一堆，32个

显示全部楼层 · 发表于 2007-8-3 22:33:23

[MD5: 42B472 16283A 063F73 47A9AC C626FA 864AB5 4CF116 16A8B1 E0E4D1 32663C E398D7 2DAE87 82380C 59D742 1C6BB0 1067A6 3CE0B7 B584E9 E8D35F F363A7 9A078A 592ED8 B0AD26 307422 F3C7F7 4E6B49 12EA49 3B6DD6 FD7216]

显示全部楼层 · 发表于 2007-8-3 22:40:37

扫描开始时间: 2007-8-3 22:40:16
扫描日志
NOD32 版本 2436 (20070803) NT
命令行: F:\virus\桌面

日期: 2007年8月3日时间: 22:40:17
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\桌面\
F:\virus\桌面\桌面\1(1).exe<病毒 - Win32/Drowor.NAC 病毒>
F:\virus\桌面\桌面\1(2).exe<病毒 - Win32/Agent.NIK 木马变种>
F:\virus\桌面\桌面\1.exe<病毒 - 可能是 Win32/Viking 病毒变种>
F:\virus\桌面\桌面\1630.exe<病毒 - Win32/PSW.Agent.NEC 木马变种>
F:\virus\桌面\桌面\1631.exe<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\桌面\桌面\1632.exe<病毒 - Win32/PSW.Legendmir.NEP 木马变种>
F:\virus\桌面\桌面\1633.exe<病毒 - 可能是 Win32/PSW.QQPass.VD 木马变种>
F:\virus\桌面\桌面\1634.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\桌面\桌面\1636.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\桌面\桌面\1637.exe<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\桌面\桌面\1638.exe<病毒 - 可能是 Win32/PSW.Agent.NDP 木马变种>
F:\virus\桌面\桌面\1639.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\桌面\桌面\3.exe<病毒 - Win32/PSW.Delf.NHI 木马>
F:\virus\桌面\桌面\4.exe<病毒 - 可能是 Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\桌面\桌面\40.exe<病毒 - 可能是 Win32/Agent.NEO 木马变种>
F:\virus\桌面\桌面\5.exe<病毒 - Win32/PSW.OnLineGames.NDA 木马变种>
F:\virus\桌面\桌面\6.exe<病毒 - Win32/PSW.WOW.RO 木马>
F:\virus\桌面\桌面\7.exe<病毒 - 可能是 Win32/TrojanDownloader.Agent 木马变种>
F:\virus\桌面\桌面\70.exe<病毒 - 可能是 Win32/Agent.NEO 木马变种>
F:\virus\桌面\桌面\8(1).exe<病毒 - Win32/PSW.Delf.NGO 木马>
F:\virus\桌面\桌面\8.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\桌面\桌面\9.exe<病毒 - Win32/PSW.Legendmir.NEP 木马变种>
F:\virus\桌面\桌面\ad.exe<病毒 - Win32/Agent.NIK 木马变种>
F:\virus\桌面\桌面\ad.jpg<病毒 - Win32/TrojanDownloader.Ani.Gen 木马变种>
F:\virus\桌面\桌面\ah.c<病毒 - Win32/TrojanDownloader.Ani.Gen 木马变种>
F:\virus\桌面\桌面\ga.exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马变种>
F:\virus\桌面\桌面\vip.exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马变种>
F:\virus\桌面\桌面\window.exe<病毒 - 可能是 Win32/PSW.Delf.NHI 木马变种>
F:\virus\桌面\桌面\xjz2007.bmp<病毒 - Win32/TrojanDownloader.Ani.Gen 木马变种>
已扫描文件数量: 31
已发现病毒数量: 29
完成时间: 22:40:21 总共扫描时间: 4 秒 (00:00:04)

显示全部楼层 · 发表于 2007-8-3 22:41:58

Scan performed at: 2007-8-3 22:38:50
Scanning Log
NOD32 version 2436 (20070803) NT
Command line: F:\桌面[1]
Operating memory - is OK

