[病毒样本] 包

显示全部楼层 · 发表于 2007-11-23 11:54:39

Starting the file scan:

Begin scan in 'E:\桌面.rar'
E:\桌面.rar
  [0] Archive type: RAR
  --> jh0619.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> qqhx.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> wl0618.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> text.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> my0616.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> dh0616.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年11月23日  11:55
Used time: 00:21 min

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-11-23 12:00:23

微点全杀
已上报

显示全部楼层 · 发表于 2007-11-23 12:06:21

费尔

显示全部楼层 · 发表于 2007-11-23 12:12:07

deleted: virus Heur.Invader (modification) File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\×ÀÃæ.rar/jh0619.exe//PE_Patch//UPack
deleted: virus Heur.Invader (modification) File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\×ÀÃæ.rar/qqhx.exe//UPack
deleted: virus Heur.Invader (modification) File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\×ÀÃæ.rar/wl0618.exe//PE_Patch//UPack
deleted: virus Heur.Invader (modification) File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\×ÀÃæ.rar/my0616.exe//UPack
deleted: virus Heur.Invader (modification) File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\×ÀÃæ.rar/dh0616.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-11-23 12:19:02

D:\firefox download\桌面.rar ?RAR ?jh0619.exe - Win32/PSW.OnLineGames.YA 特洛伊木马的变种
D:\firefox download\桌面.rar ?RAR ?qqhx.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\firefox download\桌面.rar ?RAR ?wl0618.exe - Win32/PSW.OnLineGames.YA 特洛伊木马的变种
D:\firefox download\桌面.rar ?RAR ?text.exe - 可能是 Win32/PSW.Delf.NHI 特洛伊木马的变种
D:\firefox download\桌面.rar ?RAR ?my0616.exe - Win32/PSW.OnLineGames.YA 特洛伊木马的变种
D:\firefox download\桌面.rar ?RAR ?dh0616.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马的变种

显示全部楼层 · 发表于 2007-11-23 12:36:03

Hello.
Virus.Win32.AutoRun.afa
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2007-11-23 13:00:06

费尔可以杀6个。。

显示全部楼层 · 发表于 2007-11-23 13:24:10

D:\桌面.rar\jh0619.exe - infected with Trojan.PWS.Gamania.origin
D:\桌面.rar\qqhx.exe - probably infected with MULDROP.Trojan
D:\桌面.rar\wl0618.exe - infected with Trojan.PWS.Wsgame.2144
D:\桌面.rar\text.exe - infected with Win32.HLLW.Autoruner.origin
D:\桌面.rar\my0616.exe - infected with Trojan.PWS.Wsgame.origin
D:\桌面.rar\dh0616.exe - probably infected with MULDROP.Trojan

Archive contains 6 infected items

DRWEB 4.44 Kill All

显示全部楼层 · 发表于 2007-11-23 13:57:01

瑞星主动防御全部拦截

[病毒样本] 包

本帖子中包含更多资源

本帖子中包含更多资源

5

kill all

杀剩的

浏览过的版块