再来几个样本

gzg

扫扫看

The EQs

Scan performed at: 2007-9-1 22:00:25
Scanning Log
NOD32 version 2495 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\0901
Operating memory - is OK

Date: 1.9.2007  Time: 22:00:29
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\0901\
C:\Documents and Settings\Don johnson\桌面\0901\DrvInstall.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\0901\gywendao_cns_yassist.exe ?NSIS ?cnsmin.dll - probably a variant of Win32/Genetik trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\0901\k11255766992.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\0901\k11255767046.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\0901\k11255767067.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\0901\k11255767078.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\0901\k11255767089.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\0901\k112557670910.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 17
Number of threats found: 8
Number of files cleaned: 8
Time of completion: 22:01:11 Total scanning time: 42 sec (00:00:42)

Notes:
[7] File is probably infected with an unknown virus.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 1445
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\k112557670910.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\s.exe - Infected with Malware.1072
C:\Documents and Settings\uhthn\Desktop\New Folder\DrvInstall.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\gywendao_cns_yassist.exe - Infected with Malware.75
C:\Documents and Settings\uhthn\Desktop\New Folder\k11255766992.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11255767046.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11255767067.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11255767078.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\k11255767089.exe - Suspicious of Trojan-PSW.Game.1

9 Files scanned
2 Infected files found
7 Suspicious files found
0 Files cured
2 Files deleted

wangjay1980

detected: virus Heur.Invader (modification) File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k112557670910.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bjn File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255767078.exe//PE_Patch.UPX//#
deleted: Trojan program Backdoor.Win32.Hupigon.jki File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\s.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bjx File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255766992.exe
deleted: virus Heur.Invader (modification) File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255767046.exe//PE_Patch.UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bjv File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255767046.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bgj File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255767067.exe//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bjb File: E:\Ñù±¾\н¨Îļþ¼Ð (2)\k11255767089.exe//PE_Patch.UPX//UPX

[ 本帖最后由 wangjay1980 于 2007-9-1 22:18 编辑 ]