3ge [MD5: 17EFBE 3E45CB 385BCD]

红心王子

继续

Giggs

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.rar'
C:\Documents and Settings\Administrator\桌面\3.rar
  [0] Archive type: RAR
  --> 3\e.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 3\7
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '47765027.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

woai_jolin

e.exe : Not detected by Sandbox (Signature: NO_VIRUS)



[ DetectionInfo ]
   * Sandbox name: NO_MALWARE

   * Signature name: NO_VIRUS
   * Compressed: YES

[ General information ]
   * File length:       105626 bytes.
   * MD5 hash: 3e45cbe76efd818de62368d45d386547.




(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.


This file is not flagged as malicious by the Norman Sandbox Information Center. However, we can not guarantee that the file is harmless. If you still suspect the file to be malicious and if you urgently need to know for sure, please submit it to your local Norman support department for manual analysis.

woai_jolin

51Login.exe : Not detected by Sandbox (Signature: NO_VIRUS)


[ DetectionInfo ]
   * Sandbox name: NO_MALWARE
   * Signature name: NO_VIRUS
   * Compressed: YES

[ General information ]
   * File length:       283136 bytes.
   * MD5 hash: 17efbea9b5465dcfa540494a8f3757c8.



(C) 2004-2006 Norman ASA. All Rights Reserved.

The material presented is distributed by Norman ASA as an information source only.

This file is not flagged as malicious by the Norman Sandbox Information Center. However, we can not guarantee that the file is harmless. If you still suspect the file to be malicious and if you urgently need to know for sure, please submit it to your local Norman support department for manual analysis.

劳动力好用

[:26:] 微点砍掉````

微点卫士

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3\E.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\E4.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\IH57.SYS
是否删除木马程序及其衍生物?

51Login.exe外挂啊

moonsilver

rs挂了

king6808

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.edf        文件: F:\10.4\3.rar/3\e.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.edg        文件: F:\10.4\3.rar/3\7

taihuxian

卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135079 is infected with Trojan-PSW.Win32.OnLineGames.edf virus

yangpizhi

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         bbs.kafan.cn/attachment.php?aid=135079
Information:         Is the Trojan horse TR/Crypt.NSPM.Gen

Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.18, VDF 7.0.0.48