早上来8个[MD5: F3655B D6609E 93A77C 2815CD 985BD0 557AA5 AD1A2C AF665B]

allenhippo

超速被躲在树后面的police罚款1000RMB

差点付不起买路钱

aerbeisi

卡巴6个。

The EQs

Scan performed at: 2007-6-30 8:35:05
Scanning Log
NOD32 version 2364 (20070629) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 30.6.2007  Time: 08:35:09
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?10[1].exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?index.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?x2.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?x3.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?x4.exe - a variant of Win32/PSW.OnLineGames.RC trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?x7.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?xx11.exe - a variant of Win32/PSW.OnLineGames.RC trojan
Number of scanned files: 9
Number of threats found: 7
Number of files cleaned: 1
Time of completion: 08:35:10 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.rar'
C:\Documents and Settings\Administrator\My Documents\
  virus.rar
    [0] Archive type: RAR
    --> 10[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> index.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> x2.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
    --> x3.exe
    --> x4.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
    --> x7.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
    --> x8.exe
    --> xx11.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

风雪

费尔启发一个，剩下无反应。

wangjay1980

detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/10[1].exe//NSPack
detected: virus Downloader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/index.exe
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x2.exe//PE_Patch.UPX
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x4.exe//PE_Patch//UPack
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/x7.exe//PE_Patch//UPack
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/xx11.exe//PE_Patch//UPack

Hello,

10[1].exe_ - Trojan-Downloader.Win32.Small.czl,
index.exe_ - Trojan-Downloader.Win32.Small.evs,
x2.exe_ - Trojan-PSW.Win32.OnLineGames.ql,
x3.exe_ - Trojan-Proxy.Win32.Small.du,
x4.exe_ - Trojan-PSW.Win32.Nilage.bki,
x7.exe_ - Trojan-PSW.Win32.OnLineGames.sc,
x8.exe_ - Trojan.Win32.Agent.anj,
xx11.exe_ - Trojan-PSW.Win32.Nilage.bjp

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: virus8.zip

[ 本帖最后由 wangjay1980 于 2007-6-30 10:14 编辑 ]

woai_jolin

漏一个上报ing
2007/6/30 8:48:32        eAmon        file        D:\病毒上报\XX11.EXE        a variant of Win32/PSW.OnLineGames.RC trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:30        eAmon        file        D:\病毒上报\X7.EXE        a variant of Win32/PSW.Agent.NEW trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:28        eAmon        file        D:\病毒上报\X4.EXE        a variant of Win32/PSW.OnLineGames.RC trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:26        eAmon        file        D:\病毒上报\X3.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:24        eAmon        file        D:\病毒上报\X2.EXE        a variant of Win32/PSW.Agent.NEW trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:22        eAmon        file        D:\病毒上报\INDEX.EXE        probably unknown NewHeur_PE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 8:48:21        eAmon        file        D:\病毒上报\10[1].EXE        probably unknown NewHeur_PE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

lovewei

那个index要下载一堆
htp://www.hackings.cn/x1.exe
htp://www.hackings.cn/x2.exe
htp://www.hackings.cn/x3.exe
htp://www.hackings.cn/x4.exe
htp://www.hackings.cn/x5.exe
htp://www.hackings.cn/x6.exe
htp://www.hackings.cn/x7.exe
htp://www.hackings.cn/x8.exe
htp://www.hackings.cn/x9.exe
htp://www.hackings.cn/xx10.exe
htp://www.hackings.cn/xx11.exe
htp://www.hackings.cn/xx12.exe
htp://www.hackings.cn/xx13.exe
htp://www.hackings.cn/xx14.exe
htp://www.hackings.cn/xx15.exe
htp://www.hackings.cn/xx16.exe
htp://www.hackings.cn/xx17.exe
htp://www.hackings.cn/xx18.exe
htp://www.hackings.cn/xx19.exe
htp://www.hackings.cn/xx20.exe

yym1988520

NIS 6 G

欠妳緈諨