毒11个md5见帖子

troika

98126d fed3fa 2057d0 be2522 0fe550 f2d9d7 bfe14f 0ee6d3 d05ec5 e416b1 d14eb0

taihuxian

Kaspersky Internet Security 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=87076 is infected with Trojan-PSW.Win32.OnLineGames.sl virus

mofunzone

nod不是最新版，不知道多少差距
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\3[1]'
C:\Documents and Settings\Administrator\My Documents\3[1]\
  10[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  1[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QW.139
      [INFO]      The file was deleted!
  2[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  3[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46a1789b.qua'!
  4[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '47039198.qua'!
  5[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  6[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  7[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  8[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!
  hip33221456[1].exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
      [INFO]      The file was moved to '46e078aa.qua'!
  qq[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46cb78b3.qua'!


End of the scan: 2007年6月13日  16:05
Used time: 00:09 min

The scan has been done completely.

      1 Scanning directories
     11 Files were scanned
     11 viruses and/or unwanted programs were found
      3 classified as suspicious:
      7 files were deleted
      0 files were repaired
      4 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

扫描日志
NOD32版本 2325 (20070612) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\3[1]
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 13.6.2007  时间：16:06:34
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\3[1]\
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?10[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?1[1].exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?2[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?3[1].exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?4[1].exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?5[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?6[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?7[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?8[1].exe - Win32/Agent.NIK 木马的变种
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?hip33221456[1].exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\3[1]\ ?
?qq[1].exe - Win32/TrojanDownloader.Delf.BHO 木马的变种
已扫描的文件数目：11
已发现的病毒数目：8
完成时间： 16:06:37 总扫描时间：3 秒 (00:00:03)


[Scan path] C:\Documents and Settings\Administrator\My Documents\3[1]
C:\Documents and Settings\Administrator\My Documents\3[1]\10[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\My Documents\3[1]\1[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\3[1]\2[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\My Documents\3[1]\3[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\3[1]\4[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\3[1]\5[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\My Documents\3[1]\6[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\My Documents\3[1]\7[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\My Documents\3[1]\8[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\My Documents\3[1]\hip33221456[1].exe - Ok
C:\Documents and Settings\Administrator\My Documents\3[1]\qq[1].exe infected with Trojan.DownLoader.origin

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 13
Infected objects found: 10
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 1160 Kb/s
Scan time: 00:00:01

欠妳緈諨

AVAST杀8个

yashoo

咖啡只杀了3个   上报去了

sharkkong

看来卡吧秒杀了，偶就不测了

woai_jolin

扫描开始时间: 2007/6/14 11:12:57
扫描日志
NOD32 版本 2328 (20070613) NT
命令行: D:\病毒测试
C:\Program Files\Eset\nod32.exe<病毒 - 正常>
物理磁盘 1 的 MBR 扇区，<病毒 - 正常>
物理磁盘 1 的活动引导扇区，<病毒 - 正常>

日期: 2007年6月14日  时间: 11:13:00
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: D:\病毒测试\
D:\病毒测试\3[1].part1.rar ?RAR ?3[1].exe<病毒 - Win32/PSW.Agent.NEW 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?10[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?2[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?1[1].exe<病毒 - 正常>
D:\病毒测试\3[1].part1.rar ?RAR ?4[1].exe<病毒 - 正常>
D:\病毒测试\3[1].part1.rar ?RAR ?5[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?6[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?7[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?8[1].exe<病毒 - Win32/Agent.NIK 木马 变种>
D:\病毒测试\3[1].part1.rar ?RAR ?hip33221456[1].exe<病毒 - > - 未找到下一个压缩文件卷。
D:\病毒测试\3[1].part2.rar:Zone.Identifier<病毒 - 正常>
D:\病毒测试\3[1].part3.rar:Zone.Identifier<病毒 - 正常>
已扫描文件数量: 12
已发现病毒数量: 7
已清除病毒的文件数量: 1
完成时间: 11:13:04 总共扫描时间: 4 秒 (00:00:04)

taihuxian

Virus: Trojan-PSW.Win32.OnLineGames.sl, Trojan-Proxy.Win32.Small.du (6x), Trojan-PSW.Win32.OnLineGames.qw, Trojan-PSW.Win32.OnLineGames.jj

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-Downloader.Win32.Delf.bhe
Virus found while downloading Web content.
Address: bbs.kafan.cn

[ 本帖最后由 taihuxian 于 2007-6-14 12:06 编辑 ]

蓝色牛仔裤

蜘蛛漏一个，还不赖～～
AVK全杀了。。

英仔

avg也全殺..