午餐来一包

显示全部楼层 · 发表于 2007-9-20 11:33:04

扫扫看总共19个样本看看你们的杀软如何? 呵呵

[ 本帖最后由 gzg 于 2007-9-20 11:40 编辑 ]

显示全部楼层 · 发表于 2007-9-20 11:34:36

9个

显示全部楼层 · 发表于 2007-9-20 11:34:43

显示全部楼层 · 发表于 2007-9-20 11:35:10

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\v2.rar'
C:\Documents and Settings\Administrator\My Documents\
  v2.rar
[0] Archive type: RAR
--> v2\1.exe
      [DETECTION] Is the Trojan horse TR/PSW.19634
      [WARNING] Infected files in archives cannot be repaired!
--> v2\avzxain.dll
--> v2\rsztafg.dll
--> v2\wpcap.dll
--> v2\WanPacket.dll
--> v2\Packet.dll
--> v2\npptools.dll
--> v2\wlgini.dll
--> v2\avzxbst.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dcu
      [WARNING] Infected files in archives cannot be repaired!
--> v2\DiskMan32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> v2\gzpntb.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> v2\D5828D34.DLL
      [DETECTION] Contains detection pattern of the worm WORM/Winko.I.5
      [WARNING] Infected files in archives cannot be repaired!
--> v2\DiskMan32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> v2\FADD740C.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> v2\Kvsc3.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> v2\LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
      [WARNING] Infected files in archives cannot be repaired!
--> v2\LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
      [WARNING] Infected files in archives cannot be repaired!
--> v2\mppds.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> v2\MSDEG32.DLL
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年9月19日  20:35
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   20 Files were scanned
   9 viruses and/or unwanted programs were found
   3 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   11 Files not concerned
   1 Archives were scanned
   13 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-9-20 11:37:51

F-s扫出11个……

显示全部楼层 · 发表于 2007-9-20 11:46:57

2007-9-20 11:46:06 1190259966 Administrator 1432 Sign of "Win32:Agent-LNC [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\1.exe\[Upack]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Delf-FVM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\avzxbst.exe\[Upack]\[Embedded#MUSIC]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Onlinegames-BBY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\DiskMan32.exe\[UPX]\[Embedded#2060]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Onlinegames-BBY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\gzpntb.exe\[UPX]\[Embedded#2060]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Onlinegames-BBY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\DiskMan32.dll" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Agent-HFX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\FADD740C.EXE\[NsPack]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\LYLOADER.EXE\[Upack]\[Embedded#5158]\[Upack]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\LYMANGR.DLL\[Upack]" file.
2007-9-20 11:46:10 1190259970 Administrator 1432 Sign of "Win32:Onlinegames-ALF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\v2.rar\v2\MSDEG32.DLL\[Upack]" file.

小a 13个

显示全部楼层 · 发表于 2007-9-20 11:47:33

刚刚下载就提示病毒

显示全部楼层 · 发表于 2007-9-20 11:54:33

9比9

显示全部楼层 · 发表于 2007-9-20 11:56:08

11
detected: Trojan program Trojan.Win32.Agent.bnz File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\1.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dcu File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\avzxbst.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dce File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\DiskMan32.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dce File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\gzpntb.exe//PE_Patch.UPX//UPX
detected: virus Virus.Win32.AutoRun.ne File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\D5828D34.DLL
detected: Trojan program Backdoor.Win32.Agent.bvn File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\FADD740C.EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dbx File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\Kvsc3.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ddd File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\LYLOADER.EXE//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dcc File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\LYMANGR.DLL//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dby File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\mppds.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ddd File: C:\Documents and Settings\Owner\×ÀÃæ\v2.rar/v2\MSDEG32.DLL//UPack

显示全部楼层 · 发表于 2007-9-20 12:02:55

我的卡巴

只扫到11个啊

[病毒样本] 午餐来一包

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 tracydk 的帖子

本帖子中包含更多资源