14GE

显示全部楼层 · 发表于 2007-9-5 20:19:02

[MD5: 2B7761 C49279 2CB4F7 4F483A A3E449 565466 3B22D7 262EE6 105A3F 26E7D7 06FA9C 969AE4 CE2EA5 137D00]

显示全部楼层 · 发表于 2007-9-5 20:20:26

--> vir (3).Jmp
   [DETECTION] Is the Trojan horse TR/PSW.Steal.43634
  --> vir (4).exe
   [DETECTION] Is the Trojan horse TR/SPY.Delf.AB
  --> vir (5).exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> vir (6).exe
   [DETECTION] Is the Trojan horse TR/PSW.Mir.AD
  --> vir (7).Sys
   [DETECTION] Is the Trojan horse TR/PSW.Steal.43634
  --> vir (8).dat
   [DETECTION] Contains suspicious code HEUR/Malware
  --> vir (9).dat
   [DETECTION] Is the Trojan horse TR/PSW.Mir.AD
  --> vir (10).exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> vir (11).exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.YC
  --> vir (12).exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGa.NEN
  --> vir (13).exe
   [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.126
  --> vir (0).dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bjk
  --> vir (1).dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGa.NEM
  --> vir (2).exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
   [INFO]    A backup was created as '470e9f27.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-5 20:23:58

显示全部楼层 · 发表于 2007-9-5 20:25:57

微点解压就杀省2个。

显示全部楼层 · 发表于 2007-9-5 20:26:49

C:\ABC\0905\vir (0).dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\0905\vir (1).dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\0905\vir (10).exe - 特征码 'Trojan-Downloader.Agent.YJA' 被发现
C:\ABC\0905\vir (11).exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\0905\vir (12).exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\0905\vir (13).exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\0905\vir (2).exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\0905\vir (3).Jmp - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\0905\vir (4).exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\0905\vir (5).exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\0905\vir (6).exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\0905\vir (7).Sys - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\0905\vir (8).dat - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\0905\vir (9).dat - 特征码 'Trojan-PWS.Win32.Small.br' 被发现

显示全部楼层 · 发表于 2007-9-5 20:34:24

NOD32

显示全部楼层 · 发表于 2007-9-5 20:35:34

卡巴7.0.0.125
14个

已删除: 病毒 Virus.Win32.AutoRun.kf 文件: D:\0905.rar/vir (3).Jmp//UPX
已删除: 病毒 Virus.Win32.AutoRun.kf 文件: D:\0905.rar/vir (7).Sys
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bjk 文件: D:\0905.rar/vir (0).dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.blb 文件: D:\0905.rar/vir (2).exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bni 文件: D:\0905.rar/vir (5).exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bnj 文件: D:\0905.rar/vir (8).dat//UPack
已删除: 木马程序 Trojan-PSW.Win32.WOW.td 文件: D:\0905.rar/vir (6).exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.WOW.td 文件: D:\0905.rar/vir (9).dat
已删除: 木马程序 Trojan-Spy.Win32.Delf.acp 文件: D:\0905.rar/vir (10).exe//UPX
已删除: 木马程序 Trojan-Spy.Win32.Delf.yc 文件: D:\0905.rar/vir (11).exe//UPX
已删除: 木马程序 Trojan-Spy.Win32.Delf.yd 文件: D:\0905.rar/vir (13).exe//UPX
已删除: 木马程序 Trojan-Spy.Win32.Delf.yr 文件: D:\0905.rar/vir (1).dll
已删除: 木马程序 Trojan-Spy.Win32.Delf.yr 文件: D:\0905.rar/vir (4).exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.ys 文件: D:\0905.rar/vir (12).exe//#

显示全部楼层 · 发表于 2007-9-5 20:49:48

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.QQPass.tnk
病毒： Trojan.PSW.Win32.XYOnline.gh
病毒： Trojan.PSW.Win32.WoWar.vd
病毒： Trojan.PSW.QQPass.tnk
病毒： Trojan.PSW.Win32.WoWar.vd
病毒： Trojan.PSW.Win32.XYOnline.fu
病毒： Trojan.PSW.Win32.RocOnline.cx
病毒： Trojan.PSW.Win32.OnlineGames.xzx
病毒： Trojan.PSW.Win32.RocOnline.cx

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.22

显示全部楼层 · 发表于 2007-9-5 21:34:53

symantec7个

显示全部楼层 · 发表于 2007-9-5 21:56:06

Scan performed at: 2007-9-5 21:55:46
Scanning Log
NOD32 version 2507 (20070905) NT
Command line: C:\Documents and Settings\Don johnson\桌面\0905.rar
Operating memory - is OK

Date: 5.9.2007 Time: 21:55:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\0905.rar
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (3).Jmp - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (4).exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (5).exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (6).exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (7).Sys - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (8).dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (9).dat - Win32/PSW.OnLineGames.NCU trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (10).exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (11).exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (12).exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (13).exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (0).dll - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (1).dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\0905.rar ?RAR ?vir (2).exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 15
Number of threats found: 14
Number of files cleaned: 1
Time of completion: 21:55:51 Total scanning time: 1 sec (00:00:01)

[病毒样本] 14GE

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

26/11