49个

显示全部楼层 · 发表于 2007-12-2 18:05:38

C:\ABC\样本.rar:\djatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\dthxatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdfyi32.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\gdjzi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdmsi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdwdi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdwli32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdwmi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdxwtwi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdzxi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gjatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\4.exe - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\5.exe - 特征码 'Packed.Win32.Klone.af' 被发现
C:\ABC\样本.rar:\6.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\7.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\8.exe - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\9.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.iep' 被发现
C:\ABC\样本.rar:\10.exe - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\11.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\12.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\13.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\14.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\15.exe - 可疑代码段被发现 (Level: 95)
C:\ABC\样本.rar:\16.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\17.exe - 特征码 'Packed.Win32.Klone.af' 被发现
C:\ABC\样本.rar:\18.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\19.exe - 特征码 'Packed.Win32.Klone.af' 被发现
C:\ABC\样本.rar:\20.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\21.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\22.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.idj' 被发现
C:\ABC\样本.rar:\23.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\24.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hzt' 被发现
C:\ABC\样本.rar:\LYLOADER.EXE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\LYMANGR.DLL - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\MSDEG32.DLL - 特征码 'Generic.PWS.Games.3' 被发现
C:\ABC\样本.rar:\GenProtect.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\样本.rar:\GenProtect.exE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\NVDispDrv.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\样本.rar:\qqhxatl.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.hde' 被发现
C:\ABC\样本.rar:\qqsgatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\sqmapi32.dll - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\SVCCtrl01.dll - 特征码 'Virus.Win32.Nilage.JY' 被发现
C:\ABC\样本.rar:\tlatl.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\videodevice.dll - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\0.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\1.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqi' 被发现
C:\ABC\样本.rar:\3.exe - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\LotusHlp.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.hzt' 被发现
C:\ABC\样本.rar:\cmdbcs.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.iax' 被发现
C:\ABC\样本.rar

显示全部楼层 · 发表于 2007-12-2 18:09:36

KAV7.0报46个

显示全部楼层 · 发表于 2007-12-2 18:14:01

49个瑞星

显示全部楼层 · 发表于 2007-12-2 18:21:25

G:\Users\Administrator\Desktop\样本.rar » RAR » djatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » dthxatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdfyi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdjzi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdmsi32.dll - a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdwdi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdwli32.dll - a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdwmi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdxwtwi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gdzxi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » gjatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 4.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 6.exe - Win32/PSW.WOW.WU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 7.exe - Win32/PSW.WOW.WU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 8.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 9.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 10.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 11.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 12.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 13.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 14.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 15.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 16.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 17.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 18.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 19.exe - Win32/PSW.OnLineGames.NIF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 20.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 21.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 22.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 23.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 24.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » LYLOADER.EXE - Win32/PSW.Agent.NEC trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » MSDEG32.DLL - Win32/PSW.OnLineGames.DVV trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » GenProtect.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » GenProtect.exE - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » NVDispDrv.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » qqhxatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » qqsgatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » sqmapi32.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » SVCCtrl01.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » tlatl.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » videodevice.dll - Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 0.exe - Win32/Delf.NIG trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 1.exe - Win32/PSW.Agent.NEC trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » 3.exe - Win32/PSW.OnLineGames.NGU trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » LotusHlp.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar » RAR » cmdbcs.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\样本.rar - multiple threats - deleted - quarantined

