[MD5: 02ABA5 7B772D]

qianwenxiang

[MD5: 02ABA5 7B772D]

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\082502.rar'
F:\病毒样本\082502.rar
  [0] Archive type: RAR
  --> explorer32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> cccccc.exe
      [DETECTION] Contains signature of the worm WORM/VB.DY.11
      [INFO]      The file was deleted!

saga3721

解压小红伞报Virus or unwanted program 'TR/PSW.OnLineGam.QW [TR/PSW.OnLineGam.QW]'

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.aci        URL: http://bbs.kafan.cn/attachment.p ... rer32.exe//PE_Patch
detected: Trojan program Trojan.Win32.VB.mm        URL: http://bbs.kafan.cn/attachment.php?aid=118817//cccccc.exe//UPX

The EQs

Scan performed at: 2007-8-25 21:26:52
Scanning Log
NOD32 version 2484 (20070825) NT
Command line: C:\Documents and Settings\Don johnson\桌面\082502.rar
Operating memory - is OK

Date: 25.8.2007  Time: 21:26:57
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\082502.rar
C:\Documents and Settings\Don johnson\桌面\082502.rar ?RAR ?explorer32.exe - Win32/PSW.OnLineGames.NCU trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\082502.rar ?RAR ?cccccc.exe - Win32/VB.NAF virus - was a part of the deleted object
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 21:26:57 Total scanning time: 0 sec (00:00:00)

globe

刚装的bd2k8,来小试一手

ssy275

Result: 2 malware found
Trojan-PSW.Win32.OnLineGames.aci (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082502.rar\explorer32.exe
Trojan.Win32.VB.mm (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082502.rar\cccccc.exe

The EQs

BD大概占多少内存？？？流畅不？？？

Nblock

运行未知程序c.exe后  微点拦截报警 发现新病毒！ 另一支运行后微点发现新的间谍软件！

名称 原数据 新数据 创建者
2007-08-25 22:09:43 HKLM\SOFTWARE\MICROSOFT\WINDOWS\CURRENTVERSION\RUN\ SHAIYADLL  C:\WINDOWS\HELP\TOURS\HTMLTOUR\SERVICES.EXE C:\WINDOWS\REGEDIT.EXE

hj5abc

BD2008对BD1O来说只是花瓶一个;而且BD本身就不算是很流畅..