再来11个

zane_xzz

[MD5: 5933A6 966886 23AE66 D3825B C7C1EF 5E3828 CD963F 342DB5 9C5C10 81C59B 42581E]

promised

C:\ABC\桌面\11.exe - 特征码 'Generic.PWS.WoW' 被发现
C:\ABC\桌面\12.exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\桌面\13.exe - 特征码 'Trojan-Downloader.Win32.Small.czl' 被发现
C:\ABC\桌面\14.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.afd' 被发现
C:\ABC\桌面\15.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\桌面\16.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\桌面\17.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\桌面\18.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\桌面\19.exe - 特征码 'MalwareScope.Backdoor.Hupigon.1' 被发现
C:\ABC\桌面\20.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\桌面\21.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现

        11 文件被扫描
          (0 压缩档 0 文件)
        11 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.265

1688388728

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.bke        URL: http://bbs.kafan.cn/attachment.php?aid=122980//17.exe//UPack

欠妳緈諨

才4个

jhtl

avk2006 11个
大蜘蛛3个

[ 本帖最后由 jhtl 于 2007-9-3 21:36 编辑 ]

微点卫士

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.jte

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Delf.bog

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jap

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bwg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\15.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.khp

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bzq

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\16.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\11.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\DJQWHLRW.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\12.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\18.EXE
1) C:\DFD7661406.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\18.EXE
1) C:\DFD7661406.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\20.EXE
1) C:\DFD7673656.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\20.EXE
1) C:\DFD7673656.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\21.EXE
1) C:\DFD7693968.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌面\21.EXE
1) C:\DFD7693968.BAT
是否删除可疑程序?

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\桌面.rar'
C:\Documents and Settings\dell\桌面\桌面.rar
  [0] Archive type: RAR
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bke
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.12580
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 20.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.12366
  --> 21.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Agent.12444
  --> 12.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!


End of the scan: 2007年9月3日  21:29
Used time: 00:17 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
     11 viruses and/or unwanted programs were found

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.bke        File: E:\Ñù±¾\bingdu\17.exe//UPack
detected: Trojan program Backdoor.Win32.Delf.awy        File: E:\Ñù±¾\bingdu\19.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.adn        File: E:\Ñù±¾\bingdu\14.exe//ASPack
detected: Trojan program Trojan-Spy.Win32.Delf.abi        File: E:\Ñù±¾\bingdu\15.exe
detected: Trojan program Trojan-Downloader.Win32.Small.czl        File: E:\Ñù±¾\bingdu\13.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bka        File: E:\Ñù±¾\bingdu\11.exe//FSG
detected: Trojan program Trojan-Spy.Win32.Delf.aao        File: E:\Ñù±¾\bingdu\16.exe//UPack//#
detected: Trojan program Backdoor.Win32.WinterLove.bi        File: E:\Ñù±¾\bingdu\12.exe//UPX

微点卫士

原帖由 jhtl 于 2007-9-3 21:29 发表
avk2006 7个
大蜘蛛3个

我更郁闷，驱逐舰只有2个
费尔扫描只4个

The EQs

Scan performed at: 2007-9-3 22:04:41
Scanning Log
NOD32 version 2499 (20070903) NT
Command line: C:\Documents and Settings\Don johnson\桌面\235.rar
Operating memory - is OK

Date: 3.9.2007  Time: 22:04:44
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\235.rar
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?17.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?18.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?19.exe - Win32/Delf.NFD trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?20.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?14.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?15.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?21.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?13.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?16.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\235.rar ?RAR ?12.exe - a variant of Win32/AutoRun.Q worm
Number of scanned files: 12
Number of threats found: 10
Number of files cleaned: 1
Time of completion: 22:04:47 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.