查看: 2510|回复: 10
收起左侧

[病毒样本] 17个

[复制链接]
promised
发表于 2007-8-30 21:24:02 | 显示全部楼层 |阅读模式
[MD5: 8A9B7F E2FA3B 76D55D 2241D1 43DB27 71DEE0 342352 B6027F 28D9E7 3F6A6C 82CD60 CAF1B9 3F2E6C A6D65B B84192 93F9DE 168BE0]

C:\ABC\70.exe - 特征码 'Virus.Win32.Agent.KCP' 被发现
C:\ABC\cs.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\dh.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\fy.exe - 特征码 'Backdoor.Win32.Delf.awy' 被发现
C:\ABC\jh.exe - 可疑代码段 被发现 (Level: 180)
C:\ABC\mh.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\mir.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\my.exe - 特征码 'Trojan-Spy.Win32.Bancos.ha' 被发现
C:\ABC\qj.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\qqhx.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\qst.exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\tl.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\wd.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\wl.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\wow.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\zt.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\zx.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
17 文件被扫描
   (0 压缩档 0 文件)
16 特征码被侦测
1 可疑代码段被发现
耗时: 0:00.281

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
残缺的唯美
发表于 2007-8-30 21:24:57 | 显示全部楼层
扫描进行于:2007-8-30 21:24:32
扫描日志
NOD32版本 2492 (20070830) NT
命令行: D:\Documents and Settings\EKINCHENG\桌面\??2.rar

日期: 30.8.2007  时间:21:24:34
已开启反隐藏功能.
已扫描的磁盘,文件夹及文件:D:\Documents and Settings\EKINCHENG\桌面\??2.rar
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>qqhx.exe - Win32/PSW.OnLineGames.NEP 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>tl.exe - Win32/PSW.OnLineGames.NEN 木马 - 是已删除对象的一部分
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>wl.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>cs.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>fy.exe - Win32/Delf.NFD 木马 - 是已删除对象的一部分
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>mir.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>zt.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>70.exe - 可能是 Win32/Agent.NEO 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>jh.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>qj.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>qst.exe - Win32/AutoRun.Q 蠕虫的变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>wow.exe - 未查明的 NewHeur_PE 病毒 [7]
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>zx.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>dh.exe - Win32/PSW.OnLineGames.NEN 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>mh.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>my.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??2.rar >>RAR >>wd.exe - Win32/PSW.OnLineGames.NEP 木马的变种
已扫描的文件数目:18
已发现的病毒数目:17
已清除病毒的文件数目:1
完成时间: 21:24:38 总扫描时间:4 秒 (00:00:04)

注意:
[7] 该文件可能感染上未知病毒。
uhthn2002
发表于 2007-8-30 21:26:37 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\virus\tl.exe : infected Trojan-PSW.Win32.Lmir.amj
C:\Documents and Settings\uhthn\Desktop\virus\fy.exe : infected Backdoor.Win32.Delf.awy
C:\Documents and Settings\uhthn\Desktop\virus\70.exe : infected Backdoor.Win32.Agent.asf
C:\Documents and Settings\uhthn\Desktop\virus\jh.exe : is suspected of Backdoor.Hupigon.5 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\virus\qst.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\wow.exe : infected MalwareScope.Trojan-PSW.Game.17


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 17   
- scanned         : 0       -  scanned    : 0       - scanned     : 17   
- contain viruses : 0       -  infected   : 0       - infected    : 5     
- deleted         : 0       -  suspicious : 0       - suspicious  : 1     


Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\qqhx.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\tl.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\wl.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\cs.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\fy.exe - Suspicious of Win32.Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\virus\mir.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\zt.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\70.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\virus\jh.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\virus\qj.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\qst.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\wow.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\zx.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\dh.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\mh.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\my.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\wd.exe - Suspicious of Trojan-PSW.OnLineGames.2

17 Files scanned
0 Infected files found
17 Suspicious files found
0 Files cured
0 Files deleted
tiedan2
发表于 2007-8-30 21:28:08 | 显示全部楼层
Ikarus:
30:08:2007 21:27:32 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\样本2
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\70.exe - SIGNATURE FOUND "Virus.Win32.Agent.KCP"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\cs.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\dh.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\fy.exe - SIGNATURE FOUND "Backdoor.Win32.Delf.awy"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\mh.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\mir.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\my.exe - SIGNATURE FOUND "Trojan-Spy.Win32.Bancos.ha"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\qj.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\qqhx.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\qst.exe - SIGNATURE FOUND "Trojan-Proxy.Win32.Delf.AN"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\tl.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\wd.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\wl.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\wow.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\zt.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本2\zx.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
30:08:2007 21:27:33 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 17
Virus found: 16
----------------------------------------------------
promised
 楼主| 发表于 2007-8-30 21:28:29 | 显示全部楼层

