再来一包，大多能杀

worker321

咖啡五个，报了那个15sy

2007-6-2        22:24:51        未采取操作         C:\Documents and Settings\Administrator\桌面\$$a.rar\15SY.EXE        New Malware.n(特洛伊)
2007-6-2        22:24:51        未采取操作         C:\Documents and Settings\Administrator\桌面\$$a.rar\CSRSS.EXE        New Malware.aj(特洛伊)
2007-6-2        22:24:51        未采取操作         C:\Documents and Settings\Administrator\桌面\$$a.rar\LSASS.EXE        New Malware.aj(特洛伊)
2007-6-2        22:24:51        未采取操作         C:\Documents and Settings\Administrator\桌面\$$a.rar\RUNDLL32.EXE        PWS-LegMir(特洛伊)
2007-6-2        22:24:51        未采取操作         C:\Documents and Settings\Administrator\桌面\$$a.rar\SMSS.EXE\00000c80.EXE        New Malware.aj(特洛伊)

taihuxian

Virus: Trojan-PSW.Win32.OnLineGames.sl, Trojan-PSW.Win32.OnLineGames.rc, Trojan-PSW.Win32.OnLineGames.uf, Trojan-PSW.Win32.OnLineGames.ui, Trojan-Proxy.Win32.Small.du, Trojan-PSW.Win32.OnLineGames.nn

Virus found while downloading Web content.

Address: bbs.kafan.cn

woai_jolin

2007/6/2 23:02:59        Scanning Log
2007/6/2 23:02:59        Version of virus signature database: 2305 (20070601)
2007/6/2 23:02:59        Date: 2.6.2007  Time: 23:02:59
2007/6/2 23:02:59        Scanned disks, folders and files: E:\病毒测试\
2007/6/2 23:03:04        E:\病毒测试\$$a.rar - multiple threats - deleted
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\11Sy.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\12Sy.exe - a variant of Win32/Agent.NIK trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\13Sy.exe - a variant of Win32/Agent.NIK trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\CSRSS.exe - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\LSASS.EXE - a variant of Win32/PSW.Agent.NEW trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\RUNDLL32.exe - probably a variant of Win32/PSW.Agent.NDP trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\SERVICES.EXE - a variant of Win32/Agent.NIK trojan
2007/6/2 23:03:04        E:\病毒测试\$$a.rar » RAR » $$a\SMSS.EXE - probably a variant of Win32/PSW.Agent.NEC trojan
2007/6/2 23:03:04        Number of scanned files: 10
2007/6/2 23:03:04        Number of threats found: 8
2007/6/2 23:03:04        Time of completion: 23:03:04  Total scanning time: 5 sec (00:00:05)

wangjay1980

Hello.

New malicious software was found in the attached file.
Trojan.Win32.Agent.abf
Trojan-Proxy.Win32.Small.du
Trojan-PSW.Win32.Delf.vd
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Roman Gavrilchenko
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com
http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.


> Attachment: $$a.zip

wangjay1980

deleted: Trojan program Trojan.Win32.Agent.abf        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.zip/$$a\12Sy.exe//PE_Patch.Stolen
deleted: Trojan program Trojan-PSW.Win32.Delf.vd        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.zip/$$a\15Sy.exe//UPack
deleted: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\$$a.zip/$$a\12Sy.exe//PE_Patch.Stolen//KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.6.3 13:19:59

文件:F:\070603\Trojan.PWS.Wsgame\$$a\SERVICES.EXE | 感染:木马 [158>2007_144854_0214.axx]3
操作:删除文件


扫描完成|病毒:1 文件:9|耗时:961
----------