安铁诺报

kp2006

快杀

天下最笨

咔吧报

1p1

木马名称:Trojan.Win32.Genetik.ox

程序:
C:\TDDOWNLOAD\NWIZTLBB.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\TDDOWNLOAD\NWIZASKTAO.EXE
木马程序生成以下文件:
1) C:\WINNT\SYSTEM32\NWIZASKTAO.EXE
2) C:\WINNT\SYSTEM32\NWIZASKTAO.DLL
是否删除木马程序及其衍生物?

程序:
C:\TDDOWNLOAD\NWIZQJSJ.EXE
木马程序生成以下文件:
1) C:\WINNT\SYSTEM32\NWIZQJSJ.EXE
2) C:\WINNT\SYSTEM32\QJSJ100.DLL
是否删除木马程序及其衍生物?

程序:
C:\TDDOWNLOAD\KVSC3.EXE
木马程序生成以下文件:
1) C:\WINNT\KVSC3.EXE
2) C:\WINNT\SYSTEM32\KVSC3.DLL
是否删除木马程序及其衍生物?

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2005-5-4 22:16
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: kvsc3.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.Sdld!gPWS.D4ECB4DD (BD-Engine)
Object: nwizmhxy.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.Nilage.bjp (KAV engine)
Object: nwizqjsj.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.Nilage.bjp (KAV engine), Trojan.PWS.OnLineGames.FF (BD-Engine)
Object: nwiztlbb.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.ql (KAV engine), Trojan.PWS.OnLineGames.ASD (BD-Engine)
Analysis complete: 2005-5-4 22:16
    5 files checked
    4 infected files detected
    0 suspected files detected

jlennon

欠妳緈諨

又是这个

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
    [0] Archive type: RAR
    --> nwizAsktao.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizmhxy.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizqjsj.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> kvsc3.exe
        [DETECTION] Is the Trojan horse TR/Agent.12288.28
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwiztlbb.exe
        [DETECTION] Is the Trojan horse TR/Agent.13126
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月4日  10:25
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      5 viruses and/or unwanted programs were found
      3 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -2 Files not concerned
      1 Archives were scanned
      6 Warnings
      0 Notes
      0 Hidden objects were found

aoyang

Filseclab
Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-5-5 1:27:25,TrojanPSW.GamePass.hgl.gpwy,木马,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>nwiztlbb.exe,Manual scan
2007-5-5 1:27:25,Heuri.ERNM,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>nwizqjsj.exe,Manual scan
2007-5-5 1:27:25,Heuri.ERNM,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>nwizmhxy.exe,Manual scan
2007-5-5 1:27:25,Heuri.ERNM,启发式扫描,BEYOND,C:\Documents and Settings\BEYOND\桌面\桌面.rar>>nwizAsktao.exe,Manual scan

马力

驱逐舰5个