查看: 5245|回复: 22
收起左侧

[病毒样本] 43ge

[复制链接]
promised
发表于 2007-10-5 16:26:17 | 显示全部楼层 |阅读模式
[MD5: 48B54A B14854 CA2B86 CC207B 4BC763 F27391 7E625A ABB535 E8FA8F 7B9252 D081A2 E2AB80 1DEBD7 93718F 1BCA5F 95FC6D EB6E9B 84C8A1 A12C43 3077EC 1FE87E 48BB31 7A2048 461F6D 9D3689 5217AE 5859F1 A0EFAB B2B43F 833211 3DA048 C5D827 E50BAB 4313C0 1B3914 383140 207C0B 1129FA 405EAB 5D3DC9 A04F24 E75301 E21118]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
七少
发表于 2007-10-5 16:30:34 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> sqmapi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Spy.QQLogger.E
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> SyInfo.bps
      [DETECTION] Is the Trojan horse TR/Spy.QQLogger.E
  --> System36.jup
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> System6.ins
      [DETECTION] Contains suspicious code HEUR/Malware
  --> SysWin74.Jmp
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AI.1
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> WinSys84.Sys
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AI.1
  --> tempA.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tempB.exe
      [DETECTION] Is the Trojan horse TR/Agent.13361
  --> tempC.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dfs
  --> tempD.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxq
  --> tempF.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.DOJ.9
  --> tempG.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tempH.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgn.2
  --> tempI.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.YM.2
  --> tempj.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.duf.3
  --> tempK.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tempL.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempM.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddm.1
  --> tempO.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempp.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tempq.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempS.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.3
  --> tempv.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 105.21
      [DETECTION] Is the Trojan horse TR/Delf.afz
  --> avpgj.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxq.1
  --> avpwl.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxp
  --> avpzx.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> kvdxcma.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.dfs.2
  --> kvmxema.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> msavp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> rsjzbpm.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgn
  --> rsmycpm.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dqp
      [INFO]      The file was deleted!
The scan has been done completely.

      0 Scanning directories
     45 Files were scanned
     31 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     14 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
IllusionWing
发表于 2007-10-5 16:34:31 | 显示全部楼层
42个

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.1
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项:扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\105.21 检测到 Packed.Unknown. n
k0
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\3.exe//UPX 检测到 Generic.Binder
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\avpgj.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\avpwl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\avpzx.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\cqatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\djatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\kvdxcma.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\kvmxema.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\msatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\msavp.dll 检测到 Generic.nFile
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\Packet.dll 检测到 Packed.Generic.UPack
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\rsjzbpm.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\rsmycpm.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\sqmapi32.dll 检测到 Generic.nFile
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\svchost.exe 检测到 Generic.Binder
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\SyInfo.bps 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\System36.jup 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\System6.ins 检测到 Generic.nFile
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\SysWin74.Jmp//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempA.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempB.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempC.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempD.exe 检测到 Packed.Generic.Modified
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempF.exe//UPX 检测到 Generic.Binder
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempG.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempH.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempI.exe 检测到 Packed.Generic.Modified
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempj.exe//UPX 检测到 Generic.Binder
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempK.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempL.exe 检测到 Packed.Generic.Modified
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempM.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempO.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempp.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempq.exe 检测到 Packed.Generic.Modified
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempS.exe 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\tempv.exe 检测到 Packed.Unknown.?uk0
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\upxdnd.dll 检测到 Packed.Unknown.sdt
[扫描] [捆绑检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\upxdnd.exe 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\WanPacket.dll 检测到 Packed.Generic.UPack
[扫描] [nFile Detect 2] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\WinSys84.Sys 检测到 Generic.nFile
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\Virus\样本\wpcap.dll 检测到 Packed.Generic.UPack
检测到了 42 个未知的恶意程序,请上报。
任务 扫描 完成。共耗费的时间:0-00-00 00:00:05:0698,共扫描的文件数量:50,共扫描到的威胁数量:42,威胁率:84%,扫描速率: 8.78 文件/秒,扫描速度: 393.12 千字节/秒,共扫描了 2240.02 千字节。
qigang
发表于 2007-10-5 16:46:18 | 显示全部楼层

71/18

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.OnlineGames.zat
病毒: Trojan.PSW.Win32.OnlineGames.yyd
病毒: Trojan.PSW.Win32.OnlineGames.zat
病毒: Trojan.PSW.Win32.OnlineGames.yyd
病毒: Trojan.Mnless.lpi        
病毒: Trojan.PSW.Win32.RocOnline.fa
病毒: Trojan.PSW.Win32.XYOnline.ip
病毒: Trojan.PSW.Win32.Shanda.ab
病毒: Trojan.PSW.Win32.ZeroOnline.bb
病毒: Trojan.PSW.Win32.Shanda.aa
病毒: Trojan.PSW.Win32.SunOnline.cy
病毒: Trojan.PSW.Win32.WsGame.ap
病毒: Trojan.Win32.Agent.yvq   
病毒: Trojan.Win32.Agent.yvq   
病毒: Trojan.PSW.Win32.XYOnline.ip
病毒: Trojan.PSW.Win32.OnlineGames.yyf
病毒: Trojan.PSW.Win32.ZeroOnline.bb
病毒: Trojan.PSW.Win32.RocOnline.fa

