更新第二波vip产物16个

woai_jolin

Started scanning at 2007-8-28 9:08:54. Engine Ver: 31.1.0. Sig Ver:5088. Sig Date: 2007-8-27. ArcLib Ver: 7.3.0.9.
F:\v\样本.rar <cs.exe> - Win32/Storark!generic trojan. Quarantined.
F:\v\样本.rar <dh.exe> - Win32/Storark!generic trojan. Quarantined.
F:\v\样本.rar <fy.exe> - Win32/Posertm.A trojan. Quarantined.
F:\v\样本.rar <jh.exe> - Win32/Storark!generic trojan. Quarantined.
F:\v\样本.rar <mh.exe> - Win32/Storark!generic trojan. Quarantined.
F:\v\样本.rar <mir.exe> - Win32/Frethog!generic trojan. Quarantined.
F:\v\样本.rar <qqhx.exe> - Win32/Frethog!generic trojan. Quarantined.
F:\v\样本.rar <qst.exe> - Win32/QQPass!generic trojan. Quarantined.
F:\v\样本.rar <wd.exe> - Win32/Frethog!generic trojan. Quarantined.
F:\v\样本.rar <wow.exe> - Win32/Junkoil!generic trojan. Quarantined.
F:\v\样本.rar <zt.exe> - Win32/Frethog!generic trojan. Quarantined.
F:\v\样本.rar <zx.exe> - Win32/Frethog!generic trojan. Quarantined.
F:\v\样本.rar - Could not open the file.

Files Scanned: 17
Files Infected: 12
Files Cleaned \ Deleted: 0
Files Quarantined: 1
Memory Infections: 0
Memory Infections Cleaned: 0
Boot Infections: 0
Boot Infections Cleaned: 0

Top infections found during scan (Limited to 10).
        Win32/Frethog!generic
        Win32/Storark!generic
        Win32/Junkoil!generic
        Win32/Posertm.A
        Win32/QQPass!generic

Files not Cleaned\Deleted\Quarantined (Limit 100): 0

Finished scanning at 2007-8-28 9:08:56.

微点卫士

微点：
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MIR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\QQHX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.iyx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\ZT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.iyv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\ZX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\CS.EXE
1) C:\DFD1434062.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\CS.EXE
1) C:\DFD1434062.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DH.EXE
1) C:\DFD1447156.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DH.EXE
1) C:\DFD1447156.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\JH.EXE
1) C:\DFD1492453.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\JH.EXE
1) C:\DFD1492453.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MH.EXE
1) C:\DFD1507265.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MH.EXE
1) C:\DFD1507265.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MY.EXE
1) C:\DFD1521250.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MY.EXE
1) C:\DFD1521250.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\QJ.EXE
1) C:\DFD1533734.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\QJ.EXE
1) C:\DFD1533734.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\QST.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE

是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\TL.EXE
1) C:\DFD1560703.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\TL.EXE
1) C:\DFD1560703.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\WD.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVWDMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVWDMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\WL.EXE
1) C:\DFD1582031.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\WL.EXE
1) C:\DFD1582031.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\WOW.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINOW.EXE
2) C:\WINDOWS.0\WINOW.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\FY.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\PACKET.DLL
2) C:\WINDOWS.0\SYSTEM32\WANPACKET.DLL
3) C:\WINDOWS.0\SYSTEM32\WPCAP.DLL
4) C:\WINDOWS.0\SYSTEM32\DRIVERS\SVCHOST.EXE
是否删除木马程序及其衍生物?

全杀

soul20010

C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; zx.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; zt.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; wow.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; wl.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; wd.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; tl.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; qst.exe - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; qqhx.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; qj.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; my.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; mir.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; mh.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; jh.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; fy.exe - Win32/Delf.NFD trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; dh.exe - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Administrator\桌面\样本.rar &raquo; RAR &raquo; cs.exe - probably a variant of Win32/Genetik trojan

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\dh.exe : infected Trojan-PSW.Win32.Lmir.bjy
C:\Documents and Settings\uhthn\Desktop\virus\fy.exe : infected Backdoor.Win32.Delf.awy
C:\Documents and Settings\uhthn\Desktop\virus\qst.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\wow.exe : infected MalwareScope.Trojan-PSW.Game.17
C:\Documents and Settings\uhthn\Desktop\virus\zt.exe : infected Trojan-PSW.Win32.OnLineGames.akg


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 16   
- scanned         : 0       -  scanned    : 0       - scanned     : 16   
- contain viruses : 0       -  infected   : 0       - infected    : 5     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0     


Uhthn Anti-Spyware V3 Alpha

C:\Documents and Settings\uhthn\Desktop\virus\cs.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\dh.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\fy.exe - Suspicious of Trojan-Downloader.Win32.Small.2
C:\Documents and Settings\uhthn\Desktop\virus\jh.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\mh.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\mir.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\my.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\qj.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\qqhx.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\qst.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\virus\tl.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\wd.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\wl.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\wow.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\zt.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\zx.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2

16 - scanned
0 - infected
16 - suspicious
0 - cured
0 - deleted

欠妳緈諨