Date: 3.8.2007 Time: 22:38:52
Anti-Stealth technology is enabled.
Scanned disks, folders and files: F:\桌面[1]\
F:\桌面[1]\桌面\1(1).exe - Win32/Drowor.NAC virus
F:\桌面[1]\桌面\1(2).exe - a variant of Win32/Agent.NIK trojan
F:\桌面[1]\桌面\1.exe - probably a variant of Win32/Viking virus
F:\桌面[1]\桌面\1630.exe - a variant of Win32/PSW.Agent.NEC trojan
F:\桌面[1]\桌面\1631.exe - probably a variant of Win32/Genetik trojan
F:\桌面[1]\桌面\1632.exe - a variant of Win32/PSW.Legendmir.NEP trojan
F:\桌面[1]\桌面\1633.exe - probably a variant of Win32/PSW.QQPass.VD trojan
F:\桌面[1]\桌面\1634.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\桌面[1]\桌面\1636.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\桌面[1]\桌面\1637.exe - probably a variant of Win32/Genetik trojan
F:\桌面[1]\桌面\1638.exe - probably a variant of Win32/PSW.Agent.NDP trojan
F:\桌面[1]\桌面\1639.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\桌面[1]\桌面\3.exe - Win32/PSW.Delf.NHI trojan
F:\桌面[1]\桌面\4.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
F:\桌面[1]\桌面\40.exe - probably a variant of Win32/Agent.NEO trojan
F:\桌面[1]\桌面\5.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
F:\桌面[1]\桌面\6.exe - Win32/PSW.WOW.RO trojan
F:\桌面[1]\桌面\7.exe - probably a variant of Win32/TrojanDownloader.Agent trojan
F:\桌面[1]\桌面\70.exe - probably a variant of Win32/Agent.NEO trojan
F:\桌面[1]\桌面\8(1).exe - Win32/PSW.Delf.NGO trojan
F:\桌面[1]\桌面\8.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\桌面[1]\桌面\9.exe - a variant of Win32/PSW.Legendmir.NEP trojan
F:\桌面[1]\桌面\ad.exe - a variant of Win32/Agent.NIK trojan
F:\桌面[1]\桌面\ad.jpg - a variant of Win32/TrojanDownloader.Ani.Gen trojan
F:\桌面[1]\桌面\ah.c - a variant of Win32/TrojanDownloader.Ani.Gen trojan
F:\桌面[1]\桌面\ga.exe - probably a variant of Win32/PSW.Delf.NHI trojan
F:\桌面[1]\桌面\vip.exe - probably a variant of Win32/PSW.Delf.NHI trojan
F:\桌面[1]\桌面\window.exe - probably a variant of Win32/PSW.Delf.NHI trojan
F:\桌面[1]\桌面\xjz2007.bmp - a variant of Win32/TrojanDownloader.Ani.Gen trojan
Number of scanned files: 31
Number of threats found: 29
Number of files cleaned: 29
Time of completion: 22:38:59 Total scanning time: 7 sec (00:00:07)

显示全部楼层 · 发表于 2007-8-3 22:42:02

NOD好样的

显示全部楼层 · 发表于 2007-8-3 22:43:09

C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1(1).exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1(2).exe
   [DETECTION] Is the Trojan horse TR/Agent.22016.B
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1.exe
   [DETECTION] Contains signature of the worm WORM/Viking.NCN
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1630.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1631.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1632.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.LY.35
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1633.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.48011
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1634.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.152
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1636.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1637.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1638.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\1639.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.149
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\2.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bkl.13
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\3.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.QC.40
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\40.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\5.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.218
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\6.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\7.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.LB.3
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\70.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\8(1).exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.25812
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\8.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\9.exe
   [DETECTION] Contains signature of the dropper DR/Delphi.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\ad.exe
   [DETECTION] Is the Trojan horse TR/Agent.22016.B
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\ad.jpg
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\ah.c
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\ga.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.blg
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\setup.exe
   [DETECTION] Contains signature of the dropper DR/PcClient.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\vip.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.10
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\window.exe
   [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.10
   [INFO]    The file was deleted!
C:\Documents and Settings\lsy\桌面\桌面[1]\桌面\xjz2007.bmp
   [DETECTION] Contains signature of the exploits EXP/Ani.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-3 23:28:59

