSW.Game.44 (paranoid heuristics)
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 6
- scanned         : 1       -  scanned    : 2       - scanned     : 6
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 2       - suspicious  : 1

Startup    : 22:04:51 26-06-2007
End        : 22:04:55 26-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

remind_me

avast !

喀嚓了。。。Win32:Onlinegames-ACS [Trj]