18ge

显示全部楼层 · 发表于 2007-9-7 19:52:29

[MD5: 0490DC 5C3964 859F6E 7470DD 664EC8 CEB6F4 E15F64 CB362F B43701 A4DC5C 7C04E0 D044BB 41AC31 B68DB3 C69ADB B4638D C465E8 4223A7]

显示全部楼层 · 发表于 2007-9-7 19:53:23

显示全部楼层 · 发表于 2007-9-7 19:56:24

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\18\avwlamn.dll]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\avwsbmn.dll]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\kvdxbma.dll]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\PegeFile.pif]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\PegeFile.pif]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\18\ratbbpi.dll]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravcqmon.dat]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravcqmon.dat]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravcqmon.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravcqmon.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\18\ravcqmon.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.dat]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.dat]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.dat]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmsmon.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmymon.dat]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmymon.dat]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravmymon.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravzxmon.dat]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravzxmon.dat]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\ravzxmon.exe]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\ravzxmon.exe]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\18\ravzxmon.exe]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\18\rsztapm.dll]
                  …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\18\video.dll]
                  …………引擎[2]发现病毒:Win32.NkHack.超级马丽
文件数:18 病毒数:18 比重:1
OK  扫描完毕！

显示全部楼层 · 发表于 2007-9-7 19:58:09

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> avwlamn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> avwsbmn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> kulionqj.dll
   [DETECTION] Is the Trojan horse TR/PSW.Steal.28672.8
  --> kvdxbma.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> mh0618.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> PegeFile.pif
   [DETECTION] Contains detection pattern of the HEUR-DBLEXT/Crypted virus
  --> qj0617.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> ratbbpi.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> ravcqmon.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> ravmsmon.dat
   [DETECTION] Contains suspicious code HEUR/Malware
  --> ravmsmon.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> ravmymon.dat
   [DETECTION] Is the Trojan horse TR/Agent.bfk.1
  --> ravmymon.exe
   [DETECTION] Is the Trojan horse TR/Agent.bfk.1
  --> ravzxmon.dat
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bpd
  --> ravzxmon.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bpd
  --> rsztapm.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> video.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '470fa400.qua'!

End of the scan: 2007年9月7日  19:58
Used time: 00:12 min

The scan has been done completely.

   0 Scanning directories
   19 Files were scanned
   7 viruses and/or unwanted programs were found
   10 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   12 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-7 20:04:03

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.OnlineGames.ygl
病毒： Trojan.PSW.Win32.OnlineGames.yhj
病毒： Trojan.PSW.Win32.Agent.vcd
病毒： Trojan.PSW.Win32.SunOnline.bu
病毒： Trojan.PSW.Win32.AskTao.bs
病毒： Trojan.PSW.Win32.RocOnline.cw
病毒： Trojan.PSW.Win32.ZhuXian.av
病毒： Trojan.Win32.OnlineGames.b
病毒： Trojan.Win32.OnlineGames.b
病毒： Trojan.PSW.Win32.OnlineGames.yfi
病毒： Trojan.PSW.Win32.OnlineGames.yiq

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.42

显示全部楼层 · 发表于 2007-9-7 20:04:19

18.。。。。。

Starting the file scan:
Begin scan in 'E:\病毒\样本'
E:\病毒\样本\avwlamn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\avwsbmn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\kulionqj.dll
   [DETECTION] Is the Trojan horse TR/PSW.Steal.28672.8
   [WARNING] The file was ignored!
E:\病毒\样本\kvdxbma.dll
   [DETECTION] Is the Trojan horse TR/Drop.Age.12441.B
   [WARNING] The file was ignored!
E:\病毒\样本\mh0618.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [WARNING] The file was ignored!
E:\病毒\样本\PegeFile.pif
   [DETECTION] Contains detection pattern of the worm WORM/QQPass.A
   [WARNING] The file was ignored!
E:\病毒\样本\qj0617.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [WARNING] The file was ignored!
E:\病毒\样本\ratbbpi.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\ravcqmon.dat
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\ravcqmon.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\ravmsmon.dat
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\ravmsmon.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!
E:\病毒\样本\ravmymon.dat
   [DETECTION] Is the Trojan horse TR/Agent.bfk.1
   [WARNING] The file was ignored!
E:\病毒\样本\ravmymon.exe
   [DETECTION] Is the Trojan horse TR/Agent.bfk.1
   [WARNING] The file was ignored!
E:\病毒\样本\ravzxmon.dat
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bpd
   [WARNING] The file was ignored!
E:\病毒\样本\ravzxmon.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bpd
   [WARNING] The file was ignored!
E:\病毒\样本\rsztapm.dll
   [DETECTION] Is the Trojan horse TR/Spy.Delf.acg.2
   [WARNING] The file was ignored!
E:\病毒\样本\video.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.box
   [WARNING] The file was ignored!

End of the scan: 2007年9月7日  20:03
Used time: 00:08 min
The scan has been done completely.
   1 Scanning directories
   18 Files were scanned
   11 viruses and/or unwanted programs were found
   7 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   0 Archives were scanned
    18 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-7 20:05:10

数数又不会了

不是说不会出现负数了吗

显示全部楼层 · 发表于 2007-9-7 20:05:25

曲版主用的是什么杀软

显示全部楼层 · 发表于 2007-9-7 20:07:52

俺最近老打瞌睡。。还没有明白仁兄之意。。。。

18？呵呵

显示全部楼层 · 发表于 2007-9-7 20:08:23

红伞。。。。。。

[病毒样本] 18ge

本帖子中包含更多资源

本帖子中包含更多资源

29/11

回复 6楼曲中求的帖子

回复 7楼 promised 的帖子

回复 8楼平淡的帖子

浏览过的版块

[病毒样本] 18ge

本帖子中包含更多资源

本帖子中包含更多资源

29/11

回复 6楼 曲中求 的帖子

回复 7楼 promised 的帖子

回复 8楼 平淡 的帖子

浏览过的版块

回复 6楼曲中求的帖子

回复 8楼平淡的帖子