明明就31个啊..哪来32个..汗一个..
江民杀掉28个

显示全部楼层 · 发表于 2007-8-3 23:41:58

28个

已检测到: 病毒 Virus.Win32.Drowor.d 文件: G:\样本\桌面[1]\桌面\1(1).exe//UPack
已检测到: 病毒 Worm.Win32.Viking.lw 文件: G:\样本\桌面[1]\桌面\1.exe
已检测到: 病毒 Heur.Invader (变种) 文件: G:\样本\桌面[1]\桌面\1630.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.wt 文件: G:\样本\桌面[1]\桌面\1631.exe//PE_Patch//UPack
已检测到: 木马程序 Trojan-PSW.Win32.Delf.ly 文件: G:\样本\桌面[1]\桌面\1632.exe
已检测到: 病毒 Virus.Win32.AutoRun.fz 文件: G:\样本\桌面[1]\桌面\1633.exe//UPX
已检测到: 木马程序 Trojan.Win32.LipGame.cd 文件: G:\样本\桌面[1]\桌面\1634.exe//PE_Patch.UPX//UPX
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.acx 文件: G:\样本\桌面[1]\桌面\1636.exe//PE_Patch//UPack
已检测到: 木马程序 Trojan-PSW.Win32.Small.cf 文件: G:\样本\桌面[1]\桌面\1638.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.yn 文件: G:\样本\桌面[1]\桌面\1639.exe//PE_Patch//UPack
已检测到: 木马程序 Trojan-PSW.Win32.Nilage.bkl 文件: G:\样本\桌面[1]\桌面\2.exe//UPack
已检测到: 木马程序 Trojan-PSW.Win32.Delf.qc 文件: G:\样本\桌面[1]\桌面\3.exe//UPX
已检测到: 木马程序 Trojan.Win32.Agent.bl 文件: G:\样本\桌面[1]\桌面\4.exe
已检测到: 木马程序 Backdoor.Win32.Agent.ahj 文件: G:\样本\桌面[1]\桌面\40.exe
已检测到: 木马程序 Trojan-Downloader.Win32.Small.ewc 文件: G:\样本\桌面[1]\桌面\5.exe//UPack
已检测到: 木马程序 Trojan-PSW.Win32.WOW.ro 文件: G:\样本\桌面[1]\桌面\6.exe//UPack
已检测到: 木马程序 Trojan-Downloader.Win32.Agent.bxi 文件: G:\样本\桌面[1]\桌面\7.exe//UPack
已检测到: 木马程序 Backdoor.Win32.Agent.ahj 文件: G:\样本\桌面[1]\桌面\70.exe
已检测到: 木马程序 Trojan-PSW.Win32.Delf.qc 文件: G:\样本\桌面[1]\桌面\8(1).exe//UPX
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.zq 文件: G:\样本\桌面[1]\桌面\8.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.adn 文件: G:\样本\桌面[1]\桌面\9.exe//ASPack
已检测到: 木马程序 Trojan-Proxy.Win32.Small.du 文件: G:\样本\桌面[1]\桌面\ad.exe
已检测到: 危险软件 Exploit.Win32.IMG-ANI.x 文件: G:\样本\桌面[1]\桌面\ad.jpg
已检测到: 危险软件 Exploit.Win32.IMG-ANI.gen (变种) 文件: G:\样本\桌面[1]\桌面\ah.c
已检测到: 木马程序 Trojan-PSW.Win32.Nilage.blg 文件: G:\样本\桌面[1]\桌面\ga.exe//PE_Patch//NSPack//PE_Patch
已检测到: 木马程序 Trojan-PSW.Win32.Delf.wh 文件: G:\样本\桌面[1]\桌面\vip.exe//PE_Patch.UPX//UPX
已检测到: 木马程序 Trojan-PSW.Win32.Delf.wh 文件: G:\样本\桌面[1]\桌面\window.exe//PE_Patch.UPX//UPX
已检测到: 危险软件 Exploit.Win32.IMG-ANI.ac 文件: G:\样本\桌面[1]\桌面\xjz2007.bmp

显示全部楼层 · 发表于 2007-8-3 23:47:47

29个

deleted: virus Virus.Win32.Drowor.d File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1(1).exe//UPack
deleted: virus Worm.Win32.Viking.lw File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1630.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.wt File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1631.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Delf.ly File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1632.exe
deleted: virus Virus.Win32.AutoRun.fz File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1633.exe//UPX
deleted: Trojan program Trojan.Win32.LipGame.cd File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1634.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.acx File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1636.exe//PE_Patch//UPack
deleted: Trojan program Trojan-Downloader.Win32.Small.exh File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1637.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.Small.cf File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1638.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.yn File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\1639.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Nilage.bkl File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\2.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.Delf.qc File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\3.exe//UPX
deleted: Trojan program Trojan.Win32.Agent.bl File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\4.exe
deleted: Trojan program Backdoor.Win32.Agent.ahj File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\40.exe
deleted: Trojan program Trojan-Downloader.Win32.Small.ewc File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\5.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.WOW.ro File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\6.exe//UPack
deleted: Trojan program Trojan-Downloader.Win32.Agent.bxi File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\7.exe//UPack
deleted: Trojan program Backdoor.Win32.Agent.ahj File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\70.exe
deleted: Trojan program Trojan-PSW.Win32.Delf.qc File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\8(1).exe//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.zq File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\8.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.adn File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\9.exe//ASPack
deleted: Trojan program Trojan-Proxy.Win32.Small.du File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\ad.exe
deleted: malware Exploit.Win32.IMG-ANI.x File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\ad.jpg
deleted: malware Exploit.Win32.IMG-ANI.gen (modification) File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\ah.c
deleted: Trojan program Trojan-PSW.Win32.Nilage.blg File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\ga.exe//PE_Patch//NSPack//PE_Patch
deleted: Trojan program Trojan-PSW.Win32.Delf.wh File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\vip.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.Delf.wh File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\window.exe//PE_Patch.UPX//UPX
deleted: malware Exploit.Win32.IMG-ANI.ac File: C:\virus\¸´¼þ ×ÀÃæ.rar/×ÀÃæ\xjz2007.bmp

显示全部楼层 · 发表于 2007-8-4 00:22:16

咖啡报28个

[病毒样本] 一堆，32个

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块