24个样本 解压后扫描此包会引起小红伞V8扫描器崩溃

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49298
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\1

C:\Documents and Settings\Uhthn\Desktop\1\a1.exe - Infected TROJAN-PSW.ONLINEGAMES.99 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a10.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\1\a11.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a12.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a13.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\1\a14.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a15.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\1\a16.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a17.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\1\a18.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a19.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a2.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a20.exe - Infected BACKDOOR.DELF.4 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a21.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.G - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a22.exe - Infected TROJAN-PSW.ONLINEGAMES.121 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a23.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\a3.exe - Infected TROJAN-PSW.ONLINEGAMES.U - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a4.exe - Suspected WIN32.TROJAN-DOWNLOADER (HTTP://...)
C:\Documents and Settings\Uhthn\Desktop\1\a5.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\1\a7.exe - Infected TROJAN-DOWNLOADER.AGENT.5 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a8.exe - Infected TROJAN-PSW.ONLINEGAMES.121 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\a9.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\1\aTxHMoU.Exe - Infected WIN32.TROJAN.DELF.5 - Deleted
C:\Documents and Settings\Uhthn\Desktop\1\aupxdnd.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted

24 Files scanned
9 Infected files found
15 Suspected files found
0 Files disinfected
9 Files deleted

clc78223

NOD32全杀光了

gwazy

Licensed to:      AntiVir 8 - Betatest
Serial number:    0000149992-ADJIE-0001
Platform:         Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:         Administrator
Computer name:    225E20D6AC314C0

Version information:
BUILD.DAT     : 8.0.00.41       24707 Bytes  2007-11-28 10:56:00
AVSCAN.EXE    : 7.1.0.10       290856 Bytes  2007-11-29 11:47:40
AVSCAN.DLL    : 8.0.0.1         53288 Bytes  2007-11-22 10:05:04
LUKE.DLL      : 7.1.0.7        127016 Bytes  2007-10-29 06:20:06
LUKERES.DLL   : 7.0.6.1         10280 Bytes  2007-11-22 10:05:08
ANTIVIR0.VDF  : 6.40.0.0     11030528 Bytes   2007-7-18 03:33:34
ANTIVIR1.VDF  : 7.0.0.0       1640448 Bytes   2007-9-13 03:33:36
ANTIVIR2.VDF  : 7.0.1.0       1393152 Bytes  2007-11-23 09:42:34
ANTIVIR3.VDF  : 7.0.1.25       188928 Bytes  2007-11-29 04:40:50
Version of Engine: 8.0.0.43  
AVVDF.DLL     : 8.0.0.0        102400 Bytes  2007-11-29 11:47:40
AVSCRIPT.DLL  : 8.0.0.0        204800 Bytes  2007-11-22 08:49:08
AVSCN.DLL     : 8.0.0.1        102400 Bytes  2007-11-22 08:49:08
AVRDL.DLL     : 8.0.0.0        348160 Bytes   2007-9-25 02:55:30
AVPACK.DLL    : 8.0.0.0        344104 Bytes  2007-11-22 09:09:58
AVOFFICE.DLL  : 8.0.0.0        184320 Bytes  2007-11-22 08:49:08
AVHEUR.DLL    : 8.0.0.0        880640 Bytes  2007-11-22 08:49:08
AVHELP.DLL    : 8.0.0.0         98304 Bytes  2007-11-22 09:09:02
AVGEN.DLL     : 8.0.0.0        278528 Bytes  2007-11-22 08:49:06
AVEMU.DLL     : 8.0.0.0        405504 Bytes  2007-11-22 08:49:06
AVCORE.DLL    : 8.0.0.1        139264 Bytes  2007-11-29 11:47:16
AVWINLL.DLL   : 1.0.0.7         14376 Bytes   2007-2-26 02:36:28
AVPREF.DLL    : 7.0.2.2         25640 Bytes   2007-7-17 23:39:18
AVREP.DLL     : 7.0.0.1        155688 Bytes    2007-8-7 23:15:24
AVREG.DLL     : 7.0.1.6         30760 Bytes   2007-7-17 23:17:08
AVARKT.DLL    : 1.0.0.19       278568 Bytes   2007-8-14 07:33:26
AVEVTLOG.DLL  : 7.0.0.20        86056 Bytes   2007-7-17 23:10:20
SQLITE3.DLL   : 3.3.17.1       339968 Bytes   2007-7-23 01:37:22
SMTPLIB.DLL   : 1.2.0.17        28712 Bytes   2007-7-30 03:10:26
NETNT.DLL     : 7.0.0.0          7720 Bytes    2007-3-8 03:09:44
RCIMAGE.DLL   : 7.0.1.32      2875432 Bytes  2007-11-22 10:05:58
RCTEXT.DLL    : 7.0.60.2        86056 Bytes    2007-9-5 05:16:26

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\258bbb44.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: C:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: high

Start of the scan: 2007年11月30日星期五  12:51

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\s[1].part2.rar'
C:\Documents and Settings\Administrator\桌面\s[1].part2.rar
  [0] Archive type: RAR
  --> s\a4.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
    --> s\a5.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Spy.Gen
    --> s\a7.exe
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
  --> s\a8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FSPM.Gen
    --> s\a9.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ijw
  --> s\aTxHMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> s\aupxdnd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\s[1].part1.rar'
C:\Documents and Settings\Administrator\桌面\s[1].part1.rar
  [0] Archive type: RAR
  --> s\a1.exe
      [DETECTION] Is the Trojan horse TR/Agent.czq
    --> s\a10.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
    --> s\a11.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.itq
    --> s\a12.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iza
    --> s\a13.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
    --> s\a14.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iuw
    --> s\a15.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
    --> s\a16.exe
          [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.ikc
    --> s\a17.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iwx.1
    --> s\a18.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iso
    --> s\a19.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/FWDisable.22884
    --> s\a2.exe
          [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> s\a20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
    --> s\a21.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> s\a22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FSPM.Gen
    --> s\a23.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/FWDisable.24932
      [INFO]      The file was deleted!


