木马群

显示全部楼层 · 发表于 2007-11-28 11:52:06

不算很新的病毒了

显示全部楼层 · 发表于 2007-11-29 12:56:55

虽然，卡巴没给我回复，但是已经杀到了
这是前面不杀的，现在杀了

已刪除: 特洛伊木馬程式 Backdoor.Win32.Popwin.anu 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\5FD0EB71.EXE
已刪除: 特洛伊木馬程式 Backdoor.Win32.Popwin.anu 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\auto.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwr 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\AVPSrv.dll
已刪除: 病毒 Virus.Win32.AutoRun.agq 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\DC167336.DLL
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iws 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\Kvsc3.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwz 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\LotusHlp.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwt 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\LotusHlp.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwu 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\mppds.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwv 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\msccrt.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iww 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\MsIMMs32.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwx 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\MsPrint32D.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iwy 檔案: C:\Documents and Settings\kato9096\桌面\162906\162906\Trojan\WinForm.dll

显示全部楼层 · 发表于 2007-11-29 14:53:10

毒霸23+2个。

显示全部楼层 · 发表于 2007-11-29 14:57:24

avast found 28 threats

显示全部楼层 · 发表于 2007-11-29 16:47:02

Roboon：都是老病毒，微点杀剩2个，已上报。

显示全部楼层 · 发表于 2007-11-29 16:55:07

信息 2007-11-29  16:54:15 您此次查毒共查出25个病毒以及危险代码
信息 2007-11-29  16:54:15 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件30个
信息 2007-11-29  16:54:15 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2007-11-29  16:54:15 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\auto.exe Win32.RiskWare.PacketsT.vc.15362 跳过，未处理
风险程序 2007-11-29  16:54:15 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\5FD0EB71.EXE Win32.RiskWare.PacketsT.vc.15362 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\WinForm.exE Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\upxdnd.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\upxdnd.dll Win32.PSWTroj.OnLineGames.26112 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\MsPrint32D.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\MsIMMs32.exE Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\MsIMMs32.dll Win32.PSWTroj.OnlineGames.uj.28672 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\msccrt.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\msccrt.dll Win32.PSWTroj.OnlineGames.uh.27136 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\mppds.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\mppds.dll Win32.PSWTroj.OnlineGames.ug.28160 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\LotusHlp.exe Win32.PSWTroj.OnlineGames.us.16065 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\LotusHlp.dll Win32.PSWTroj.OnlineGames.lh.25088 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\Kvsc3.exE Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\Kvsc3.dll Win32.PSWTroj.OnlineGames.ua.26624 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\k119616435515.exe Win32.PSWTroj.OnLineGames.49664 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\GenProtect.exe Win32.PSWTroj.OnlineGames.uu.15346 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\GenProtect.dll Win32.PSWTroj.OnlineGames.ud.127488 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\DbgHlp32.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\DbgHlp32.dll Win32.PSWTroj.OnLineGames.28160 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\cmdbcs.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\cmdbcs.dll Win32.PSWTroj.OnLineGames.27648 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\AVPSrv.exE Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-11-29  16:54:14 C:\Documents and Settings\Norways Winter\桌面\Trojan.rar\Trojan\AVPSrv.dll Win32.PSWTroj.OnlineGames.uq.26624 跳过，未处理

显示全部楼层 · 发表于 2007-11-29 21:00:18

红伞的战果
Start of the scan: 2007年11月29日  20:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\gg\桌面\Trojan.rar'
C:\Documents and Settings\gg\桌面\Trojan.rar
  [0] Archive type: RAR
  --> Trojan\5FD0EB71.EXE
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> Trojan\auto.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> Trojan\AVPSrv.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\AVPSrv.exE
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\cmdbcs.dll
   [DETECTION] Is the Trojan horse TR/PSW.27648.1
  --> Trojan\cmdbcs.exe
   [DETECTION] Is the Trojan horse TR/PSW.27648.1
  --> Trojan\DbgHlp32.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.isb
  --> Trojan\DbgHlp32.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.isb
  --> Trojan\DC167336.DLL
   [DETECTION] Is the Trojan horse TR/Autorun.CA
  --> Trojan\GenProtect.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ivg
  --> Trojan\GenProtect.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> Trojan\k119616435515.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\Kvsc3.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\Kvsc3.exE
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\LotusHlp.dll
   [DETECTION] Is the Trojan horse TR/PSW.25088
  --> Trojan\LotusHlp.exe
   [DETECTION] Is the Trojan horse TR/PSW.25088
  --> Trojan\mppds.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> Trojan\mppds.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> Trojan\msccrt.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\msccrt.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\MsIMMs32.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\MsIMMs32.exE
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\MsPrint32D.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwx
  --> Trojan\MsPrint32D.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwx
  --> Trojan\upxdnd.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\upxdnd.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Trojan\WinForm.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwy
  --> Trojan\WinForm.exE
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwy
   [INFO]    The file was moved to '47bdb7b8.qua'!

显示全部楼层 · 发表于 2007-11-29 22:03:16

驱逐舰发现28个

显示全部楼层 · 发表于 2007-11-29 22:06:27

驱逐舰发现28个

显示全部楼层 · 发表于 2007-11-29 22:30:13

C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\5FD0EB71.EXE - Win32/TrojanDownloader.Flux trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\auto.exe - Win32/TrojanDownloader.Flux trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\autorun.inf - INF/Autorun virus - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\AVPSrv.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\AVPSrv.exE - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\cmdbcs.dll - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\cmdbcs.exe - Win32/PSW.OnLineGames.YA trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\DbgHlp32.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\DbgHlp32.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\DC167336.DLL - Win32/TrojanDownloader.Flux trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\GenProtect.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\GenProtect.exe - Win32/PSW.OnLineGames.YA trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\k119616435515.exe - Win32/PSW.WOW.WU trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\Kvsc3.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\Kvsc3.exE - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\LotusHlp.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\LotusHlp.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\mppds.dll - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\mppds.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\msccrt.dll - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\msccrt.exe - Win32/PSW.OnLineGames.YA trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\MsIMMs32.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\MsIMMs32.exE - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\MsPrint32D.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\MsPrint32D.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\upxdnd.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\upxdnd.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\WinForm.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar » RAR » Trojan\WinForm.exE - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\Trojan.rar - multiple threats - deleted - quarantined

[病毒样本] 木马群

回复 4楼 kato9096 的帖子

本帖子中包含更多资源

本帖子中包含更多资源