收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 2吨
12下一页
返回列表 发新帖
查看: 2665|回复: 17
收起左侧

[病毒样本] 2吨

[复制链接]
专家
发表于 2007-9-13 14:24:19 | 显示全部楼层 |阅读模式
OnlineGames

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

wangjay1980
发表于 2007-9-13 14:29:48 | 显示全部楼层
17
detected: Trojan program Trojan-Downloader.Win32.Agent.dcl        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/wgdoor0.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cdb        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ratbbpi.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cdb        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ratbbtl.exe//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravcqmon.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.dey        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravdhmon.dat//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.dey        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravdhmon.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cjq        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravgjmon.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cjq        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravmsmon.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.dey        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravqjmon.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.cor        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravwlmon.dat//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bgc        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravwlmon.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cqb        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravztmon2.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cej        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravztmon.dat//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cei        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravztmon.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aia        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/RAVZXMON2.DAT//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/ravzxmon2.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aia        File: C:\Documents and Settings\Owner\×ÀÃæ\onlinegames.rar/RAVZXMON.exe
回复

举报

intherain
发表于 2007-9-13 14:30:12 | 显示全部楼层
江民解决13个

f:\onlinegames.rar->wgdoor0.dll  trojan/psw.gamepass.yhs    2007-9-13 14:29:29 已删除        
f:\onlinegames.rar->ratbbpi.dll  trojandownloader.agent.nbj 2007-9-13 14:29:29 已删除        
f:\onlinegames.rar->ratbbtl.exe  trojan/psw.onlinegames.fjz 2007-9-13 14:29:29 已删除        
f:\onlinegames.rar->ravdhmon.dat trojan/psw.gamepass.yxm    2007-9-13 14:29:29 已删除        
f:\onlinegames.rar->ravmsmon.exe trojandownloader.agent.pdu 2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravqjmon.dat trojan/psw.gamepass.yoi    2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravqjmon.exe trojandownloader.agent.ped 2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravwlmon.dat trojandownloader.agent.oor 2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravwlmon.exe trojan/psw.gamepass.yqa    2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravztmon.dat trojan/psw.gamepass.yrx    2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravzxmon2.dattrojan/psw.onlinegames.evb 2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->ravzxmon.exe trojan/psw.onlinegames.eun 2007-9-13 14:29:30 已删除        
f:\onlinegames.rar->wddoor0.dll  trojan/psw.gamepass.yso    2007-9-13 14:29:30 已删除
回复

举报

mofunzone
发表于 2007-9-13 14:36:50 | 显示全部楼层
秒速5厘米
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\onlinegames.rar'
C:\Documents and Settings\Administrator\My Documents\
  onlinegames.rar
    [0] Archive type: RAR
    --> wgdoor0.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ztdoor0.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ratbbpi.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> ratbbtl.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravcqmon.dat
        [DETECTION] Is the Trojan horse TR/PSW.OnLine.bgh.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravcqmon.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLine.bgh.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravdhmon.dat
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.dey.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravdhmon.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.4189
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravgjmon.dat
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravgjmon.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.4237
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravmsmon.dat
        [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravmsmon.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdq.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravqjmon.dat
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravqjmon.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdl.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravwlmon.dat
        [DETECTION] Is the Trojan horse TR/PSW.8794
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravwlmon.exe
        [DETECTION] Is the Trojan horse TR/PSW.8794
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravztmon2.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravztmon.dat
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cej
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravztmon.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cei
        [WARNING]   Infected files in archives cannot be repaired!
    --> RAVZXMON2.DAT
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravzxmon2.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.4326
        [WARNING]   Infected files in archives cannot be repaired!
    --> ravzxmon.dat
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> RAVZXMON.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> wddoor0.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月12日  23:36
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     25 Files were scanned
     20 viruses and/or unwanted programs were found
      4 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      1 Archives were scanned
     25 Warnings
      0 Notes
回复

举报

twtwpx79
发表于 2007-9-13 14:37:39 | 显示全部楼层
小红伞全部灭掉!里面的dat 文件解压后可查出!
egin scan in 'C:\Documents and Settings\Administrator\桌面\onlinegames.rar'
C:\Documents and Settings\Administrator\桌面\onlinegames.rar
  [0] Archive type: RAR
  --> wgdoor0.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ztdoor0.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ratbbpi.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb.1
  --> ratbbtl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> ravcqmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.bgh.2
  --> ravcqmon.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.bgh.2
  --> ravdhmon.dat
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.dey.2
  --> ravdhmon.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4189
  --> ravgjmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4237
  --> ravmsmon.dat
      [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
  --> ravmsmon.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdq.2
  --> ravqjmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravqjmon.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdl.2
  --> ravwlmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.8794
  --> ravwlmon.exe
      [DETECTION] Is the Trojan horse TR/PSW.8794
  --> ravztmon2.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravztmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cej
  --> ravztmon.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cei
  --> RAVZXMON2.DAT
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
  --> ravzxmon2.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4326
  --> ravzxmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> RAVZXMON.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
  --> wddoor0.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!

