包~~~

tonger2003

mofunzone

似曾相识？？

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面.rar
    [0] Archive type: RAR
    --> 1.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ±¾·ÖµÄWOW.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 0.exe
        [DETECTION] Is the Trojan horse TR/Agent.nma.1
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月23日  19:32
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      8 viruses and/or unwanted programs were found
      5 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -4 Files not concerned
      1 Archives were scanned
      9 Warnings
      0 Notes
      0 Hidden objects were found

扫描日志
NOD32版本 2285 (20070522) NT
命令行： C:\Documents and Settings\morgan\My Documents\ ?
?桌面.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 23.5.2007  时间：19:32:50
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?morgan\My Documents\桌面.rar
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>1.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>10.exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>11.exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>3.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>7.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>8.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>本分的WOW.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>0.exe - 可能是 Win32/PSW.Agent.NEC 木马 的一个变种
已扫描的文件数目：9
已发现的病毒数目：3
活动的病毒数目：1
完成时间： 19:32:53 总扫描时间：3 秒 (00:00:03)


[Scan path] C:\Documents and Settings\morgan\My Documents\桌面.rar
>>C:\Documents and Settings\morgan\My Documents\桌面.rar\1.exe probably infected with MULDROP.Trojan
>>C:\Documents and Settings\morgan\My Documents\桌面.rar\10.exe probably infected with MULDROP.Trojan
>>C:\Documents and Settings\morgan\My Documents\桌面.rar\11.exe probably infected with MULDROP.Trojan
>C:\Documents and Settings\morgan\My Documents\桌面.rar\3.exe - Ok
>>C:\Documents and Settings\morgan\My Documents\桌面.rar\7.exe probably infected with MULDROP.Trojan
>>C:\Documents and Settings\morgan\My Documents\桌面.rar\8.exe probably infected with MULDROP.Trojan
>C:\Documents and Settings\morgan\My Documents\桌面.rar\本分的WOW.exe - Ok
>>>C:\Documents and Settings\morgan\My Documents\桌面.rar\0.exe is an adware program Adware.Casino.origin
C:\Documents and Settings\morgan\My Documents\桌面.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 10
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 5
Adware programs found: 1
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 135 Kb/s
Scan time: 00:00:01

wangjay1980

detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/1.exe
detected: Trojan program Trojan-PSW.Win32.Nilage.bjp        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/10.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bjp        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/11.exe//PE_Patch//UPack
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/3.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/7.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/±¾·ÖµÄWOW.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/0.exe//MSDEG32.DLL//UPack

fanrubin

卡6就发现2个

gwg829

换吧　　吃了没启发的亏　[:27:]

foxhound

KIS7比KIS6多报了5个启发~~~~~~~~[:27:] [:27:]

miller239

搞什么鬼。。老是漏。。

zzh161

感觉是不是都是同一个病毒

worker321

卡巴7报了八个

桌面

鼻耳盖子

木马名称:Trojan-PSW.Win32.Agent.cue
程序:
I:\TEST\070524\7\桌面\10.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.cue
程序:
I:\TEST\070524\7\桌面\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?