I'm JJ

金剑

I'm JJ

[ 本帖最后由 金剑 于 2007-6-30 20:15 编辑 ]

The EQs

Scan performed at: 2007-6-5 17:08:35
Scanning Log
NOD32 version 2308 (20070604) NT
Command line: C:\Documents and Settings\EQ2\桌面\样本.rar
Operating memory - is OK

Date: 5.6.2007  Time: 17:08:39
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\样本.rar
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?04.exe - a variant of Win32/PSW.OnLineGames.NAL trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?05.exe - a variant of Win32/PSW.OnLineGames.NAL trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?06.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\样本.rar ?RAR ?01.exe - probably a variant of Win32/PSW.QQPass.VD trojan
Number of scanned files: 8
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 17:08:40 Total scanning time: 1 sec (00:00:01)

wangjay1980

7

[ 本帖最后由 wangjay1980 于 2007-6-5 17:08 编辑 ]

1688388728

MD5: 0DE298 9CCB6A 04812E 50C4D0 9E68FF 6A451C 03D359]

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-27
Start time: 2005-6-5 17:13
Engine(s): KAV engine (AVK 17.5523), BD-Engine (BD 17.5246)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 01.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Generic.PWStealer.226E11A3 (BD-Engine)
Object: 03.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.Spy.Delf.NEX (BD-Engine)
Object: 04.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.wk (KAV engine), Trojan.PWS.WSGame.AP (BD-Engine)
Object: 05.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan.PWS.WSGame.AO (BD-Engine)
Object: 08.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.Spy.Delf.NEX (BD-Engine)
Analysis complete: 2005-6-5 17:13
    7 files checked
    5 infected files detected
    0 suspected files detected

欠妳緈諨

3个

taihuxian

Virus: Trojan-PSW.Win32.OnLineGames.wk, Trojan-PSW.Win32.OnLineGames.es (2x)

Virus found while downloading Web content.

Address: bbs.kafan.cn

jack7087

驅逐艦全殺.......

金剑

2007年6月5日18时0分35秒:进程启动:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\01.exe
2007年6月5日18时0分49秒:进程启动:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\04.exe
2007年6月5日18时0分55秒:进程启动:C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\05.exe
2007年6月5日18时3分46秒:启动项被更改!

tracydk

小朋友怎么学费尔了??