3只[MD5: 014EDA AD7607 250E76]

显示全部楼层 · 发表于 2007-10-5 21:46:12

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Lineage.msb
病毒： Trojan.PSW.Lineage.mug

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.40

显示全部楼层 · 发表于 2007-10-5 21:47:05

2007-10-5 21:49:42 Real-time file system protection file C:\Documents and Settings\Administrator\Application Data\IDM\DwnlData\a\135846_8566\135846 multiple threats deleted - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\Internet Download Manager\IDMan.exe
下载就报都不知道报其中哪几个了

显示全部楼层 · 发表于 2007-10-5 21:48:32

C:\Documents and Settings\Administrator\桌面\rinter.zip » ZIP » rinter.dll - a variant of Win32/PSW.Lineage.DN trojan
C:\Documents and Settings\Administrator\桌面\rinter.zip » ZIP » rinter_.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Documents and Settings\Administrator\桌面\rinter.zip - multiple threats - deleted - quarantined

显示全部楼层 · 发表于 2007-10-5 21:48:54

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RINTER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WEB\PRINTERS\IMAGES\RINTER.EXE
2) C:\WINDOWS.0\WEB\PRINTERS\IMAGES\RINTER.DLL
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\WINDOWS.0\WEB\PRINTERS\IMAGES\RINTER.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\RINTER_.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WEB\PRINTERS\IMAGES\RINTER.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-10-5 21:52:49

AVIRA  C
Archive type: ZIP
  --> rinter.dll
   [DETECTION] Is the Trojan horse TR/PWS.Lineage.ZQ.3
  --> rinter.exe
   [DETECTION] Is the Trojan horse TR/PSW.Lineage.UZH.65
  --> rinter_.exe
   [DETECTION] Is the Trojan horse TR/PWS.Lineage.ZQ.3
   [INFO]    The file was deleted!

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious

显示全部楼层 · 发表于 2007-10-5 22:44:30

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 308
Paranoia Database - 6857
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\rinter.dll - Suspected MalwareDetector:Win32.Generic.PSW.16
C:\Documents and Settings\uhthn\Desktop\virus\rinter.exe - Suspected MalwareDetector:Win32.Generic.PSW.16
C:\Documents and Settings\uhthn\Desktop\virus\rinter_.exe - Suspected MalwareDetector:Win32.Generic.PSW.16

3 Files scanned
0 Infected files found
3 Suspected files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-10-5 22:51:55

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.eft 文件　: G:\10.5\rinter.zip/rinter.dll//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.eft 文件　: G:\10.5\rinter.zip/rinter.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.eft 文件　: G:\10.5\rinter.zip/rinter_.exe

显示全部楼层 · 发表于 2007-10-6 11:42:42

显示全部楼层 · 发表于 2007-10-6 12:06:57

[病毒样本] 3只[MD5: 014EDA AD7607 250E76]

本帖子中包含更多资源

6/3

本帖子中包含更多资源

本帖子中包含更多资源