49

显示全部楼层 · 发表于 2007-12-2 18:22:25

AVG AV 49ge

显示全部楼层 · 发表于 2007-12-2 18:23:43

ESS全报

显示全部楼层 · 发表于 2007-12-2 19:42:10

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.DJOnline.as
病毒： Trojan.PSW.Win32.GameOnline.aea
病毒： Trojan.PSW.Win32.FYOnline.ds
病毒： Trojan.PSW.Win32.ZeroOnline.cn
病毒： Trojan.PSW.Win32.WoWar.afk
病毒： Trojan.PSW.Win32.QQPass.yxt
病毒： Trojan.PSW.Win32.GameOnline.ant
病毒： Trojan.PSW.Win32.WorldOnline.mb
病毒： Trojan.PSW.Win32.GameOnline.aec
病毒： Trojan.PSW.Win32.GameOnline.ajr
病毒： Trojan.PSW.Win32.GameOnline.zm
病毒： Trojan.PSW.Win32.QQPass.yxt
病毒： Trojan.PSW.Win32.GameOnline.aha
病毒： Trojan.PSW.Win32.GameOnline.ajs
病毒： Trojan.PSW.Win32.GameOnline.ahb
病毒： Trojan.PSW.Win32.WoWar.afm
病毒： Trojan.PSW.Win32.GameOnline.akj
病毒： Trojan.PSW.Win32.SunOnline.fy
病毒： Trojan.PSW.Win32.GameOnline.zm
病毒： Trojan.PSW.Win32.DJOnline.as
病毒： Trojan.PSW.Win32.QQSG.aa
病毒： Trojan.PSW.Win32.QQHX.tru
病毒： Trojan.PSW.Win32.ZhuXian.ec
病毒： Trojan.PSW.Win32.ZhengTu.ylt
病毒： Trojan.PSW.Win32.GameOnline.akv
病毒： Trojan.PSW.Win32.WoWar.afd
病毒： Trojan.PSW.Win32.GameOnline.aen
病毒： Trojan.PSW.Win32.WorldOnline.mb
病毒： Trojan.PSW.Win32.GameOnline.aeh
病毒： Trojan.PSW.Win32.WorldOnline.ma
病毒： Trojan.PSW.Win32.GameOnline.aei
病毒： Trojan.PSW.Win32.OnlineGames.hzt
病毒： Trojan.PSW.Win32.XYOnline.hy
病毒： Trojan.PSW.Win32.XYOnline.jy
病毒： Trojan.PSW.Win32.XYOnline.rv
病毒： Trojan.PSW.Win32.GameOnline.akk
病毒： Trojan.PSW.Win32.GameOnline.akk
病毒： Trojan.PSW.Win32.GameOnline.akv
病毒： Trojan.PSW.Win32.QQHX.tru
病毒： Trojan.PSW.Win32.QQSG.aa
病毒： Trojan.PSW.Win32.GameOnline.uz
病毒： Trojan.PSW.Win32.GameOnline.afu
病毒： Trojan.PSW.Win32.TLOnline.jjk
病毒： Trojan.PSW.Win32.GameOnline.ahb
病毒： Trojan.PSW.Win32.GameOnline.ix
病毒： Dropper.Win32.XYOnline.v
病毒： Trojan.PSW.Win32.GameOnline.ahg
病毒： Trojan.PSW.Win32.GameOnline.aha

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.20.62

显示全部楼层 · 发表于 2007-12-2 19:44:27

已刪除: 特洛伊木馬程式 Trojan.Win32.KillAV.ge 檔案: C:\Documents and Settings\kato9096\桌面\165348\0.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqi 檔案: C:\Documents and Settings\kato9096\桌面\165348\1.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\10.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\11.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\12.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\13.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\14.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ivb 檔案: C:\Documents and Settings\kato9096\桌面\165348\15.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\16.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ihi 檔案: C:\Documents and Settings\kato9096\桌面\165348\17.exe//NSPack//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\18.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Nilage.bty 檔案: C:\Documents and Settings\kato9096\桌面\165348\19.exe//NSPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iox 檔案: C:\Documents and Settings\kato9096\桌面\165348\20.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\21.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.idj 檔案: C:\Documents and Settings\kato9096\桌面\165348\22.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\23.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.isb 檔案: C:\Documents and Settings\kato9096\桌面\165348\24.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.idj 檔案: C:\Documents and Settings\kato9096\桌面\165348\3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh 檔案: C:\Documents and Settings\kato9096\桌面\165348\4.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iaw 檔案: C:\Documents and Settings\kato9096\桌面\165348\5.exe//NSPack//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.axx 檔案: C:\Documents and Settings\kato9096\桌面\165348\6.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.axx 檔案: C:\Documents and Settings\kato9096\桌面\165348\7.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iet 檔案: C:\Documents and Settings\kato9096\桌面\165348\8.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iep 檔案: C:\Documents and Settings\kato9096\桌面\165348\9.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iax 檔案: C:\Documents and Settings\kato9096\桌面\165348\cmdbcs.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ird 檔案: C:\Documents and Settings\kato9096\桌面\165348\djatl.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqo 檔案: C:\Documents and Settings\kato9096\桌面\165348\dthxatl.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iff 檔案: C:\Documents and Settings\kato9096\桌面\165348\gdfyi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iew 檔案: C:\Documents and Settings\kato9096\桌面\165348\gdmsi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iox 檔案: C:\Documents and Settings\kato9096\桌面\165348\gdwmi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqk 檔案: C:\Documents and Settings\kato9096\桌面\165348\gdxwtwi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iez 檔案: C:\Documents and Settings\kato9096\桌面\165348\gdzxi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iha 檔案: C:\Documents and Settings\kato9096\桌面\165348\GenProtect.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.isb 檔案: C:\Documents and Settings\kato9096\桌面\165348\GenProtect.exE
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hhi 檔案: C:\Documents and Settings\kato9096\桌面\165348\gjatl.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hzt 檔案: C:\Documents and Settings\kato9096\桌面\165348\LotusHlp.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpl 檔案: C:\Documents and Settings\kato9096\桌面\165348\LYLOADER.EXE//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpo 檔案: C:\Documents and Settings\kato9096\桌面\165348\LYMANGR.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpp 檔案: C:\Documents and Settings\kato9096\桌面\165348\MSDEG32.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ihi 檔案: C:\Documents and Settings\kato9096\桌面\165348\NVDispDrv.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hde 檔案: C:\Documents and Settings\kato9096\桌面\165348\qqhxatl.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hkz 檔案: C:\Documents and Settings\kato9096\桌面\165348\qqsgatl.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.guz 檔案: C:\Documents and Settings\kato9096\桌面\165348\sqmapi32.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hys 檔案: C:\Documents and Settings\kato9096\桌面\165348\SVCCtrl01.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hhj 檔案: C:\Documents and Settings\kato9096\桌面\165348\tlatl.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ibd 檔案: C:\Documents and Settings\kato9096\桌面\165348\videodevice.dll//UPack

