接招 MD5: 586B49

红心王子

password：virus

check it on ，

欠妳緈諨

AVAST全灭

傻猪猪米走鸡

时间        模块        对象        名称        病毒        操作        用户        信息
2007-6-30 10:09:42        文件监控        文件        F:\virus\00\样本\wow.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:41        文件监控        文件        F:\virus\00\样本\zx.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:40        文件监控        文件        F:\virus\00\样本\sun.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:39        文件监控        文件        F:\virus\00\样本\wm.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:38        文件监控        文件        F:\virus\00\样本\mh.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:36        文件监控        文件        F:\virus\00\样本\1888.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:35        文件监控        文件        F:\virus\00\样本\1883.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:34        文件监控        文件        F:\virus\00\样本\1882.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:33        文件监控        文件        F:\virus\00\样本\jh.ad5.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:31        文件监控        文件        F:\virus\00\样本\229415546wd.exe        Win32/PSW.OnLineGames.RC 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。
2007-6-30 10:09:28        文件监控        文件        F:\virus\00\样本\1881.exe        Win32/Agent.NIK 木马 变种        已隔离 - 已删除                应用程序试图创建新文件时发生事件: d:\Program Files\WinRAR\WinRAR.exe. 文件已移至隔离区，你可以关闭此窗口。

wangjay1980

12
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\1881.exe//PEPatch//#
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\229415546wd.exe//PE_Patch//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\jh.ad5.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\1882.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\1883.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\1888.exe//PEPatch//#//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\mh.ad5.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\wm.ad5.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\sun.ad5.exe//PEPatch//#
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\zx.ad5.exe//PEPatch//PE_Patch
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\wow.ad5.exe//PEPatch//#//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Downloader.Win32.Agent.bva        File: C:\Documents and Settings\Owner\×ÀÃæ\00.rar/Ñù±¾\vip.rar/vip.exe//UPX

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本'
C:\Documents and Settings\Administrator\My Documents\样本\
  1881.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.164
      [INFO]      The file was deleted!
  1882.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.163
      [INFO]      The file was deleted!
  1883.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.166
      [INFO]      The file was deleted!
  1888.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.161
      [INFO]      The file was deleted!
  229415546wd.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
      [INFO]      The file was deleted!
  jh.ad5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.168
      [INFO]      The file was deleted!
  mh.ad5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.163
      [INFO]      The file was deleted!
  sun.ad5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.166
      [INFO]      The file was deleted!
  vip.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bva.1
      [INFO]      The file was deleted!
  wm.ad5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.164
      [INFO]      The file was deleted!
  wow.ad5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AYD.161
      [INFO]      The file was deleted!
  zx.ad5.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Small.DU.680
      [INFO]      The file was deleted!


End of the scan: 2007年6月29日  19:12
Used time: 00:08 min

The scan has been done completely.

      1 Scanning directories
     12 Files were scanned
     12 viruses and/or unwanted programs were found
      0 classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

傻猪猪米走鸡

别加密码号吗？

[ 本帖最后由 傻猪猪米走鸡 于 2007-6-30 10:13 编辑 ]

欠妳緈諨

     金山

[ 本帖最后由 欠你幸福 于 2007-6-30 10:16 编辑 ]

1p1

扫描进行于：2007-6-30 10:14:47
扫描日志
NOD32版本 2364 (20070629) NT
命令行： C:\Documents and Settings\user\桌面\样本.rar

日期： 30.6.2007  时间：10:14:49
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\user\桌面\样本.rar
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>zx.ad5.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>1883.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>1882.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>1881.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>1888.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>229415546wd.exe - Win32/PSW.OnLineGames.RC 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>jh.ad5.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>mh.ad5.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>sun.ad5.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>wm.ad5.exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\user\桌面\样本.rar >>RAR >>wow.ad5.exe - Win32/Agent.NIK 木马的变种
已扫描的文件数目：12
已发现的病毒数目：11
完成时间： 10:14:51 总扫描时间：2 秒 (00:00:02)

woai_jolin

2007/6/30 10:36:45        eAmon        file        D:\病毒上报\样本\WOW.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:43        eAmon        file        D:\病毒上报\样本\ZX.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:41        eAmon        file        D:\病毒上报\样本\SUN.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:40        eAmon        file        D:\病毒上报\样本\WM.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:38        eAmon        file        D:\病毒上报\样本\MH.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:36        eAmon        file        D:\病毒上报\样本\1888.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:34        eAmon        file        D:\病毒上报\样本\1883.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:32        eAmon        file        D:\病毒上报\样本\1882.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:30        eAmon        file        D:\病毒上报\样本\JH.AD5.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:28        eAmon        file        D:\病毒上报\样本\229415546WD.EXE        a variant of Win32/PSW.OnLineGames.RC trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.
2007/6/30 10:36:25        eAmon        file        D:\病毒上报\样本\1881.EXE        a variant of Win32/Agent.NIK trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\Program Files\Micropoint\MPSVC2.exe.

promised

我服了LZ了
你又开始扫压缩包的MD5值