召唤 hunters

Starting the file scan:

Begin scan in 'E:\AV\1.exe'
E:\AV\1.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\2.exe'
E:\AV\2.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4891b9ea.qua'!
Begin scan in 'E:\AV\3.exe'
E:\AV\3.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\4.exe'
E:\AV\4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\5.exe'
E:\AV\5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aepl
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\6.exe'
E:\AV\6.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\7.exe'
E:\AV\7.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\8.exe'
E:\AV\8.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.Steal.44657
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\9.exe'
E:\AV\9.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aers
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\10.exe'
E:\AV\10.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\13.exe'
E:\AV\13.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\14.exe'
E:\AV\14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\15.exe'
E:\AV\15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.affz
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\16.exe'
E:\AV\16.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\17.exe'
E:\AV\17.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\18.exe'
E:\AV\18.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\19.exe'
E:\AV\19.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\20.exe'
E:\AV\20.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\21.exe'
E:\AV\21.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\22.exe'
E:\AV\22.exe
      [DETECTION] Is the Trojan horse TR/PSW.17057
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\23.exe'
E:\AV\23.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\28.exe'
E:\AV\28.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aenz
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\34.exe'
E:\AV\34.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Agent.20480.288
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '485ab9f2.qua'!
Begin scan in 'E:\AV\oKoK.exe'
E:\AV\oKoK.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acjm
      [NOTE]      The file was deleted!


End of the scan: 2008年5月16日  06:31
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     24 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     22 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     24 Notes

avira 0

The file '1.js' has been determined to be 'UNDER ANALYSIS'.

挪威的冬天

金山毒霸 0

capsshift

估计红伞全灭，不下载了。

The file '2.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.aidk. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file '1.js' has been determined to be 'MALWARE'.
Our analysts named the threat EXP/Baidu.1410. Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Exia 于 2008-5-16 18:02 编辑 ]

BING126

McAfee         s.exe        New Malware.aj

qigang

Log is generated by FreShow.
[wide]http://al.99.vc/1.js
    [frame]http://xiazai886.cn/ms.gif
    [frame]http://xiazai886.cn/xl.gif
    [frame]http://xiazai886.cn/bd.gif
    [frame]http://xiazai886.cn/r'+'eal.g'+'if
    [frame]http://xiazai886.cn/r'+'eal_new.g'+'if
    [frame]http://xiazai886.cn/lz.gif