在疑难解答区挖来的

solcroft

原帖由 微点卫士 于 2007-9-8 14:48 发表
SYSTEM32.exe微点无视 ，楼上的签名

残缺的唯美

Scan performed at: 2007-9-8 13:35:07
Scanning Log
NOD32 version 2514 (20070908) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\样本1.rar

Date: 8.9.2007  Time: 13:35:08
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\样本1.rar
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?1.exe - a variant of Win32/PSW.Agent.NEC trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?10.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?11.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?13.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?12.exe - probably unknown NewHeur_PE virus [7]
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?16.exe - Win32/Agent.NEM trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?18.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?17.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?15.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?14.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?6.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?7.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?8.exe - a variant of Win32/PSW.Legendmir.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?9.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?2.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?4.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?19.exe - probably unknown NewHeur_PE virus [7]
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?xxx.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\样本1.rar ?RAR ?system22.exe - probably a variant of Win32/Viking virus
Number of scanned files: 19
Number of threats found: 19
Time of completion: 13:35:15 Total scanning time: 7 sec (00:00:07)

Notes:
[7] File is probably infected with an unknown virus.

微点卫士

我冒着生命危险又运行了SYSYTEM32.exe，是没报啊。差点卡死我

promised

EXE有没有被感染？

微点卫士

nothing happened

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.bms        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/1.exe
detected: Trojan program Trojan-Spy.Win32.Delf.ach        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/10.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.blx        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/11.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bmj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/13.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.box        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/12.exe//UPack
detected: Trojan program Trojan-Dropper.Win32.Agent.aqq        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/16.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.abi        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/18.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bwr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/17.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bou        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/15.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Agent.pl        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/14.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.csr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/6.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bgr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/7.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.Delf.aav        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Delf.aaw        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.blb        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/2.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bnx        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/4.exe
detected: Trojan program Trojan-Downloader.Win32.Small.czl        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/19.exe//NSPack
detected: Trojan program Trojan-Downloader.Win32.Injecter.f        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/xxx.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾1.rar/system22.exe
19

欠妳緈諨

红心王子

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本1.rar'
C:\Documents and Settings\Administrator\桌面\样本1.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.acb
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Agent.12767
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Agent.12580
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 16.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.37 Backdoor server programs
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.12366
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.11800
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PL
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.bds.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bnx.2
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> xxx.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Injecter.F
  --> system22.exe
      [DETECTION] Contains detection pattern of the worm WORM/Viking.DLL.2
      [INFO]      The file was deleted!


End of the scan: 2007年9月8日  14:58
Used time: 00:22 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     18 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

小邪邪

AVK全杀19个

咖啡杀17

king6808

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bms        文件　: G:\Temp\9.8\样本1.rar/1.exe
已删除：木马程序 Trojan-Spy.Win32.Delf.ach        文件　: G:\Temp\9.8\样本1.rar/10.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.blx        文件　: G:\Temp\9.8\样本1.rar/11.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bmj        文件　: G:\Temp\9.8\样本1.rar/13.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.box        文件　: G:\Temp\9.8\样本1.rar/12.exe//UPack
已删除：木马程序 Trojan-Dropper.Win32.Agent.aqq        文件　: G:\Temp\9.8\样本1.rar/16.exe//UPack
已删除：木马程序 Trojan-Spy.Win32.Delf.abi        文件　: G:\Temp\9.8\样本1.rar/18.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件　: G:\Temp\9.8\样本1.rar/17.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bou        文件　: G:\Temp\9.8\样本1.rar/15.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.Agent.pl        文件　: G:\Temp\9.8\样本1.rar/14.exe//UPack
已删除：木马程序 Trojan-Downloader.Win32.Agent.csr        文件　: G:\Temp\9.8\样本1.rar/6.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bgr        文件　: G:\Temp\9.8\样本1.rar/7.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.Delf.aav        文件　: G:\Temp\9.8\样本1.rar/8.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Delf.aaw        文件　: G:\Temp\9.8\样本1.rar/9.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.blb        文件　: G:\Temp\9.8\样本1.rar/2.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.bnx        文件　: G:\Temp\9.8\样本1.rar/4.exe
已删除：木马程序 Trojan-Downloader.Win32.Small.czl        文件　: G:\Temp\9.8\样本1.rar/19.exe//NSPack
已删除：木马程序 Trojan-Downloader.Win32.Injecter.f        文件　: G:\Temp\9.8\样本1.rar/xxx.exe