6个台湾的--请修改标题 by 番茄

费饭饭

原帖由 wangjay1980 于 2007-6-6 15:38 发表
用新的发帖方式

怎么用啊？我看过那个帖子还是不会
只要下了那个批处理，拖进去，他会自动搞定吗？

promised

原帖由 费饭饭 于 2007-6-6 16:03 发表


怎么用啊？我看过那个帖子还是不会
只要下了那个批处理，拖进去，他会自动搞定吗？

运行批处理

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-6
Start time: 2005-6-6 16:50
Engine(s): KAV engine (AVK 17.5733), BD-Engine (BD 17.5315)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 94b.dll
        Path: C:\Documents and Settings\Administrator\桌面\h
        Status: Move file into quarantine
        Virus: Trojan.PWS.Onlinegames.AWR (BD-Engine)
Object: PDLL.dll
        Path: C:\Documents and Settings\Administrator\桌面\h
        Status: Move file into quarantine
        Virus: Trojan.PWS.Onlinegames.AWR (BD-Engine)
Object: svchost.exe
        Path: C:\Documents and Settings\Administrator\桌面\svchost
        Status: Move file into quarantine
        Virus: Trojan.PWS.Onlinegames.AWR (BD-Engine)
Analysis complete: 2005-6-6 16:50
    8 files checked
    3 infected files detected
    0 suspected files detected

蓝色牛仔裤

[Scan path] C:\Documents and Settings\Administrator\桌面\桌面
C:\Documents and Settings\Administrator\桌面\桌面\Trojan.....com infected with Trojan.PWS.Lineage
C:\Documents and Settings\Administrator\桌面\桌面\Trojan...com infected with Trojan.PWS.Lineage
>>>>>C:\Documents and Settings\Administrator\桌面\桌面\Trojan...exe infected with Trojan.PWS.Ran.origin
>C:\Documents and Settings\Administrator\桌面\桌面\Trojan.exe\TT1_(www.mary7788.com).exe - Ok
>C:\Documents and Settings\Administrator\桌面\桌面\Trojan.exe\??? - decompression error

[ 本帖最后由 蓝色牛仔裤 于 2007-6-6 22:24 编辑 ]

caocao

KIS 7
已经删除: 木马程序 Trojan-PSW.Win32.Magania.om        文件: D:\Downloads\桌面.rar/Trojan...com
已经删除: 木马程序 Trojan-PSW.Win32.Delf.vx        文件: D:\Downloads\桌面.rar/Trojan...exe//PE_Patch.PECompact//PecBundle//PECompact//PE_Patch.MaskPE
已经删除: 木马程序 Trojan-PSW.Win32.Magania.om        文件: D:\Downloads\桌面.rar/Trojan.....com
已经删除: 木马程序 Trojan-PSW.Win32.Magania.om        文件: D:\Downloads\桌面2.rar/Trojan..com
已经删除: 木马程序 Trojan-PSW.Win32.Magania.om        文件: D:\Downloads\桌面2.rar/Trojan.com

wangjay1980

Hello,

Trojan(1).exe_, Trojan.exe_

These files are corrupted.

Trojan.....com_, Trojan...com_, Trojan..com_, Trojan.com_ - Trojan-PSW.Win32.Magania.om,
Trojan...exe_ - Trojan-PSW.Win32.Delf.vx

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: bingdu.zip

rasis

Begin scan in 'Trojan_1.exe'
Begin scan in 'Trojan..com'
Trojan..com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!
Begin scan in 'Trojan.com'
Trojan.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!
Begin scan in 'Trojan.exe'
Begin scan in 'Trojan...com'
Trojan...com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!
Begin scan in 'Trojan...exe'
Trojan...exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
Begin scan in 'Trojan.....com'
Trojan.....com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\桌面'
C:\Documents and Settings\Administrator\My Documents\桌面\
  Trojan.....com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  Trojan...com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  Trojan...exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46d5cce9.qua'!
  Trojan..com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  Trojan.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  Trojan.exe
    [0] Archive type: RAR
    --> TT1_(www.mary7788.com).exe