39x

尤金卡巴斯基

dreams521

哈哈,先抢你的沙发,再测试
全部击沉~~~~~~~~~~~~~~~~~~~


[ 本帖最后由 dreams521 于 2008-12-21 00:51 编辑 ]

挪威的冬天

信息        2008-12-21  00:35:35        您此次查毒共查出39个病毒以及危险代码                       
信息        2008-12-21  00:35:35        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件82个                       
信息        2008-12-21  00:35:35        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/21 0:35

c6.exe      --------      可疑的
c7.exe      --------      可疑的


a10.exe      --------      病毒
a13.exe      --------      病毒
a23.exe      --------      病毒
a25.exe      --------      病毒
a26.exe      --------      病毒
a3.exe      --------      病毒
a35.exe      --------      病毒
a4.exe      --------      病毒
a41.exe      --------      病毒
a51.exe      --------      病毒
a52.exe      --------      病毒
a8.exe      --------      病毒
b10.exe      --------      病毒
b11.exe      --------      病毒
b16.exe      --------      病毒
b9.exe      --------      病毒
c2.exe      --------      病毒
c8.exe      --------      病毒
cj.exe      --------      病毒
vip.exe      --------      病毒


a1.exe      --------      分析中
a6.exe      --------      分析中
a9.exe      --------      分析中
aaa.exe      --------      分析中
b1.exe      --------      分析中
b12.exe      --------      分析中
b13.exe      --------      分析中
b15.exe      --------      分析中
b17.exe      --------      分析中
b2.exe      --------      分析中
b3.exe      --------      分析中
b4.exe      --------      分析中
b45.exe      --------      分析中
b7.exe      --------      分析中
b8.exe      --------      分析中
c1.exe      --------      分析中
c4.exe      --------      分析中


理论文件总数:        39
实际文件总数:        39

其中:

分析中: 17
可疑的: 2
病毒: 20

识别率为: 100%

sam.to

上报的工作交给楼主

su-tt

C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a25.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a3.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a4.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a41.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a23.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a26.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a35.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a52.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a9.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a51.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a6.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a8.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c1.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c2.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b10.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b12.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c4.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b13.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b15.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c7.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c8.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b17.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b2.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b3.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > aaa.exe - Win32/PSW.Delf.NLZ 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b1.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b45.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b7.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b8.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > c6.exe - Win32/PSW.OnLineGames.NSG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b11.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b16.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b4.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > b9.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > cj.exe > NSIS > 33.exe - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > vip.exe - Win32/TrojanDropper.Agent.NJN 特洛伊木马
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a1.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a10.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\39.rar > RAR > a13.exe - 可能是 Win32/PSW.OnLineGames.NRF 特洛伊木马 的变种

woai_jolin

http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a25.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a3.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a4.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a41.exe        Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a23.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a26.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a35.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a52.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a9.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a51.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a6.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a8.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c1.exe        a variant of Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c2.exe        Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b10.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b12.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c4.exe        Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b13.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b15.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c7.exe        Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c8.exe        Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b17.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b2.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b3.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » aaa.exe        Win32/PSW.Delf.NLZ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b1.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b45.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b7.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b8.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » c6.exe        Win32/PSW.OnLineGames.NSG trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b11.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b16.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b4.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » b9.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » cj.exe        Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » cj.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » cj.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » cj.exe » NSIS » System.dll        is OK               
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » cj.exe » NSIS » 33.exe        Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » vip.exe        Win32/TrojanDropper.Agent.NJN trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a1.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a10.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7b&t=1229791551 » RAR » a13.exe        probably a variant of Win32/PSW.OnLineGames.NRF trojan        was a part of the deleted object

