转剑盟的两个

The EQs

222222222222222

The EQs

Scan performed at: 2007-3-9 13:22:15
Scanning Log
NOD32 version 2104 (20070308) NT
Command line: C:\Documents and Settings\EQ2\桌面\bingdu.rar C:\Documents and Settings\EQ2\桌面\csrss.zip
Operating memory - is OK

Date: 9.3.2007  Time: 13:22:19
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\bingdu.rar; C:\Documents and Settings\EQ2\桌面\csrss.zip
C:\Documents and Settings\EQ2\桌面\bingdu.rar ?RAR ?1.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\bingdu.rar ?RAR ?c0nima.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\bingdu.rar ?RAR ?upxdnd.exe - probably a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\csrss.zip ?ZIP ?csrss.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 6
Number of threats found: 4
Number of files cleaned: 2
Time of completion: 13:22:19 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\csrss.zip'
C:\Documents and Settings\Administrator\My Documents\
  csrss.zip
    [0] Archive type: ZIP
    --> csrss.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\bingdu.rar'
C:\Documents and Settings\Administrator\My Documents\
  bingdu.rar
    [0] Archive type: RAR
    --> 1.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> c0nima.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.JP
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

soul20010

FS7.0
第一个阻止下载！
第二个Result: 3 malware found
Trojan-PSW.Win32.OnLineGames.fo (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\bingdu.rar\1.exe
Trojan-PSW.Win32.OnLineGames.jp (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\bingdu.rar\c0nima.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\bingdu.rar\upxdnd.exe

bridgewr

除了1. exe，其他微点都清除干净

1.exe只写了注册表项，重启后除了又写一下注册表没有发现其他动作，微点没有报。如果只是写一个注册表项微点就报，那微点的误报要一堆堆的咯，不过还是上报给微点官方确认下。

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-3-6
Start time: 2007-3-9 15:16
Engine(s): KAV engine (AVK 17.3103), BD-Engine (BD 17.2113)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1.exe
        In archive: C:\Documents and Settings\Administrator\桌面\bingdu.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.fo (KAV engine)
Object: c0nima.exe
        In archive: C:\Documents and Settings\Administrator\桌面\bingdu.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.jp (KAV engine), MemScan:Trojan.PWS.Lineage.CJ (BD-Engine)
Object: upxdnd.exe
        In archive: C:\Documents and Settings\Administrator\桌面\bingdu.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.jp (KAV engine), Generic.Malware.Sdld!.E6246E16 (BD-Engine)
Object: bingdu.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.fo, Trojan-PSW.Win32.OnLineGames.jp (2x) (KAV engine), MemScan:Trojan.PWS.Lineage.CJ, Generic.Malware.Sdld!.E6246E16 (BD-Engine)
Object: csrss.exe
        In archive: C:\Documents and Settings\Administrator\桌面\csrss.zip
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.bs (KAV engine), GenPack:Trojan.PWS.QQPass.UL (BD-Engine)
Object: csrss.zip
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.bs (KAV engine), GenPack:Trojan.PWS.QQPass.UL (BD-Engine)
Analysis complete: 2007-3-9 15:16
    2 files checked
    2 infected files detected
    0 suspected files detected

hsjj2005

费尔第一个压缩包

hsjj2005

费尔对第二个压缩包

taopaolang1982

卡巴阻止下载