早上好胃口，一个大包子

beat2

卡巴弟弟胃口不好，不知道卡巴哥哥怎么样

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.uf        URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch//UPack

The EQs

Scan performed at: 2007-6-4 9:28:24
Scanning Log
NOD32 version 2305 (20070601) NT
Command line: C:\Documents and Settings\EQ2\桌面\13.zip
Operating memory - is OK

Date: 4.6.2007  Time: 09:28:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\13.zip
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?10.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?1630[1].exe - probably a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?8.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?down[1].exe - Win32/Delf.BS worm - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?LYLOADER.EXE - probably a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?MSDEG32.DLL - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?nwizAsktao.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?tlso.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?tlso0.dll - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\13.zip ?ZIP ?woso0.dll - a variant of Win32/PSW.WOW.NCD trojan
Number of scanned files: 14
Number of threats found: 10
Number of files cleaned: 1
Time of completion: 09:28:30 Total scanning time: 2 sec (00:00:02)

Notes:
[7] File is probably infected with an unknown virus.

wangjay1980

detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\13.zip/10.exe//NSPack
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\13.zip/1630[1].exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uf        File: C:\Documents and Settings\Owner\×ÀÃæ\13.zip/8.exe//PE_Patch//UPack
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\13.zip/LYLOADER.EXE
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\13.zip/nwizAsktao.exe//PE_Patch//UPack
detected: virus Invader (modification) File: c:\documents and settings\owner\×ÀÃæ\13.zip/LYLOADER.EXE//PE_Patch//UPack

wangjay1980

中午估计胃口就好点了

jlennon

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-6-2, 1:15

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\13.zip

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-6-4, 9:31:07
---------------------------------------------------------------------

[Found possible virus]         <W32/Threat-SysVenFakN-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\13.zip->10.exe
[Found possible virus]         <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\13.zip->8.exe
[Found possible virus]         <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\13.zip->LYLOADER.EXE
[Found possible virus]         <W32/Downloader-SmlInject-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\13.zip->LYMANGR.DLL
[Found possible virus]         <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)>        C:\Documents and Settings\Administrator\桌面\13.zip->nwizAsktao.exe
[Contains infected objects]        C:\Documents and Settings\Administrator\桌面\13.zip
[Quarantined]        C:\Documents and Settings\Administrator\桌面\13.zip->woso0.dll

---------------------------------------------------------------------
Scan ended:        2007-6-4, 9:31:15
Duration:        0:00:08

Scan result:

Scanned files:                 1
Infected objects:         5
Disinfected objects:         0
Quarantined files:         1
---------------------------------------------------------------------

欠妳緈諨

AVAST胃口也不好！

allenhippo

老面孔了，就那几个毒网的产物，每天更新的。

taihuxian

Virus: Win32:Small-EKC [Trj], Win32:OnLineGames-SR [Trj], Win32:OnLineGames-SS [Trj], Win32:OnLineGames-ST [Trj], Win32:OnLineGames-TM [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

rasis

13.zip
  [0] Archive type: ZIP
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 1630[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> down[1].exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> LYLOADER.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> LYMANGR.DLL
      [DETECTION] Contains suspicious code HEUR/Malware
  --> MSDEG32.DLL
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> nwizAsktao.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> REGKEY.hiv
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AVH
  --> SERVICES.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> tlso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> tlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> woso0.dll
      [DETECTION] Is the Trojan horse TR/Agent.10752.23
      [WARNING]   The file was ignored!


End of the scan: 2007年6月4日  10:16
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
     13 viruses and/or unwanted programs were found
      6 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -4 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
      0 Hidden objects were found