End of the scan: 2007年11月30日星期五  12:52
Used time: 00:15 min

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     21 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      6 Files not concerned
     16 Archives were scanned
      0 Warnings
      0 Notes

NobleT

F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2007-11-30, 2:48

Scan name: [Custom Scan]
Path to scan: F:\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2007-11-30, 17:19:01
---------------------------------------------------------------------

[Clean]        Boot sector on drive F:
[Clean]        Boot sector on drive E:
[Clean]        Boot sector on drive D:
[Clean]        Boot sector on drive G:
[Clean]        Boot sector on drive C:
[Clean]        Master Boot Record on disk 0
[Clean]        F:\aa_00001.jpg
[Clean]        F:\aa_00002.jpg
[Clean]        F:\aa_00004.jpg
[Clean]        F:\aa_00005.jpg
[Clean]        F:\aa_00010.jpg
[Clean]        F:\aa_00012.jpg
[Clean]        F:\aa_00013.jpg
[Clean]        F:\aa_00014.jpg
[Clean]        F:\aa_00015.jpg
[Clean]        F:\aa_00016.jpg
[Clean]        F:\aa_00022.jpg
[Clean]        F:\aa_00026.jpg
[Clean]        F:\aa_00030.jpg
[Clean]        F:\aa_00031.jpg
[Clean]        F:\aa_00032.jpg
[Clean]        F:\aa_00033.jpg
[Clean]        F:\antiLeech.dll
[Clean]        F:\LFS_S2W_KeyGen.exe
[Clean]        F:\RECYCLER\S-1-5-21-746137067-725345543-839522115-1003\desktop.ini
[Clean]        F:\RECYCLER\S-1-5-21-746137067-725345543-839522115-1003\INFO2
[Clean]        F:\s.part1.rar->s\a1.exe->(FSG)
[Found security risk]         <W32/OnlineGames.F.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a10.exe->(UPack)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a11.exe->(UPack)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a12.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        F:\s.part1.rar->s\a13.exe
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a14.exe->(UPack)
[Clean]        F:\s.part1.rar->s\a15.exe->(embedded)->(UPack)
[Clean]        F:\s.part1.rar->s\a15.exe->(UPack)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a16.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        F:\s.part1.rar->s\a17.exe
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a18.exe->(UPack)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a19.exe->(UPack)
[Found security risk]         <W32/OnlineGames.F.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a2.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-114!Eldorado (damaged, not disinfectable)>        F:\s.part1.rar->s\a20.exe->(FSG)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        F:\s.part1.rar->s\a21.exe
[Clean]        F:\s.part1.rar->s\a22.exe->(FSG)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part1.rar->s\a23.exe->(UPack)
[Contains infected objects]        F:\s.part1.rar
[Quarantined]        F:\s.part1.rar->s\a23.exe->(UPack)
[Found possible virus]         <W32/NewMalware-LSU-based!Maximus (not disinfectable)>        F:\s.part2.rar->s\a4.exe
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        F:\s.part2.rar->s\a5.exe
[Found Trojan]         <W32/Trojan.CCJM (exact, not disinfectable)>        F:\s.part2.rar->s\a7.exe->(embedded)
[Clean]        F:\s.part2.rar->s\a8.exe->(FSG)
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        F:\s.part2.rar->s\a9.exe->(UPack)
[Found possible virus]         <W32/SelfStarterInternetTrojan!Maximus (not disinfectable)>        F:\s.part2.rar->s\aTxHMoU.Exe->(UPX)
[Clean]        F:\s.part2.rar->s\aupxdnd.dll
[Contains infected objects]        F:\s.part2.rar
[Quarantined]        F:\s.part2.rar->s\aupxdnd.dll
[Clean]        F:\[isoHunt]_Call_Of_Duty_4-Razor1911_[www.NewTorrents.info].torrent
[Clean]        F:\存档\fdgvd.sav
[Clean]        F:\存档\Hroll\playersave\commondt.sav
[Clean]        F:\存档\Hroll\playersave\playersave
[Clean]        F:\存档\Hroll\playersave2\commondt.sav
[Clean]        F:\存档\Hroll\playersave2\playersave

---------------------------------------------------------------------
Scan ended:        2007-11-30, 17:19:13
Duration:        0:00:11

Scan result:

Scanned files:                 34
Infected objects:         18
Disinfected objects:         0
Quarantined files:         2

chenrui19930

ESS全灭

xiaojinglf

kis扫描的27个不知从何多出了的？
v7的p版24个全部干掉

sexing

kaspersky 怎么扫出28个??

fwhhs

费尔报24 个。。。。。。。。。

BadCrow

趋势互联网套装全杀！

白衣方振眉

江民杀了23个