今天最后六个，睡觉了[MD5: 3D6E9F 14DF8A 58542F D219FA A5DB63 AA0B1F]

allenhippo

qq真不安全，还好我不用。

The EQs

WLM也不安全

The EQs

Scan performed at: 2007-6-6 22:12:57
Scanning Log
NOD32 version 2313 (20070606) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 6.6.2007  Time: 22:13:02
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?bt1[1].exe - probably a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?bt6[1].exe - Win32/Delf.NFH trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?bt9[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?btf[1].exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?btg[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?LYLOADER.EXE - probably a variant of Win32/PSW.Agent.NEC trojan
Number of scanned files: 7
Number of threats found: 6
Number of files cleaned: 1
Time of completion: 22:13:03 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

promised

启发出来4个。。。。。。。。
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\...\bt1[1].exe : is suspected of Malware.Agent.107 (paranoid heuristics)
C:\ABC\virus.rar:<RAR>\bt9[1].exe : is suspected of Downloader.Small.160
C:\ABC\virus.rar:<RAR>\btg[1].exe : is suspected of Downloader.Small.160
C:\...\LYLOADER.EXE : is suspected of Malware.Agent.107 (paranoid heuristics)
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 6       - total       : 11
- scanned         : 1       -  scanned    : 6       - scanned     : 11
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 4       - suspicious  : 1

Startup    : 22:14:01 06-06-2007
End        : 22:14:09 06-06-2007
Total time : 00:00:08

蓝色牛仔裤

终于开杀戒了！！全了。


[Scan path] C:\Documents and Settings\Administrator\桌面\virus.rar
>>>C:\Documents and Settings\Administrator\桌面\virus.rar\bt1[1].exe is an adware program Adware.Casino.origin
>>C:\Documents and Settings\Administrator\桌面\virus.rar\bt6[1].exe infected with Trojan.PWS.Gamania
>>C:\Documents and Settings\Administrator\桌面\virus.rar\bt9[1].exe infected with Trojan.PWS.Wsgame
>>C:\Documents and Settings\Administrator\桌面\virus.rar\btf[1].exe infected with BackDoor.Twin.origin
>>C:\Documents and Settings\Administrator\桌面\virus.rar\btg[1].exe infected with Trojan.PWS.Wsgame
>>C:\Documents and Settings\Administrator\桌面\virus.rar\LYLOADER.EXE probably infected with MULDROP.Trojan
C:\Documents and Settings\Administrator\桌面\virus.rar - archive contains infected objects

taihuxian

Virus: Win32:OnLineGames-SR [Trj], Win32:Small-EKC [Trj], Win32:OnLineGames-SS [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\virus.rar/bt1[1].exe//LYMANGR.DLL//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rc        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\virus.rar/bt9[1].exe//PE_Patch//UPack
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\virus.rar/btf[1].exe//NSPack
detected: virus Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\virus.rar/btg[1].exe//PE_Patch//UPack
not found: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\virus.rar/LYLOADER.EXE//LYMANGR.DLL//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: c:\documents and settings\owner\×&Agrave;&Atilde;&aelig;\virus.rar/LYLOADER.EXE//PE_Patch//UPack//LYMANGR.DLL//UPack

欠妳緈諨

3个

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\virus.rar'
C:\Documents and Settings\Administrator\My Documents\
  virus.rar
    [0] Archive type: RAR
    --> bt1[1].exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NN.140
        [WARNING]   Infected files in archives cannot be repaired!
    --> bt6[1].exe
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> bt9[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> btf[1].exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> btg[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> LYLOADER.EXE
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NN.140
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!


End of the scan: 2007年6月6日  08:15
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      6 viruses and/or unwanted programs were found
      2 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
      6 Warnings
      0 Notes
      0 Hidden objects were found

mcafee报new  malware