MAC地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:19.43.40
promised
 楼主| 发表于 2007-10-5 16:53:45 | 显示全部楼层
C:\ABC\样本\105.21 - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
C:\ABC\样本\3.exe - 特征码 'Trojan-Spy.Win32.Delf.OG' 被发现
C:\ABC\样本\avpgj.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\avpwl.dll - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本\avpzx.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\cqatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\djatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\kvdxcma.dll - 特征码 'Trojan-Downloader.Agent.YJA' 被发现
C:\ABC\样本\kvmxema.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本\msatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\msavp.dll - 特征码 'BehavesLikeWin32.ExplorerHijack' 被发现
C:\ABC\样本\Packet.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\rsjzbpm.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本\rsmycpm.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本\sqmapi32.dll
C:\ABC\样本\svchost.exe - 特征码 'BehavesLikeWin32.Malware' 被发现
C:\ABC\样本\SyInfo.bps - 特征码 'Trojan-Spy.Win32.Delf.OG' 被发现
C:\ABC\样本\System36.jup - 特征码 'Trojan-Spy.Win32.Delf.PG' 被发现
C:\ABC\样本\System6.ins - 特征码 'Trojan-Spy.Win32.Delf.OG' 被发现
C:\ABC\样本\SysWin74.Jmp - 特征码 'Virus.Win32.AutoRun.bs' 被发现
C:\ABC\样本\tempA.exe - 特征码 'Trojan-Spy.Win32.Bancos.ha' 被发现
C:\ABC\样本\tempB.exe - 特征码 'Trojan-Spy.Win32.Bancos.ha' 被发现
C:\ABC\样本\tempC.exe - 特征码 'Trojan-Spy.Win32.Bancos.ha' 被发现
C:\ABC\样本\tempD.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempF.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\样本\tempG.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\样本\tempH.exe - 特征码 'Trojan-Spy.Win32.Bancos.ha' 被发现
C:\ABC\样本\tempI.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempj.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\样本\tempK.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\样本\tempL.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempM.exe - 特征码 'Generic.PWS.Games.2' 被发现
C:\ABC\样本\tempO.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempp.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempq.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\tempS.exe - 特征码 'Virus.Win32.Boran.O' 被发现
C:\ABC\样本\tempt.exe
C:\ABC\样本\tempv.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
C:\ABC\样本\upxdnd.dll
C:\ABC\样本\upxdnd.exe - 特征码 'Generic.PWS.Games.1' 被发现
C:\ABC\样本\WanPacket.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\WinSys84.Sys - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\样本\wpcap.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现

        43 文件被扫描
          (0 压缩档 0 文件)
        40 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.578
solcroft
发表于 2007-10-5 16:55:38 | 显示全部楼层

回复 4楼 qigang 的帖子

到底杀了几个?看了不清不楚
promised
 楼主| 发表于 2007-10-5 16:57:00 | 显示全部楼层

回复 6楼 solcroft 的帖子

18个
"/"后面的
The EQs
发表于 2007-10-5 17:10:53 | 显示全部楼层


[ 本帖最后由 EQ2 于 2007-10-5 17:12 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
yurius
发表于 2007-10-5 17:14:56 | 显示全部楼层
24

Infostealer.Gampass,不操作,1,rsmycpm.dll
Infostealer.Gampass,不操作,1,rsjzbpm.dll
Trojan Horse,不操作,1,msavp.dll
Infostealer.Gampass,不操作,1,msatl.dll
Infostealer.Gampass,不操作,1,kvmxema.dll
Infostealer.Gampass,不操作,1,kvdxcma.dll
Infostealer.Gampass,不操作,1,cqatl.dll
Infostealer.Gampass,不操作,1,avpgj.dll
Infostealer,不操作,1,105.21
Infostealer,不操作,1,tempv.exe
Infostealer.Gampass,不操作,1,tempM.exe
Infostealer.Gampass,不操作,1,tempK.exe
Infostealer.Gampass,不操作,1,tempj.exe
Infostealer.Gampass,不操作,1,tempH.exe
Infostealer.Gampass,不操作,1,tempF.exe
Infostealer.Gampass,不操作,1,tempC.exe
Infostealer.Gampass,不操作,1,tempB.exe
Infostealer.Gampass,不操作,1,tempA.exe
Infostealer,不操作,1,WinSys84.Sys
Hacktool.Spoofer,不操作,1,svchost.exe
W32.Gammima.AG,不操作,1,SysWin74.Jmp
W32.Silly!gen,不操作,1,System36.jup
Infostealer.Gampass,不操作,1,upxdnd.exe
Trojan.PWS.QQPass,不操作,1,3.exe
timhas266
发表于 2007-10-5 17:20:15 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\样本.rar'
C:\Documents and Settings\tim\桌面\样本.rar
  [0] Archive type: RAR
  --> sqmapi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Spy.QQLogger.E
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> SyInfo.bps
      [DETECTION] Is the Trojan horse TR/Spy.QQLogger.E
  --> System36.jup
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> System6.ins
      [DETECTION] Contains suspicious code HEUR/Malware
  --> SysWin74.Jmp
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AI.1
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> WinSys84.Sys
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.AI.1
  --> tempA.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tempB.exe
      [DETECTION] Is the Trojan horse TR/Agent.13361
  --> tempC.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dfs
  --> tempD.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxq
  --> tempF.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.DOJ.9
  --> tempG.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tempH.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgn.2
  --> tempI.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.YM.2
  --> tempj.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.duf.3
  --> tempK.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tempL.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempM.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddm.1
  --> tempO.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempp.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tempq.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> tempS.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.XSS.3
  --> tempv.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 105.21
      [DETECTION] Is the Trojan horse TR/Delf.afz
  --> avpgj.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxq.1
  --> avpwl.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dxp
  --> avpzx.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> cqatl.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> djatl.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> kvdxcma.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.dfs.2
  --> kvmxema.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> msatl.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> msavp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> rsjzbpm.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgn
  --> rsmycpm.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dqp
      [INFO]      A backup was created as '473468e2.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Friday, 5 October, 2007  17:19
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
     44 Files were scanned
     34 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     10 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-19 18:04 , Processed in 0.140175 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表