[ 本帖最后由 twtwpx79 于 2007-9-13 14:40 编辑 ]
回复

举报

绅博周幸
发表于 2007-9-13 14:48:01 | 显示全部楼层
Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  bbs.kafan.cn/attachment.php?aid=127110
Information:  Is the Trojan horse TR/Spy.Gen  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.10, VDF 6.39.1.123
回复

举报

feihongtian 该用户已被删除
发表于 2007-9-13 15:45:33 | 显示全部楼层
扫描开始时间: 2007-9-13 15:44:34
扫描日志
NOD32 版本 2526 (20070912) NT
命令行: F:\virus\onlinegames.rar

日期: 2007年9月13日  时间: 15:44:36
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\onlinegames.rar
F:\virus\onlinegames.rar ?RAR ?wgdoor0.dll<病毒 - 可能是 Win32/PSW.OnLineGames.NDV 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ztdoor0.dll<病毒 - 可能是 Win32/Genetik 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ratbbpi.dll<病毒 - Win32/PSW.OnLineGames.NEN 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ratbbtl.exe<病毒 - 可能是 Win32/Genetik 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravcqmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravcqmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravdhmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravdhmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravgjmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravgjmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravmsmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravmsmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravqjmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravqjmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravwlmon.exe<病毒 - Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravztmon2.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravztmon.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?RAVZXMON2.DAT<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravzxmon2.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\onlinegames.rar ?RAR ?ravzxmon.dat<病毒 - Win32/PSW.OnLineGames.NCU 木马 变种>
F:\virus\onlinegames.rar ?RAR ?RAVZXMON.exe<病毒 - Win32/PSW.OnLineGames.NEP 木马 变种>
已扫描文件数量: 24
已发现病毒数量: 21
完成时间: 15:44:41 总共扫描时间: 5 秒 (00:00:05)
回复

举报

The EQs
发表于 2007-9-13 15:46:16 | 显示全部楼层
Scan performed at: 2007-9-13 15:45:45
Scanning Log
NOD32 version 2527 (20070913) NT
Command line: C:\Documents and Settings\Don johnson\桌面\onlinegames.rar
Operating memory - is OK

Date: 13.9.2007  Time: 15:45:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\onlinegames.rar
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?wgdoor0.dll - probably a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ztdoor0.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ratbbpi.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ratbbtl.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravcqmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravcqmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravdhmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravdhmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravgjmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravgjmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravmsmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravmsmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravqjmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravqjmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravwlmon.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravztmon2.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravztmon.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?RAVZXMON2.DAT - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravzxmon2.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?ravzxmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegames.rar ?RAR ?RAVZXMON.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
Number of scanned files: 25
Number of threats found: 21
Number of files cleaned: 1
Time of completion: 15:45:54 Total scanning time: 5 sec (00:00:05)
回复

举报

king6808
发表于 2007-9-13 17:49:53 | 显示全部楼层
F:\onlinegames.rar >>RAR >>wgdoor0.dll - 可能是 Win32/PSW.OnLineGames.NDV 木马 的一个变种
F:\onlinegames.rar >>RAR >>ztdoor0.dll - 可能是 Win32/Genetik 木马 的一个变种
F:\onlinegames.rar >>RAR >>ratbbpi.dll - Win32/PSW.OnLineGames.NEN 木马的变种
F:\onlinegames.rar >>RAR >>ratbbtl.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravcqmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravcqmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravdhmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravdhmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravgjmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravgjmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravmsmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravmsmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravqjmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravqjmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravwlmon.exe - Win32/PSW.OnLineGames.NEP 木马的变种
F:\onlinegames.rar >>RAR >>ravztmon2.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravztmon.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>RAVZXMON2.DAT - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>ravzxmon2.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\onlinegames.rar >>RAR >>ravzxmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
F:\onlinegames.rar >>RAR >>RAVZXMON.exe - Win32/PSW.OnLineGames.NEP 木马的变种
回复

举报

uhthn2002
发表于 2007-9-13 18:10:36 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4686
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\wgdoor0.dll - Suspicious of Trojan-PSW.Small.1
C:\Documents and Settings\uhthn\Desktop\New Folder\ztdoor0.dll - Suspicious of Trojan-PSW.Small.1
C:\Documents and Settings\uhthn\Desktop\New Folder\ratbbpi.dll - Infected with Win32.PDB-3af Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ratbbtl.exe - Infected with PDB-100 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravcqmon.dat - Infected with PDB-693 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravcqmon.exe - Infected with PDB-1f4 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravdhmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravdhmon.exe - Infected with PDB-d90 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravgjmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravgjmon.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\ravmsmon.dat - Infected with PDB-9e4 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravmsmon.exe - Infected with PDB-294 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravqjmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravqjmon.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\ravwlmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravwlmon.exe - Infected with PDB-a1c Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravztmon2.exe - Infected with PDB-433 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\ravztmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravztmon.exe - Infected with PDB-6ac Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\RAVZXMON2.DAT - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\ravzxmon2.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\ravzxmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\RAVZXMON.exe - Infected with PDB-965 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\wddoor0.dll - Suspicious of Trojan-PSW.Small.1

24 Files scanned
11 Infected files found
13 Suspicious files found
0 Files cured
11 Files deleted
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-4 02:52 , Processed in 0.123267 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表