[MD5: 07C8CC 09A0AC A2C05E 765F8C 93065D 765F8C 3F47D8 5C3D5A]

显示全部楼层 · 发表于 2007-7-11 20:09:19

AVAST删除6个

显示全部楼层 · 发表于 2007-7-11 20:15:22

时间模块对象名称病毒操作用户名称信息
2007/7/11 20:11:39 AMON 文件 D:\病毒上报\Backup.6451744.vir 未查明的 NewHeur_PE 病毒已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/11 20:11:37 AMON 文件 D:\病毒上报\F0D78D11.exe Win32/PSW.OnLineGames.NCU 木马的变种已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/11 20:11:36 AMON 文件 D:\病毒上报\cmdbcs.dll Win32/PSW.OnLineGames.YA 木马的变种已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/11 20:11:35 AMON 文件 D:\病毒上报\k5529678764.exe Win32/PSW.OnLineGames.NCU 木马的变种已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/11 20:11:35 AMON 文件 D:\病毒上报\F0D78D13.DLL 可能是 Win32/Genetik 木马的一个变种已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007/7/11 20:11:33 AMON 文件 D:\病毒上报\F0D78D12.exe Win32/PSW.Agent.NEW 木马的变种已隔离 - 已删除 Jason-PC\Jason 程序新建文件时发生事件： C:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。

显示全部楼层 · 发表于 2007-7-11 20:24:49

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Trojan.Spy.Delf.PH
http://www.bitdefender.com/vfind/?q=Generic.Onlinegames.3.D096FDDF
http://www.bitdefender.com/vfind/?q=DeepScan:Generic.Malware.Sdld!gPWS.0C1BC4E1
http://www.bitdefender.com/vfind/?q=Generic.Malware.gPWS.317C982A
http://www.bitdefender.com/vfind/?q=DeepScan:Generic.Malware.Sdld!gPWS.0C1BC4E1
http://www.bitdefender.com/vfind/?q=Generic.Malware.gPWS.483AE15F
http://www.bitdefender.com/vfind/?q=Generic.Onlinegames.3.93FB9888

显示全部楼层 · 发表于 2007-7-11 22:02:32

Hello,

cmdbcs.dll - Trojan-PSW.Win32.OnLineGames.wp,

F0D78D11.exe_,
F0D78D12.exe_,
k11841206234.DAT,
k5529678764.exe_ - Trojan-PSW.Win32.OnLineGames.es,

F0D78D12.DLL - Trojan-PSW.Win32.OnLineGames.qy,

F0D78D13.DLL - Backdoor.Win32.Agent.ahj

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-7-14 14:27:48

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.02
nvcbin.def revision 5.90.00 of 2007/07/13 18:54:26 (807131 variants)
nvcmacro.def revision 5.90.00 of 2007/06/29 06:32:19 (20341 variants)
Total number of variants: 827472
Command line: "@C:\Users\Jason\AppData\Local\Temp\~OD5F23.tmp"
===================================================================================================

   Time  Filename                                                    Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: D:\v\
   400 ms D:\v\Backup.6451744.vir                                     Trojan W32/Delf.ZWY ()
   309 ms D:\v\cmdbcs.dll
   66 ms D:\v\F0D78D11.exe                                           Security Risk W32/Suspicious_U.gen ()
      2 ms D:\v\F0D78D12.DLL
      1 ms D:\v\F0D78D12.exe                                           Security Risk W32/Suspicious_U.gen ()
      2 ms D:\v\F0D78D13.DLL                                           Trojan Hupigon.gen66 ()
      1 ms D:\v\k11841206234.DAT                                     Security Risk W32/Suspicious_U.gen ()
      2 ms D:\v\k5529678764.exe                                        Security Risk W32/Suspicious_U.gen ()
   1995 ms D:\v\qvjcbga.exe
- File D:\v\Backup.6451744.vir quarantined.
- File D:\v\Backup.6451744.vir deleted.
- File D:\v\F0D78D11.exe quarantined.
- File D:\v\F0D78D11.exe deleted.
- File D:\v\F0D78D12.exe quarantined.
- File D:\v\F0D78D12.exe deleted.
- File D:\v\F0D78D13.DLL quarantined.
- File D:\v\F0D78D13.DLL deleted.
- File D:\v\k11841206234.DAT quarantined.
- File D:\v\k11841206234.DAT deleted.
- File D:\v\k5529678764.exe quarantined.
- File D:\v\k5529678764.exe deleted.

===================================================================================================

The scanning started: 2007/07/14 14:21:55
            ended: 2007/07/14 14:22:09
Logged on as       : Jason
on hostname       : JASON-PC

Scanning results:
Total number of files found..............................:    9
Number of files scanned..................................:    9
Number of files/directories skipped due to exclude list..:    0
Number of files that could not be opened.................:    0
Number of archive files unpacked.........................:    0
Number of archive files not unpacked.....................:    0
Number of infections.....................................:    6

Copyright (c) 1993-2005 Norman ASA.

[病毒样本] [MD5: 07C8CC 09A0AC A2C05E 765F8C 93065D 765F8C 3F47D8 5C3D5A]

本帖子中包含更多资源