25个，杀去吧！

显示全部楼层 · 发表于 2007-9-2 23:06:50

显示全部楼层 · 发表于 2007-9-2 23:09:54

少了10个

显示全部楼层 · 发表于 2007-9-2 23:11:38

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2498
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\AVPSrv.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\AVPSrv.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\DbgHlp32.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\DbgHlp32.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\DiskMan32.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\DiskMan32.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\kulionrx.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\kulionrx.dll - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder\LYLOADER.EXE - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\LYMANGR.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\MSDEG32.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\MsIMMs32.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\MsIMMs32.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\NVDispDrv.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\NVDispDrv.dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\systemm.exe - Infected with PDB-705 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\upxdnd.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\upxdnd.dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\WanPacket.dll - Infected with PDB-1067 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\winow.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\winow.dll - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\wlgini.dll - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\wlhins.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\zxiini.dll - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder\zxiins.exe - Suspicious of Trojan-Spy.Delf.2

25 Files scanned
2 Infected files found
22 Suspicious files found
0 Files cured
2 Files deleted

显示全部楼层 · 发表于 2007-9-2 23:14:55

同楼上的！只有15个！

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.aon 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/AVPSrv.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bjb 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/DbgHlp32.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bjb 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/DbgHlp32.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgk 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/DiskMan32.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bfj 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/LYLOADER.EXE//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgl 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/LYMANGR.DLL
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bfj 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/MSDEG32.DLL//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ben 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/MsIMMs32.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ben 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/MsIMMs32.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgj 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/NVDispDrv.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgj 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/NVDispDrv.dll
已删除: 木马程序 Backdoor.Win32.Agent.alh 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/systemm.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgu 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/upxdnd.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bdw 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/upxdnd.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ate 文件: C:\Documents and Settings\所有者.IAM5CEOW248RH09\桌面\25virus0902.rar/zxiins.exe//UPack

显示全部楼层 · 发表于 2007-9-2 23:19:11

扫描开始时间: 2007-9-2 23:19:12
扫描日志
NOD32 版本 2497 (20070901) NT
命令行: F:\virus\25virus0902.rar

日期: 2007年9月2日时间: 23:19:13
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\25virus0902.rar
F:\virus\25virus0902.rar ?RAR ?AVPSrv.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?DbgHlp32.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?DiskMan32.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?DiskMan32.dll<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\25virus0902.rar ?RAR ?kulionrx.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\virus\25virus0902.rar ?RAR ?LYLOADER.EXE<病毒 - Win32/PSW.Agent.NEC 木马变种>
F:\virus\25virus0902.rar ?RAR ?MsIMMs32.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?NVDispDrv.exe<病毒 - Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?systemm.exe<病毒 - Win32/Agent.NEM 木马>
F:\virus\25virus0902.rar ?RAR ?upxdnd.exe<病毒 - 可能是 Win32/PSW.OnLineGames.YA 木马变种>
F:\virus\25virus0902.rar ?RAR ?upxdnd.dll<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\25virus0902.rar ?RAR ?winow.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\virus\25virus0902.rar ?RAR ?wlhins.exe<病毒 - 可能是 Win32/Genetik 木马变种>
F:\virus\25virus0902.rar ?RAR ?zxiins.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEN 木马变种>
已扫描文件数量: 25
已发现病毒数量: 14
完成时间: 23:19:16 总共扫描时间: 3 秒 (00:00:03)

注意:
[7] 文件可能感染了未知病毒。

显示全部楼层 · 发表于 2007-9-2 23:28:20

病毒： Trojan.PSW.Win32.RBLand.al
病毒： Trojan.PSW.Win32.OnlineGames.yca
病毒： Trojan.PSW.Win32.OnlineGames.ycv
病毒： Trojan.PSW.Win32.RocOnline.cv
病毒： Trojan.PSW.Win32.RocOnline.cv
病毒： Trojan.PSW.Win32.JHOnline.fas
病毒： Trojan.PSW.Win32.OnlineGames.xzp
病毒： Trojan.PSW.Win32.XYOnline.go
病毒： Trojan.PSW.Win32.XYOnline.go
病毒： Trojan.PSW.Win32.XYOnline.go
病毒： Trojan.PSW.Win32.OnlineGames.ycs
病毒： Trojan.PSW.Win32.OnlineGames.ycs
病毒： Trojan.PSW.Win32.OnlineGames.ydi
病毒： Trojan.PSW.Win32.OnlineGames.ydi
病毒： Trojan.MnLess.kks
病毒： Trojan.PSW.Win32.OnlineGames.ybx
病毒： Trojan.PSW.Win32.OnlineGames.ybx
病毒： Trojan.PSW.Win32.WoWar.vf
病毒： Trojan.PSW.Win32.WoWar.vc
病毒： Trojan.PSW.Win32.OnlineGames.yda
病毒： Trojan.PSW.Win32.XYOnline.gh

21个

显示全部楼层 · 发表于 2007-9-2 23:31:36

Begin scan in 'C:\Documents and Settings\dell\桌面\25virus0902.rar'
C:\Documents and Settings\dell\桌面\25virus0902.rar
  [0] Archive type: RAR
  --> AVPSrv.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> AVPSrv.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> DbgHlp32.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> DbgHlp32.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> DiskMan32.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> DiskMan32.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> kulionrx.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.24548
  --> kulionrx.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> LYLOADER.EXE
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> LYMANGR.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> MSDEG32.DLL
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MsIMMs32.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> MsIMMs32.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> NVDispDrv.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> NVDispDrv.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> systemm.exe
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.7 Backdoor server programs
  --> upxdnd.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> upxdnd.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> winow.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> winow.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> wlhins.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> zxiins.exe
   [DETECTION] Is the Trojan horse TR/Agent.12188
   [WARNING] The file was ignored!

End of the scan: 2007年9月2日  23:30
Used time: 00:16 min

The scan has been done completely.

   0 Scanning directories
   27 Files were scanned
   22 viruses and/or unwanted programs were found
   9 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -4 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-9-2 23:33:02

红伞高启发22个，卡巴7高启发18个

WanPacket.dll
wlgini.dll
zxiini.dll
剩上面三个都不理

[ 本帖最后由微笑的前奏于 2007-9-2 23:46 编辑 ]

显示全部楼层 · 发表于 2007-9-2 23:36:30

显示全部楼层 · 发表于 2007-9-3 07:49:21

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.izf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\AVPSRV.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jri

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\DBGHLP32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jqd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\DISKMAN32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.epb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\LYLOADER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jrg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\MSIMMS32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jrj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\NVDISPDRV.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Agent.dlk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\SYSTEMM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\UPXDND.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\UPXDND.EXE
2) C:\WINDOWS.0\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\WINOW.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINOW.EXE
2) C:\WINDOWS.0\WINOW.DLL
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\WINOW.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\WLHINS.EXE
1) C:\DFD514203.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\UPXDND.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\WLHINS.EXE
1) C:\DFD514203.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\ZXIINS.EXE
1) C:\DFD534093.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\25VIRUS0902\ZXIINS.EXE
1) C:\DFD534093.BAT
是否删除可疑程序?

能运行的都杀

[病毒样本] 25个，杀去吧！

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源