木马下载器io.pif[F52F59]

pengdawei

木马下载器io.pif

[ 本帖最后由 promised 于 2007-8-7 11:27 编辑 ]

snakebone

Start of the scan: 2007年8月7日  11:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\八七四九.rar'
C:\Documents and Settings\Administrator\桌面\
  八七四九.rar
    [0] Archive type: RAR
    --> autorun.inf
    --> IO.pif
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '9d933363.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

红心王子

C:\Documents and Settings\Administrator\桌面\八七
四九.rar>>IO.pif
Worm.Win32.Agent.iml
楼主发帖请照版规发md5

woai_jolin

扫描开始于2007年8月7日 11:27:32
F:\v\八七四九.rar,查到病毒: Suspicious, 操作: <无>
扫描结束于2007年8月7日 11:27:32
总共扫描了1个文件, 其中感染病毒文件为1个. 总共扫描了0个引导区, 感染的引导区为0个.

woai_jolin

promised

搞笑
Scan performed at: 2007-8-7 11:43:52
Scanning Log
NOD32 version 2439 (20070806) NT
Command line: C:\ABC\八七四九
Operating memory - error opening [4]
Operating memory - is OK

Date: 7.8.2007  Time: 11:44:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\ABC\八七四九\
C:\ABC\八七四九\autorun.inf - INF/Autorun virus
Number of scanned files: 2
Number of threats found: 1
Number of active threats: 1
Time of completion: 11:44:13 Total scanning time: 2 sec (00:00:02)

微点卫士

pif是什么文件啊,微点不报
驱逐舰报了

1688388728

病毒: Trojan-PSW.Win32.OnLineGames.bs
文件: 八七四九[1].rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\9ZJO5KCR
进程: Maxthon.exe

taihuxian

Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\8H0J8303\八七四九[1].rar.
Infection: Trojan-PSW.Win32.OnLineGames.bs
Action: none.
Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\8H0J8303\八七四九[1].rar.
Infection: Virus.Win32.AutoRun.ey
Action: none.