再来几个仔仔！大家帮忙杀杀看（MD5: C57D2 2E28E 87369 8DB7F）

显示全部楼层 · 发表于 2007-6-13 14:55:57

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.qw File: C:\Documents and Settings\Owner\×ÀÃæ\badguy.rar/ztinetzt.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.qw File: C:\Documents and Settings\Owner\×ÀÃæ\badguy.rar/mydata.exe//PE_Patch//UPack
deleted: Trojan program Backdoor.Win32.Agent.alh File: C:\Documents and Settings\Owner\×ÀÃæ\badguy.rar/nslookupi.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sl File: C:\Documents and Settings\Owner\×ÀÃæ\badguy.rar/nwizAsktao.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-6-13 15:11:40

AVAST拦截

显示全部楼层 · 发表于 2007-6-13 15:19:12

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.3.3
Virus signature file from: 2007-6-12, 19:34

Scan name: [Custom Scan]
Path to scan: C:\Documents and Settings\Administrator\桌面\badguy.rar

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-6-13, 15:21:32
---------------------------------------------------------------------

[Found possible virus] <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\badguy.rar->ztinetzt.exe
[Found possible virus] <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\badguy.rar->mydata.exe
[Found possible virus] <W32/SecRisk-ProcessPatcher-Sml-based!Maximus (not disinfectable)> C:\Documents and Settings\Administrator\桌面\badguy.rar->nwizAsktao.exe
[Contains infected objects] C:\Documents and Settings\Administrator\桌面\badguy.rar
[Quarantined] C:\Documents and Settings\Administrator\桌面\badguy.rar->nwizAsktao.exe

---------------------------------------------------------------------
Scan ended: 2007-6-13, 15:21:35
Duration: 0:00:03

Scan result:

Scanned files:    1
Infected objects:    3
Disinfected objects:    0
Quarantined files:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2007-6-13 17:29:35

nslookupi.exe 程序运行后立即退出其他报已知

木马名称:Trojan-PSW.Win32.OnLineGames.ete
程序:
I:\TEST\070613\8\BADGUY\ZTINETZT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.efh
程序:
I:\TEST\070613\8\BADGUY\MYDATA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.daw
程序:
I:\TEST\070613\8\BADGUY\NWIZASKTAO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-6-13 17:31:34

壳王BEHAV

显示全部楼层 · 发表于 2007-6-13 20:14:20

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

http://www.bitdefender.com/vfind/?q=Trojan.PWS.OnlineGames.AUP

显示全部楼层 · 发表于 2007-6-13 21:05:46

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=86823 is infected with Trojan-PSW.Win32.OnLineGames.qw virus

显示全部楼层 · 发表于 2007-6-13 23:03:28

kv杀光

[病毒样本] 再来几个仔仔！大家帮忙杀杀看（MD5: C57D2 2E28E 87369 8DB7F）

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

微点拦截情况

本帖子中包含更多资源