网马17个

zane_xzz

[MD5: F4E621 9F12BE 6EB766 077E88 04FE47 39F046 6809CD B57151 1982A9 5FABB8 D9E6EA 772CB8 D5ADF2 A6408B 3EEA21 BEE781 4FE46E]

wangjay1980

17
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eqh        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1630.exe
detected: Trojan program Trojan-PSW.Win32.WOW.aaw        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1631.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fds        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1633.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cnf        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1634.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bgr        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1636.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fcg        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1637.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ddw        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1638.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbo        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\1639.exe
detected: virus Virus.Win32.AutoRun.th        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163a.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dkt        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163b.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fdy        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163c.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Lmir.bnl        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163d.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.doj        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163e.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ejj        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163f.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbu        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163g.exe//PE_Patch.UPX//UPX
detected: Trojan program Backdoor.Win32.Kolmat.d        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163i.exe//ASPack
detected: Trojan program Backdoor.Win32.Agent.byx        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð_(2).rar/н¨Îļþ¼Ð (2)\163j.exe//UPack

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\1631.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:33865  MD5:9f12bead5a7551599af06c159a056a07

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\1634.exe]
                    …………发现Spy！报告:[2] [1]
文件信息:  大小:43389  MD5:077e889abde42119fa23077518998477

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\1637.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:15400  MD5:39f0468fc8064b43d5918bc0636ba3b1

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\1638.exe]
                    …………发现Spy！报告:[2] [1]
文件信息:  大小:13321  MD5:6809cd6ed0143f20d413fe92010367fe

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\1639.exe]
                    …………发现Spy！报告:[2] [8] HOOK者
文件信息:  大小:26624  MD5:b571518ccfcd37d3366e4541eb8e5ae7

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\163a.exe]
                    …………发现Spy！报告:[2]
文件信息:  大小:32369  MD5:1982a990cb6b05310cb807477476336a

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\163c.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:13967  MD5:d9e6ea87b0969cf8603e04173c146f0d

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\163f.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:15544  MD5:a6408b7584038ec1140e3a570dd828aa

[C:\Documents and Settings\Administrator\桌面\Virus\新建文件夹_(2)\新建文件夹 (2)\163j.exe]
                    …………发现Spy！报告:[1]
文件信息:  大小:166189  MD5:4fe46e1986c6b5f8c65cc4dce1b9b1b0

文件数:17   病毒数:9  比重:0.5294117647059
OK  扫描完毕！
  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

[ 本帖最后由 FBAV 于 2007-10-15 17:16 编辑 ]

欠妳緈諨

BD杀13个
反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.5
双引擎反病毒签名
开始时间: 2007-10-15 17:26
引擎: BD 引擎 (BD 17.5530)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: 1630.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Dropped:Generic.PWS.Games.3.9CD75BC1 (BD 引擎)
对象: 1631.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: DeepScan:Generic.PWS.WoW.F8DCDB5D (BD 引擎)
对象: 1634.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Generic.Onlinegames9.1800AA69 (BD 引擎)
对象: 1636.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 已清除病毒
        病毒: Trojan.PWS.Onlinegames.HW (BD 引擎)
对象: 1638.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Generic.Malware.SBdldg.3AC63FF5 (BD 引擎)
对象: 1639.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: DeepScan:Generic.PWS.Games.1.68D3460E (BD 引擎)
对象: 163a.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Generic.PWStealer.D1FFBA58 (BD 引擎)
对象: 163c.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: DeepScan:Generic.Dld.Agent.F75C5F4E (BD 引擎)
对象: 163e.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Generic.PWS.Games.4.E4AB6102 (BD 引擎)
对象: 163f.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Trojan.PWS.OnLineGames.NIP (BD 引擎)
对象: 163g.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: Generic.PWS.Games.4.ED0350A8 (BD 引擎)
对象: 163i.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 已清除病毒
        病毒: Backdoor.Kolmat.D (BD 引擎)
对象: 163j.exe
        路径: D:\病毒测试\临时解压\新建文件夹 (2)
        Status: 病毒文件已删除
        病毒: MemScan:Backdoor.Agent.ALH (BD 引擎)
扫描完成: 2007-10-15 17:26
    已检查 17 个文件
    已发现 13 个染毒文件
    发现 0 个可疑文件

timhas266

Start of the scan: Monday, 15 October, 2007  17:41

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\新建文件夹'
C:\Documents and Settings\tim\桌面\新建文件夹
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð (2)\1630.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> н¨Îļþ¼Ð (2)\1631.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> н¨Îļþ¼Ð (2)\1633.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð (2)\1634.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.cnf.1
  --> н¨Îļþ¼Ð (2)\1636.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.bjj.1
  --> н¨Îļþ¼Ð (2)\1637.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fcx
  --> н¨Îļþ¼Ð (2)\1638.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ddw
  --> н¨Îļþ¼Ð (2)\1639.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð (2)\163a.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.45190.1
  --> н¨Îļþ¼Ð (2)\163b.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð (2)\163c.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð (2)\163d.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð (2)\163e.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.DOJ.3
  --> н¨Îļþ¼Ð (2)\163f.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> н¨Îļþ¼Ð (2)\163g.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð (2)\163i.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Kolmat.D Backdoor server programs
  --> н¨Îļþ¼Ð (2)\163j.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.38 Backdoor server programs
      [INFO]      A backup was created as 'ac9a94d4.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Monday, 15 October, 2007  17:41
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
     18 Files were scanned
     16 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

