下载者和它下的9个毒！

显示全部楼层 · 发表于 2007-9-14 17:17:08

文件数:10 病毒数:10 比重:1
OK 扫描完毕！

[ 本帖最后由 FBAV 于 2007-9-14 17:19 编辑 ]

显示全部楼层 · 发表于 2007-9-14 17:19:11

Start of the scan: 2007年9月14日  17:18

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\10ge.rar'
C:\Documents and Settings\Administrator\桌面\10ge.rar
  [0] Archive type: RAR
  --> 3.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cpy
  --> 4.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 5.exe
   [DETECTION] Is the Trojan horse TR/Agent.12716.1
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> 7.exe
   [DETECTION] Is the Trojan horse TR/Agent.12229
  --> 8.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.25921
  --> 9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cqb
  --> ma.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
   [INFO]    The file was deleted!

End of the scan: 2007年9月14日  17:18
Used time: 00:21 min

The scan has been done completely.

显示全部楼层 · 发表于 2007-9-14 17:54:33

2007-9-14 17:54:26 Scanning Log
2007-9-14 17:54:26 Version of virus signature database: 2529 (20070913)
2007-9-14 17:54:26 Date: 14.9.2007 Time: 17:54:26
2007-9-14 17:54:26 Scanned disks, folders and files: C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 3.exe - probably a variant of Win32/PSW.OnLineGames.NEN trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 4.exe » UPX v12_m2 - is OK
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 5.exe - probably a variant of Win32/Genetik trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 6.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 7.exe - probably a variant of Win32/Genetik trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 8.exe - probably unknown NewHeur_PE virus [7]
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 9.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » ma.exe - probably a variant of Win32/TrojanDownloader.Delf.NSA trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 1.exe - a variant of Win32/PSW.Agent.NEC trojan
2007-9-14 17:54:33 C:\Documents and Settings\Administrator.ECC8917B72F64E7\桌面\10ge.rar » RAR » 2.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
2007-9-14 17:54:33 Number of scanned files: 11
2007-9-14 17:54:33 Number of threats found: 9
2007-9-14 17:54:33 Time of completion: 17:54:33 Total scanning time: 7 sec (00:00:07)
2007-9-14 17:54:33
2007-9-14 17:54:33 Notes:
2007-9-14 17:54:33 [7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-14 17:56:53

貌似重复了
http://bbs.kafan.cn/viewthread.php?tid=130473&extra=page%3D1

显示全部楼层 · 发表于 2007-9-14 20:00:15

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4814
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\tonger2003

C:\Documents and Settings\uhthn\Desktop\tonger2003\3.exe - Infected with PDB-e33 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\4.exe - Infected with PDB-191 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\5.exe - Infected with PDB-26d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\6.exe - Infected with PDB-792 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\7.exe - Infected with PDB-a0b Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\8.exe - Infected with PDB-3bc Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\9.exe - Infected with PDB-84a Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\ma.exe - Infected with Win32.PDB-9c1 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\1.exe - Infected with PDB-c69 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\tonger2003\2.exe - Infected with PDB-61a Malware program - Deleted

10 Files scanned
10 Infected files found
0 Suspicious files found
0 Files cured
10 Files deleted

显示全部楼层 · 发表于 2007-9-14 20:28:01

微点：
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\9.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Delf.hdg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\MA.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\3.EXE
1) C:\DFD867937.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\3.EXE
1) C:\DFD867937.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\5.EXE
1) C:\DFD878203.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\5.EXE
1) C:\DFD878203.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\7.EXE
1) C:\DFD890265.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10GE\7.EXE
1) C:\DFD890265.BAT
是否删除可疑程序?

显示全部楼层 · 发表于 2007-9-14 21:37:17

咖啡检测到6个病毒！

显示全部楼层 · 发表于 2007-9-15 16:08:03

江民杀毒软件扫描报告文件

北京江民新科技术有限公司

扫描引擎 11.00.702

病毒库日期 2007-09-16

更新日期 2007-09-15

扫描目标 V:\ViRusDoc20070915\038\10ge.rar

开始时间 2007-09-15 16:06:17

在 V:\ViRusDoc20070915\038\10ge.rar->3.exe 中发现 Trojan/PSW.GamePass.yuj 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->4.exe 中发现 Backdoor/Bifrose.ala 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->5.exe 中发现 Trojan/PSW.OnLineGames.fnq 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->7.exe 中发现 Trojan/PSW.OnLineGames.flp 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->8.exe 中发现 Trojan/PSW.GamePass.xnr 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->ma.exe 中发现 VirTool.MaskPE.f 病毒, 发现病毒

在 V:\ViRusDoc20070915\038\10ge.rar->1.exe 中发现 Trojan/PSW.OnLineGames.ftu 病毒, 发现病毒

正常结束。

扫描结果:

文件数 : 12  病毒体 : 7
删除 : 0  解毒 : 0
扫描速度(Kb/sec) : 0  扫描时间 : 00:00:00
扫描文件速度(个/秒) :12 - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -

[病毒样本] 下载者和它下的9个毒！

本帖子中包含更多资源

本帖子中包含更多资源