查看: 2814|回复: 11
收起左侧

[病毒样本] 18个网毒

[复制链接]
zane_xzz
发表于 2007-8-25 20:33:27 | 显示全部楼层 |阅读模式
[MD5: 4B7CA7 E955DF 18D700 6A20CB 4BD2B8 7812A4 AB0EAF 8626F4 53346C A8EAB5 5E3C51 8DCFA5 154D46 4A8C6E 4DD16D 0321CB 9419B8 136E91]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-8-25 20:34:36 | 显示全部楼层
detected: Trojan program Trojan-Downloader.Win32.Delf.bnc        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/qq.exe//UPack
detected: Trojan program Trojan.Win32.Small.nv        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/nettool.exe
detected: Trojan program Backdoor.Win32.WinterLove.bf        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/14.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.akc        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/15.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.xb        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/16.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aih        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/2.exe
detected: Trojan program Trojan-Spy.Win32.Delf.wv        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/8.exe//UPack
detected: Trojan program Backdoor.Win32.Agent.alh        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/20.exe//UPack
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/3.exe
detected: Trojan program Trojan-Spy.Win32.Delf.uv        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/4.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.uv        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/5.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Lmir.bjz        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/6.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.xc        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/7.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/1.exe//FSG
detected: Trojan program Trojan-Spy.Win32.Delf.uv        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/12.exe//UPack
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/10.exe//PE_Patch.UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uo        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/11.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.xa        File: C:\Documents and Settings\Owner\×ÀÃæ\virus.rar/13.exe//UPack
18
FBAV
发表于 2007-8-25 20:44:26 | 显示全部楼层
为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]              
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\5555\qq.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\qq.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\nettool.exe]
                    …………引擎[2]发现病毒:Win32.NkHack.FSG.A
[C:\Documents and Settings\Administrator\桌面\virus\5555\14.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\15.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\15.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\16.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\16.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\8.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\20.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\20.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\4.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\4.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\5.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\6.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\7.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\1.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\1.exe]
                    …………引擎[2]发现病毒:Win32.NkHack.FSG.A
[C:\Documents and Settings\Administrator\桌面\virus\5555\12.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\5555\12.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\11.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\5555\13.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
文件数:18   病毒数:22  比重:1.222222222222
OK  扫描完毕!
全收

[ 本帖最后由 FBAV 于 2007-8-25 20:45 编辑 ]
The EQs
发表于 2007-8-25 21:20:29 | 显示全部楼层
Scan performed at: 2007-8-25 21:20:01
Scanning Log
NOD32 version 2484 (20070825) NT
Command line: C:\Documents and Settings\Don johnson\桌面\virus.rar
Operating memory - is OK

Date: 25.8.2007  Time: 21:20:06
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\virus.rar
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?qq.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?nettool.exe - probably a variant of Win32/Small.NAV worm
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?14.exe - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?15.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?16.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?8.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?20.exe - Win32/Agent.NEM trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?3.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?4.exe - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?5.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?6.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?7.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?1.exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?12.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?10.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?11.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?13.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
Number of scanned files: 19
Number of threats found: 18
Number of files cleaned: 1
Time of completion: 21:20:12 Total scanning time: 6 sec (00:00:06)

Notes:
[7] File is probably infected with an unknown virus.
碧水寒潭
发表于 2007-8-25 21:22:41 | 显示全部楼层
Start of the scan: 2007年8月25日  21:22

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\virus.rar
  [0] Archive type: RAR
  --> qq.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> nettool.exe
      [DETECTION] Contains signature of the exploits EXP/IMG.WMF
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 20.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.101
  --> 5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Agent.11508
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.109
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.16426
  --> 13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年8月25日  21:22
Used time: 00:16 min

The scan has been done completely.

      1 Scanning directories
     19 Files were scanned
     18 viruses and/or unwanted programs were found
      4 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found
欠妳緈諨
发表于 2007-8-25 21:23:08 | 显示全部楼层
AVAST删除17个

[ 本帖最后由 欠你幸福 于 2007-8-25 21:25 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
soul20010
发表于 2007-8-25 21:46:02 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 10.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 12.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 1.exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 7.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 6.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 5.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 4.exe - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 3.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 20.exe - Win32/Agent.NEM trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 8.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 2.exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 16.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 15.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 14.exe - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » nettool.exe - probably a variant of Win32/Small.NAV worm
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » qq.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 13.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\virus.rar » RAR » 11.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
运指如飞
发表于 2007-8-25 21:49:10 | 显示全部楼层
Start of the scan: 2007年8月25日  21:48

Starting the file scan:

Begin scan in 'F:\TDdownload\virus.rar'
F:\TDdownload\virus.rar
  [0] Archive type: RAR
  --> qq.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> nettool.exe
      [DETECTION] Contains signature of the exploits EXP/IMG.WMF
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 20.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.101
  --> 5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Agent.11508
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.109
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.16426
  --> 13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '474233a9.qua'!


End of the scan: 2007年8月25日  21:48
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
uhthn2002
发表于 2007-8-26 00:55:48 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\virus\nettool.exe : infected Trojan.Rox
C:\Documents and Settings\uhthn\Desktop\virus\14.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\15.exe : infected MalwareScope.Trojan-PSW.Game.17
C:\Documents and Settings\uhthn\Desktop\virus\16.exe : infected MalwareScope.Trojan-PSW.Game.17
C:\Documents and Settings\uhthn\Desktop\virus\2.exe : is suspected of Malware.Agent.108 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\virus\20.exe : infected Trojan.Arpspoof
C:\Documents and Settings\uhthn\Desktop\virus\3.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\4.exe : infected Trojan-Spy.Win32.Delf.uv
C:\Documents and Settings\uhthn\Desktop\virus\1.exe : infected MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\uhthn\Desktop\virus\10.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\11.exe : infected Trojan-PSW.Win32.OnLineGames.uo


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 18   
- scanned         : 0       -  scanned    : 0       - scanned     : 18   
- contain viruses : 0       -  infected   : 0       - infected    : 10   
- deleted         : 0       -  suspicious : 0       - suspicious  : 1
微点卫士
发表于 2007-8-26 10:16:46 | 显示全部楼层
微点:
木马名称:Trojan.Win32.Genetik.bnx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\QQ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Small.zx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\NETTOOL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.dew

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\20.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ipt

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Delf.gyh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dgy

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jaw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\10.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.hvs

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.iyg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\2.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
4) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
4) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\3.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\UPXDND.EXE
2) C:\WINDOWS.0\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\5.EXE
1) C:\DFD1696468.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\5.EXE
1) C:\DFD1696468.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\6.EXE
1) C:\DFD1710859.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\6.EXE
1) C:\DFD1710859.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\7.EXE
1) C:\DFD1722765.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\7.EXE
1) C:\DFD1722765.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\8.EXE
1) C:\DFD1734562.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\8.EXE
1) C:\DFD1734562.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\13.EXE
1) C:\DFD1747156.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\13.EXE
1) C:\DFD1747156.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\14.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
木马名称:Trojan-PSW.Win32.OnLineGames.izz

程序:
C:\WINDOWS.0\VIDEO.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.izz

程序:
C:\WINDOWS.0\VIDEO.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\15.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WMSJ.EXE
2) C:\WINDOWS.0\VIDEO.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\16.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINWM.EXE
2) C:\WINDOWS.0\KULIONWM.DLL
是否删除木马程序及其衍生物?


全杀咯
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-15 12:32 , Processed in 0.137803 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表