再来8个[MD5: 5BE94C 0F14A2 D93A65 505866 F17F07 B776FD DD2D4F 486396]

promised

微点卫士

金山8个
费尔13个!

微点:
木马名称:Trojan-PSW.Win32.OnLineGames.gtb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.fzo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.kff

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\ZXEPRI.DLL
2) C:\DELETEFILEDOS.BAT
是否删除可疑程序?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11.EXE
1) C:\DELETEFILEDOS.BAT
是否删除可疑程序?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
1) C:\DELETEFILEDOS.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\14.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.SYS
是否删除木马程序及其衍生物?

15. exe过微点了,上报

[ 本帖最后由 微点卫士 于 2007-7-24 12:25 编辑 ]

liaoying112

卡巴下就拦截,不知道扫描几个

liaoying112

费尔怎么来13个?LZ不说8个

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.XYOnline.bx
病毒： Trojan.PSW.Win32.RocOnline.t
病毒： Trojan.PSW.Win32.XYOnline.bt
病毒： Trojan.PSW.Win32.OnlineGames.doc
病毒： Trojan.Win32.Agent.ine   
病毒： Trojan.PSW.Win32.QQPass.qno
病毒： Trojan.PSW.Win32.Shanda.o

用户来源：互联网

软件版本：19.33.10

7个

微点卫士

我也不知道饿,费尔比较幽默
每次扫出来都不一样的,有14,10,9,8,最后就一直是7了
我的费尔在搞什么?

[ 本帖最后由 微点卫士 于 2007-7-24 12:31 编辑 ]

wangfeng66

只有8个EXE。DRWEB4.33报了5个

yzzxwyy

小红伞报8个
Begin scan in 'D:\Personal\My Documents\样本.rar'
D:\Personal\My Documents\样本.rar
  [0] Archive type: RAR
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.185
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UO.58
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.181
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.190
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> 15.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年7月24日  12:28
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      8 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

曲中求

Scan performed at: 2007-7-24 12:45:07
Scanning Log
NOD32 version 2415 (20070723) NT
Command line: C:\Documents and Settings\Administrator\桌面\样本.rar

Date: 24.7.2007  Time: 12:45:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\样本.rar
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?8.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?9.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?10.exe - Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?11.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?12.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?13.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?14.exe - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\Administrator\桌面\样本.rar ?RAR ?15.exe - a variant of Win32/PSW.Legendmir.NEP trojan
Number of scanned files: 8
Number of threats found: 8
Time of completion: 12:45:14 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.

欠妳緈諨

4