MD5[48cfb7 a1e354 0427fa 816b03 5b687d 8fc800 1e8d06 29c35c e068b1 ]

qqq000@qq.com

[凝逸.扫描记录]
MD5[48cfb7 a1e354 0427fa 816b03 5b687d 8fc800 1e8d06 29c35c e068b1 ]
c:\新建文件夹\48cfb7_newfb.exe,木马
c:\新建文件夹\a1e354_woso0.dll,木马
c:\新建文件夹\0427fa_ztso0.dll,木马
c:\新建文件夹\816b03_mhso0.dll,木马
c:\新建文件夹\5b687d_fyso0.dll,木马
c:\新建文件夹\8fc800_jtso0.dll,木马
c:\新建文件夹\1e8d06_wlso0.dll,木马
c:\新建文件夹\29c35c_wgso0.dll,木马
c:\新建文件夹\~temp6436\e068b1_~temp6436.exe,木马
感染:9/文件:9
扫描完成|文件:9|耗时:290

tracydk

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.mw        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/816B03_mhso0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/5B687D_fyso0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/8FC800_jtso0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/1E8D06_wlso0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/29C35C_wgso0.dll
detected: virus Virus.Win32.AutoRun.bk        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/~Temp6436\E068B1_~temp6436.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/A1E354_woso0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wm        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/0427FA_ztso0.dll

qqq000@qq.com

[凝逸.扫描记录]

用
凝逸_提取病毒_卡饭取病毒MD5专版
生成
在这有下在
http://bbs.kafan.cn/viewthread.p ... &extra=page%3D1

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

扫描开始时间: 2007-6-7 22:33:05
扫描日志
NOD32 版本 2315 (20070607) NT
命令行: F:\virus\MD5[48cfb7 a1e354 0427fa 816b03 5b687d 8fc800 1e8d06 29c35c e068b1 ]\新建文件夹.rar

日期: 2007年6月7日  时间: 22:33:06
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\MD5[48cfb7 a1e354 0427fa 816b03 5b687d 8fc800 1e8d06 29c35c e068b1 ]\新建文件夹.rar
F:\virus\MD5[48cfb7 a1e354 0427fa 816b03 5b687d 8fc800 1e8d06 29c35c e068b1 ]\新建文件夹.rar ?RAR ?48CFB7_newfb.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
已扫描文件数量: 9
已发现病毒数量: 1
完成时间: 22:33:07 总共扫描时间: 1 秒 (00:00:01)

注意:
[7] 文件可能感染了未知病毒。

carlcai

趋势杀！8个！[:27:]

taihuxian

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=83627 is infected with Trojan-PSW.Win32.OnLineGames.mw virus

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\新建文件夹.rar'
C:\Documents and Settings\Administrator\My Documents\
  新建文件夹.rar
    [0] Archive type: RAR
    --> 816B03_mhso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5B687D_fyso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8FC800_jtso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1E8D06_wlso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 29C35C_wgso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 48CFB7_newfb.exe
    --> ~Temp6436\E068B1_~temp6436.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> A1E354_woso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 0427FA_ztso0.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年6月7日  08:05
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      8 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      9 Warnings
      0 Notes
      0 Hidden objects were found

蓝色牛仔裤

beta蜘蛛6个。。

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\~Temp6436
>>>C:\Documents and Settings\Administrator\桌面\新建文件夹\~Temp6436\E068B1_~temp6436.exe - Ok

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\1E8D06_wlso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\1E8D06_wlso0.dll infected with Trojan.PWS.Wsgame

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\5B687D_fyso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\5B687D_fyso0.dll infected with Trojan.PWS.Wsgame

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\8FC800_jtso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\8FC800_jtso0.dll infected with Trojan.PWS.Gamania

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\29C35C_wgso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\29C35C_wgso0.dll infected with Trojan.PWS.Gamania

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\48CFB7_newfb.exe
>C:\Documents and Settings\Administrator\桌面\新建文件夹\48CFB7_newfb.exe - Ok

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\0427FA_ztso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\0427FA_ztso0.dll infected with Trojan.PWS.Wsgame

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\816B03_mhso0.dll
>C:\Documents and Settings\Administrator\桌面\新建文件夹\816B03_mhso0.dll - decompression error

[Scan path] C:\Documents and Settings\Administrator\桌面\新建文件夹\A1E354_woso0.dll
C:\Documents and Settings\Administrator\桌面\新建文件夹\A1E354_woso0.dll infected with Trojan.PWS.Wsgame