46个,3个沒报

[ 本帖最后由 kato9096 于 2007-12-2 19:46 编辑 ]

显示全部楼层 · 发表于 2007-12-2 20:52:07

小A 48个

显示全部楼层 · 发表于 2007-12-2 20:56:45

UGUARD->48个，GenProtect.dll不报
KIS 8->49个

UGUARD:
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>0.exe 检测到 Packed.Generic.UPack
[扫描] [Level 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>1.exe//Crypt3 检测到 Trojan.OnLineGames.dtr
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>10.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>11.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>12.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>13.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>14.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>15.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>16.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>17.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>18.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>19.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>20.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>21.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>22.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>23.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>24.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>3.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>4.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>5.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>6.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>7.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>8.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>9.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>cmdbcs.dll 检测到 Packed.Unknown.ca53
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>djatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>dthxatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdfyi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdjzi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdmsi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdwdi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdwli32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdwmi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdxwtwi32.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gdzxi32.dll 检测到 Generic.nFile
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>GenProtect.exE 检测到 Packed.Generic.Modified
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>gjatl.dll 检测到 Generic.nFile
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>LotusHlp.dll 检测到 Packed.Unknown.ca53
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>LYLOADER.EXE 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>LYMANGR.DLL 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>MSDEG32.DLL 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>NVDispDrv.dll 检测到 Packed.Unknown.ca53
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>qqhxatl.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>qqsgatl.dll 检测到 Generic.nFile
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>sqmapi32.dll 检测到 Packed.Generic.UPack
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>SVCCtrl01.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>tlatl.dll 检测到 Generic.nFile
[扫描] [变形壳检测] 在 F:\Users\Administrator\Desktop\KAV\样本.rar>>videodevice.dll 检测到 Packed.Generic.UPack
检测到了 47 个未知的恶意程序，请上报。
任务扫描完成。共耗费的时间：0-00-00 00:00:00:0718，共扫描的文件数量：51，共扫描到的威胁数量：48，威胁率：94.12%，扫描速率： 71.03 文件/秒，扫描速度： 2094.61 千字节/秒，共扫描了 1503.93 千字节。

KIS8:
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/djatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/djatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/dthxatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdfyi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdjzi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdmsi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdwdi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdwli32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdwmi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdxwtwi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gdzxi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/gjatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/6.exe//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/7.exe//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/8.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/9.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/15.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/20.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/22.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/24.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/LYLOADER.EXE//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/LYMANGR.DLL//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/MSDEG32.DLL//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/GenProtect.exE//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/qqsgatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/sqmapi32.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/tlatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/videodevice.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/0.exe//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/3.exe//PE_Patch//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/djatl.dll//UPack Riskware Rare.Packer
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/4.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/5.exe//NSPack//PE_Patch Trojan program Trojan-PSW.Win32.OnLineGames.iaw
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/10.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/11.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/12.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/13.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/14.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/16.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/17.exe//NSPack//PE_Patch Trojan program Trojan-PSW.Win32.OnLineGames.ihi
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/18.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/19.exe//NSPack Trojan program Trojan-PSW.Win32.Nilage.bty
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/21.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/23.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqh
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/GenProtect.dll Trojan program Trojan-PSW.Win32.OnLineGames.iha
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/NVDispDrv.dll Trojan program Trojan-PSW.Win32.OnLineGames.ihi
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/qqhxatl.dll Trojan program Trojan-PSW.Win32.OnLineGames.hde
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/SVCCtrl01.dll Trojan program Trojan-PSW.Win32.OnLineGames.hys
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/1.exe Trojan program Trojan-PSW.Win32.OnLineGames.hqi
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/LotusHlp.dll Trojan program Trojan-PSW.Win32.OnLineGames.hzt
Detected F:\Users\Administrator\Desktop\KAV\样本.rar/cmdbcs.dll Trojan program Trojan-PSW.Win32.OnLineGames.iax

[病毒样本] 49个

本帖子中包含更多资源

本帖子中包含更多资源

91/49