Dirk

Start of the scan: 2008年12月21日  00:52

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\39'
C:\Documents and Settings\Administrator\桌面\39\a1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '497b230b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a10.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/PSW.OnlineGames.tyfm.3 Trojan
    [NOTE]      A backup was created as '497d230c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a13.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [NOTE]      A backup was created as '4980230d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a23.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [NOTE]      A backup was created as '49802310.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a25.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/Agent.16896.88 Trojan
    [NOTE]      A backup was created as '49822311.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a26.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/Agent.awgz Trojan
    [NOTE]      A backup was created as '49832312.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a3.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/PSW.OnlineGames.tyjw Trojan
    [NOTE]      A backup was created as '497b2313.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a35.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/Agent.17920.14 Trojan
    [NOTE]      A backup was created as '49822314.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a4.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AC Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b2316.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a41.exe
    [DETECTION] Is the TR/PSW.Magania.dx Trojan
    [NOTE]      A backup was created as '497e2316.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a51.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497e2318.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a52.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/Agent.14336.25 Trojan
    [NOTE]      A backup was created as '497f231a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a6.exe
    [DETECTION] Is the TR/Agent.BHQ Trojan
    [NOTE]      A backup was created as '497b231b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a8.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [NOTE]      A backup was created as '497b231e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\a9.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '497b231f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\aaa.exe
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      A backup was created as '49ae2348.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b1.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b2318.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b10.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.OnLineGames.tvfr Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497d2318.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b11.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.Magania.anej Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497e2319.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b12.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497f2319.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b13.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49802319.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b15.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4982231a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b16.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.Magania.annh Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4983231a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b17.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4984231a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b2.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4803f65c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b3.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b231d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b4.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4803f65f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b45.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4982231e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b7.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b2322.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b8.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b2323.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\b9.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.Magania.annh Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '497b2324.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '497b231c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c2.exe
      [DETECTION] Is the TR/PSW.Online.bir Trojan
    [NOTE]      A backup was created as '497b2320.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c4.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.OnlineGames.tyia Trojan
    [NOTE]      A backup was created as '4803f661.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c6.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.OnlineGames.ZQO.222 Trojan
    [NOTE]      A backup was created as '4803f663.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c7.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.OnlineGames.tyvi Trojan
    [NOTE]      A backup was created as '4803f664.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\c8.exe
      [DETECTION] Is the TR/PSW.Online.bir Trojan
    [NOTE]      A backup was created as '497b2325.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\cj.exe
    [DETECTION] Contains recognition pattern of the DR/Cinmus.ish dropper
    [NOTE]      A backup was created as '497b2357.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\39\vip.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Contains recognition pattern of the SPR/Hacktool.28501 program
        --> Object
          [DETECTION] Contains recognition pattern of the SPR/Hacktool.36725 program
        --> Object
          [DETECTION] Contains recognition pattern of the SPR/Hacktool.30712 program
        --> Object
          [DETECTION] Contains recognition pattern of the SPR/Hacktool.92719 program
        --> Object
            [DETECTION] Is the TR/Drop.Spy.Pca.A.2 Trojan
    [NOTE]      A backup was created as '49bd2357.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月21日  00:53
Used time: 00:26 Minute(s)

The scan has been done completely.

      1 Scanning directories
     39 Files were scanned
     66 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     39 files were deleted
      0 files were repaired
     39 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
    -27 Files not concerned
      0 Archives were scanned
      0 Warnings
     39 Notes

kissangle1991

诺顿一个没查出来.....................................

主动防御

瑞星全部秒杀，解压缩到一个文件夹之后查杀，文件夹空空如也.....

wajika

这些只是最近流行的木马。。。一般主流杀软都可以干掉的
SOPHOS

病毒信息
附件 39.rar 含有Troj/PWS-AVJ病毒  清除失败
附件 39.rar 含有Mal/Generic-A病毒  清除失败
附件 39.rar 含有Mal/Generic-A病毒  清除失败
附件 39.rar 含有Mal/Dropper-Y病毒  清除失败
附件 39.rar 含有Mal/Generic-A病毒  清除失败
附件 39.rar 含有Mal/Dropper-Y病毒  清除失败
附件 39.rar 含有Mal/Small-D病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Dropper-O病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Dropper-Y病毒  清除失败
附件 39.rar 含有Mal/Dropper-Y病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Generic-A病毒  清除失败
附件 39.rar 含有Mal/Dropper-O病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Mal/Behav-031病毒  清除失败
附件 39.rar 含有Troj/Cinmus-C病毒  清除失败
附件 39.rar 含有Troj/MDrop-BWU病毒  清除失败

[ 本帖最后由 wajika 于 2008-12-21 09:10 编辑 ]