winxp0286

江民殺

Nerazzurri

detected: Trojan program Trojan-PSW.Win32.OnLineGames.eqh        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1630.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eoo        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1630.exe//#//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.epv        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1630.exe//#//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.aaw        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1631.exe//FSG
detected: Trojan program Trojan-PSW.Win32.WOW.aaw        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1631.exe//FSG//#
detected: Trojan program Trojan-PSW.Win32.WOW.aaw        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1631.exe//FSG//#//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fds        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1633.exe//PE_Patch.UPX//UPX
detected: virus Heur.Invader (modification)        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1633.exe//PE_Patch.UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cnf        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1634.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bgr        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1636.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cdv        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1636.exe//PE_Patch.UPX//#
detected: virus Heur.Invader (modification)        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1636.exe//PE_Patch.UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fcg        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1637.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fcx        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1637.exe//PE_Patch//UPack//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fcg        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1637.exe//PE_Patch//UPack//#//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ddw        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1638.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Agent.pj        URL: http://bbs.kafan.cn/attachment.php?aid=139867//н¨Îļþ¼Ð (2)/1638.exe//UPack//#

yurius

symantec 10个

2007-10-15 18:13:13,W32.Fubalca.N,Quarantined,163j.exe
2007-10-15 18:13:11,Infostealer.Gampass,Quarantined,163e.exe
2007-10-15 18:13:10,Infostealer.Gampass,Quarantined,163d.exe
2007-10-15 18:13:08,Infostealer.Gampass,Quarantined,163c.exe
2007-10-15 18:13:07,Infostealer.Gampass,Quarantined,163b.exe
2007-10-15 18:13:05,W32.Gammima.AG,Quarantined,163a.exe
2007-10-15 18:13:03,Infostealer.Gampass,Quarantined,1638.exe
2007-10-15 18:13:02,Infostealer,Quarantined,1636.exe
2007-10-15 18:13:01,Trojan Horse,Quarantined,1634.exe
2007-10-15 18:12:59,Infostealer.Gampass,Quarantined,1630.exe

残缺的唯美

Result: 15 malware found
Trojan-PSW.Win32.OnLineGames.eqh (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1630.exe
Trojan-PSW.Win32.OnLineGames.fds (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1633.exe
Trojan-PSW.Win32.OnLineGames.cnf (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1634.exe
Trojan-PSW.Win32.OnLineGames.bgr (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1636.exe
Trojan-PSW.Win32.OnLineGames.fcg (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1637.exe
Trojan-PSW.Win32.OnLineGames.ddw (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1638.exe
Trojan-PSW.Win32.OnLineGames.fbo (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\1639.exe
Virus.Win32.AutoRun.th (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163a.exe
Trojan-PSW.Win32.OnLineGames.dkt (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163b.exe
Trojan-PSW.Win32.Lmir.bnl (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163d.exe
Trojan-PSW.Win32.OnLineGames.doj (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163e.exe
Trojan-PSW.Win32.OnLineGames.ejj (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163f.exe
Trojan-PSW.Win32.OnLineGames.fbu (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163g.exe
Backdoor.Win32.Kolmat.d (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163i.exe
Backdoor.Win32.Agent.byx (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð (2).rar\н¨Îļþ¼Ð (2)\163j.exe

kp2006

kv2008报14个

http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1630.exe                 trojan/psw.gamepass.aale     2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1634.exe                 trojan/psw.gamepass.yqx      2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1636.exe                 trojan/psw.gamepass.xxa      2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1637.exe                 trojan/psw.onlinegames.ijh   2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1638.exe                 trojan/psw.onlinegames.glq   2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\1639.exe                 trojan/psw.onlinegames.iiu   2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163a.exe                 trojan/diskautorun.za        2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163b.exe                 trojan/psw.onlinegames.gwa   2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163c.exe                 trojan/psw.onlinegames.hmt   2007-10-15 下午 06:52:39 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163d.exe                 trojan/psw.gamepass.aamt     2007-10-15 下午 06:52:40 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163e.exe                 trojandropper.agent.dko      2007-10-15 下午 06:52:40 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163f.exe                 trojandownloader.adload.lp   2007-10-15 下午 06:52:40 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163g.exe                 trojan/psw.gamepass.aaot     2007-10-15 下午 06:52:40 已删除        
http://bbs.kafan.cn/attachment.php?aid=139867->?? (2)\163j.exe                 backdoor/agent.aefu          2007-10-15 下午 06:52:41 已删除