再来一包，大多能杀

allenhippo

[:27:]

The EQs

Scan performed at: 2007-6-2 21:50:00
Scanning Log
NOD32 version 2305 (20070601) NT
Command line: C:\Documents and Settings\EQ2\桌面\$$a.rar
Operating memory - is OK

Date: 2.6.2007  Time: 21:50:04
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\$$a.rar
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\11Sy.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\12Sy.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\13Sy.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\CSRSS.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\LSASS.EXE - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\RUNDLL32.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\SERVICES.EXE - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\$$a.rar ?RAR ?$$a\SMSS.EXE - probably a variant of Win32/PSW.Agent.NEC trojan
Number of scanned files: 10
Number of threats found: 8
Number of files cleaned: 1
Time of completion: 21:50:06 Total scanning time: 2 sec (00:00:02)

观弈书童

11Sy.exe - Win32/PSW.Agent.NEW 木马的变种
12Sy.exe - Win32/Agent.NIK 木马的变种
13Sy.exe - Win32/Agent.NIK 木马的变种
CSRSS.exe - Win32/PSW.Agent.NEW 木马的变种
LSASS.EXE - Win32/PSW.Agent.NEW 木马的变种
RUNDLL32.exe - 可能是 Win32/PSW.Agent.NDP 木马 的一个变种
SERVICES.EXE - Win32/Agent.NIK 木马的变种
SMSS.EXE - 可能是 Win32/PSW.Agent.NEC 木马 的一个变种

kristen2

0] Archive type: RAR
  --> $$a\11Sy.exe
      [DETECTION] Is the Trojan horse TR/Agent.8704.29
  --> $$a\12Sy.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Small.DU.170
  --> $$a\13Sy.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> $$a\15Sy.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> $$a\CSRSS.exe
      [DETECTION] Is the Trojan horse TR/Agent.10752.24
  --> $$a\LSASS.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UF.26
  --> $$a\RUNDLL32.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AWB.3
  --> $$a\SERVICES.EXE
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> $$a\SMSS.EXE
      [DETECTION] Contains signature of the dropper DR/PSW.Onlinegames.AVH

蓝色牛仔裤

又漏了一个啊。。。


[Scan path] C:\Documents and Settings\Administrator\桌面\$$a
>C:\Documents and Settings\Administrator\桌面\$$a\11Sy.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\$$a\12Sy.exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\$$a\13Sy.exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\桌面\$$a\15Sy.exe - Ok
>C:\Documents and Settings\Administrator\桌面\$$a\CSRSS.exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\Administrator\桌面\$$a\LSASS.EXE infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\$$a\RUNDLL32.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\$$a\SERVICES.EXE infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\$$a\SMSS.EXE infected with Trojan.Goner

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.sl        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\11Sy.exe//PE_Patch//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\12Sy.exe//PE_Patch.Stolen//KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\13Sy.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rc        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\CSRSS.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uf        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\LSASS.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ui        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\RUNDLL32.exe
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\SERVICES.EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.rar/$$a\SMSS.EXE

The EQs

nod32，卡巴和蜘蛛三个都不杀那个

tracydk

allenhippo

15sy.exe拿去上报卡巴看看

wangjay1980

报了