干掉nod网马生成物4[MD5: 0BF026 4559E4 0565F9 9B5E9E]

scottxzt

taihuxian

Virus: Packed.Win32.NSAnti.p, Trojan-PSW.Win32.OnLineGames.xq (2x), Trojan-PSW.Win32.OnLineGames.mw

Virus found while downloading Web content.

Address: bbs.kafan.cn

promised

License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\woso.exe : infected Trojan-PSW.Win32.OnLineGames.tc
C:\ABC\virus.rar:<RAR>\woso0.dll : infected Trojan-PSW.Win32.OnLineGames.tc
C:\ABC\virus.rar:<RAR>\ztso.exe : infected Trojan-PSW.Win32.OnLineGames.tc
C:\ABC\virus.rar:<RAR>\ztso0.dll : infected Trojan-PSW.Win32.OnLineGames.tc
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 4       - total       : 15
- scanned         : 1       -  scanned    : 4       - scanned     : 15
- contain viruses : 1       -  infected   : 4       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 16:54:20 15-06-2007
End        : 16:54:24 15-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

freeboyoua

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus.rar'
C:\Documents and Settings\Administrator\桌面\virus.rar
  [0] Archive type: RAR
  --> woso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> woso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> ztso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> ztso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年6月16日  18:02
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found