9个

显示全部楼层 · 发表于 2007-11-6 13:06:28

那几个网页是挂马的
浏览器后台下载，金山2008清理专家的防挂马全拦了

显示全部楼层 · 发表于 2007-11-6 13:20:00

Object: A0017233.exe
Path: C:\Documents and Settings\pMj\桌面\9
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.grr (Engine A)
Object: A0017234.exe
Path: C:\Documents and Settings\pMj\桌面\9
Status: Virus detected
Virus: Trojan.Win32.Agent.cli (Engine A)
Object: A0017249.exe
Path: C:\Documents and Settings\pMj\桌面\9
Status: Virus detected
Virus: Backdoor.Win32.Popwin.aic (Engine A)
Object: xp14[1].htm
Path: C:\Documents and Settings\pMj\桌面\9
Status: Virus detected
Virus: Trojan-Downloader.VBS.Agent.ff (Engine A)
Analysis complete: 11/6/2007 13:20
9 files checked
4 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-11-6 14:05:53

貌似是从系统还原区提取的……这么说以前就中病毒了？

显示全部楼层 · 发表于 2007-11-6 16:04:05

卡巴剩余几个可以杀了
Hello,

aa2[1].htm_ - Trojan-Downloader.VBS.Psyme.jy,
aa4[1].htm_ - Trojan-Downloader.JS.Small.hj,
aa6[1].htm_ - Trojan-Downloader.JS.Small.hk,
ee2[1].htm_ - Trojan-Downloader.JS.Small.hl,
winoperl.sys - Rootkit.Win32.Agent.mt

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2007-11-6 17:15:58

信息 2007-11-06  17:14:37 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2007-11-06  17:14:37 D:\桌面.rar\A0017249.exe Win32.Hack.Popwin.106535 清除成功
病毒 2007-11-06  17:14:37 D:\桌面.rar\A0017234.exe Win32.Troj.Agent.61440 清除成功
病毒 2007-11-06  17:14:37 D:\桌面.rar\A0017233.exe Win32.PSWTroj.OnlineGames.os.90112 清除成功

毒霸2008

显示全部楼层 · 发表于 2007-11-6 19:12:11

D:\firefox下载的文件\桌面.rar » RAR » A0017233.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\firefox下载的文件\桌面.rar » RAR » A0017249.exe - Win32/TrojanDownloader.Flux trojan

显示全部楼层 · 发表于 2007-11-6 19:19:16

试试看

显示全部楼层 · 发表于 2007-11-6 22:45:02

trend found 4 threats

显示全部楼层 · 发表于 2007-11-7 00:13:50

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 810
Paranoia Database - 48490
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\aa6[1].htm - Infected VIRUS.SCRIPT.C93 - Disinfected
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\xp14[1].htm - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\aa2[1].htm - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\ee2[1].htm - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\A0017233.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\A0017234.exe - Infected TROJAN-DOWNLOADER.AGENT.21 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\A0017249.exe - Infected BACKDOOR.AGENT.9 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\winoperl.sys - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\aa4[1].htm - OK

9 Files scanned
3 Infected files found
2 Suspected files found
1 Files disinfected
2 Files deleted

[病毒样本] 9个

回复 9楼 Redevil 的帖子