回复 #4 tiedan2 的帖子

套装没启发
C:\ABC\jh.exe - 可疑代码段 被发现 (Level: 180)
tracydk
发表于 2007-8-30 21:32:34 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\病毒样本\样本2.rar'
F:\病毒样本\样本2.rar
  [0] Archive type: RAR
  --> qqhx.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tl.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.amj.106
  --> wl.exe
      [DETECTION] Is the Trojan horse TR/Agent.12366
  --> cs.exe
      [DETECTION] Is the Trojan horse TR/Agent.11791
  --> fy.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> mir.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> zt.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.bla
  --> 70.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> jh.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> qj.exe
      [DETECTION] Is the Trojan horse TR/Agent.12087
  --> qst.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.47215
  --> wow.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> zx.exe
      [DETECTION] Is the Trojan horse TR/Agent.12334
  --> dh.exe
      [DETECTION] Is the Trojan horse TR/Agent.11399
  --> mh.exe
      [DETECTION] Is the Trojan horse TR/Agent.17971.1
  --> my.exe
      [DETECTION] Is the Trojan horse TR/Agent.12917
  --> wd.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
微点卫士
发表于 2007-8-30 21:40:43 | 显示全部楼层
微点:
木马名称:Trojan-PSW.Win32.OnLineGames.jej

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQHX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.dwx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\70.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.WOW.axg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WOW.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jef

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WD.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CS.EXE
1) C:\DFD2500859.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CS.EXE
1) C:\DFD2500859.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MIR.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVGJMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVGJMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TL.EXE
1) C:\DFD2542468.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TL.EXE
1) C:\DFD2542468.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WL.EXE
1) C:\DFD2554796.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WL.EXE
1) C:\DFD2554796.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ZT.EXE
1) C:\DFD2566468.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ZT.EXE
1) C:\DFD2566468.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QJ.EXE
1) C:\DFD2578484.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QJ.EXE
1) C:\DFD2578484.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QST.EXE

E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE

是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DH.EXE
1) C:\DFD2605968.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DH.EXE
1) C:\DFD2605968.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MH.EXE
1) C:\DFD2618656.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MH.EXE
1) C:\DFD2618656.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MY.EXE
1) C:\DFD2629296.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MY.EXE
1) C:\DFD2629296.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\JH.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\JHHJ.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ZX.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\ZXIPRI.DLL
2) C:\WINDOWS.0\SYSTEM32\ZXIINS.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FY.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\PACKET.DLL
2) C:\WINDOWS.0\SYSTEM32\WANPACKET.DLL
3) C:\WINDOWS.0\SYSTEM32\WPCAP.DLL
4) C:\WINDOWS.0\SYSTEM32\DRIVERS\SVCHOST.EXE
是否删除木马程序及其衍生物?


全杀咯
ssy275
发表于 2007-8-30 21:43:06 | 显示全部楼层
Result: 8 malware found
Trojan-PSW.Win32.OnLineGames.aqv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\qqhx.exe
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\wd.exe
Trojan-PSW.Win32.Lmir.amj (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\tl.exe
Backdoor.Win32.Delf.awy (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\fy.exe
Trojan-PSW.Win32.Lmir.bla (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\zt.exe
Backdoor.Win32.Agent.bba (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\70.exe
Virus.Win32.AutoRun.jh (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\qst.exe
Trojan-PSW.Win32.WOW.tb (virus)
C:\Documents and Settings\ssy\×ÀÃæ\2.rar\wow.exe
saga3721
发表于 2007-8-30 21:47:48 | 显示全部楼层
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12917 [TR/Agent.12917]'
      detected in file 'C:\Documents and Settings\X\桌面\my.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Dropper.Gen [TR/Dropper.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\wd.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12334 [TR/Agent.12334]'
      detected in file 'C:\Documents and Settings\X\桌面\zx.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.17971.1 [TR/Agent.17971.1]'
      detected in file 'C:\Documents and Settings\X\桌面\mh.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12334 [TR/Agent.12334]'
      detected in file 'C:\Documents and Settings\X\桌面\zx.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11399 [TR/Agent.11399]'
      detected in file 'C:\Documents and Settings\X\桌面\dh.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\wow.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Steal.47215 [TR/PSW.Steal.47215]'
      detected in file 'C:\Documents and Settings\X\桌面\qst.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12087 [TR/Agent.12087]'
      detected in file 'C:\Documents and Settings\X\桌面\qj.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Crypt.NSPM.Gen [TR/Crypt.NSPM.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\70.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Lmir.bla [TR/PSW.Lmir.bla]'
      detected in file 'C:\Documents and Settings\X\桌面\zt.exe.
      Action performed: Deny access
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'HEUR/Malware [HEUR/Malware]'
      detected in file 'C:\Documents and Settings\X\桌面\jh.exe.
      Action performed: Move file to quarantine
2007-8-30 21:37 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Spy.Pca.A.1 [TR/Drop.Spy.Pca.A.1]'
      detected in file 'C:\Documents and Settings\X\桌面\fy.exe.
      Action performed: Deny access
2007-8-30 21:36 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11791 [TR/Agent.11791]'
      detected in file 'C:\Documents and Settings\X\桌面\cs.exe.
      Action performed: Deny access
2007-8-30 21:36 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12366 [TR/Agent.12366]'
      detected in file 'C:\Documents and Settings\X\桌面\wl.exe.
      Action performed: Deny access
2007-8-30 21:36 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Lmir.amj.106 [TR/PSW.Lmir.amj.106]'
      detected in file 'C:\Documents and Settings\X\桌面\tl.exe.
      Action performed: Deny access


木马名称:Backdoor.Win32.Delf.bgt
程序:
C:\DOCUMENTS AND SETTINGS\X\桌面\FY.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

[ 本帖最后由 saga3721 于 2007-8-30 22:06 编辑 ]
欠妳緈諨
发表于 2007-8-30 22:21:54 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-28 20:38 , Processed in 0.130943 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表