毒网更新18个

qianwenxiang

Graybird

Starting the file scan:

Begin scan in 'E:\120402.part1.rar'
E:\120402.part1.rar
  [0] Archive type: RAR
  --> setup_file.exe
      [DETECTION] Is the Trojan horse TR/EliteBar.H.1
  --> 100.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.ajm
  --> 101.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 102.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ges
  --> 103.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 104.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 105.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 106.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gey
  --> 107.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 108.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 109.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fnn
  --> 110.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 111.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 112.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.22620.1
  --> 113.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> dogdel.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.19968.14
  --> arpkk.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.318861
      [1] Archive type: RAR SFX (self extracting)
      --> Vml.exe
          [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
Begin scan in 'E:\120402.part2.rar'


End of the scan: 2007年12月4日  22:17
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     18 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      3 Archives were scanned
      0 Warnings
      1 Notes

aerbeisi

18个

检测到：木马程序 Trojan.Win32.EliteBar.h        文件　: F:\du\120402[1]\setup_file.exe
检测到：木马程序 Trojan-PSW.Win32.QQPass.ajl        文件　: F:\du\120402[1]\100.exe//UPX
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.gaa        文件　: F:\du\120402[1]\101.exe//PE_Patch.UPX//UPX//PE_Patch
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.hqh        文件　: F:\du\120402[1]\102.exe
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.fym        文件　: F:\du\120402[1]\103.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.gfe        文件　: F:\du\120402[1]\104.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.gfb        文件　: F:\du\120402[1]\105.exe
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.get        文件　: F:\du\120402[1]\106.exe//UPack
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.fts        文件　: F:\du\120402[1]\107.exe//PE_Patch.UPX//UPX//PE_Patch
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.ftr        文件　: F:\du\120402[1]\108.exe//PE_Patch.UPX//UPX//PE_Patch
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.hqh        文件　: F:\du\120402[1]\109.exe
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.fbm        文件　: F:\du\120402[1]\110.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.ghq        文件　: F:\du\120402[1]\111.exe//PE_Patch.UPX//UPX//PE_Patch
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.fzb        文件　: F:\du\120402[1]\112.exe//UPack
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.hqh        文件　: F:\du\120402[1]\113.exe
检测到：恶意程序 HackTool.Win32.Jakuz.f        文件　: F:\du\120402[1]\dogdel.exe
检测到：风险软件 not-a-virus:NetTool.Win32.Agent.b        文件　: F:\du\120402[1]\arpkk.exe//data.rar/Vml.exe
检测到：木马程序 Trojan.BAT.Agent.be        文件　: F:\du\120402[1]\arpkk.exe//data.rar/run.bat

wangjay1980

18
detected: Trojan program Trojan.Win32.EliteBar.h        File: E:\Ñù±¾\new\setup_file.exe
detected: Trojan program Trojan-PSW.Win32.QQPass.ajl        File: E:\Ñù±¾\new\100.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.gaa        File: E:\Ñù±¾\new\101.exe//PE_Patch.UPX//UPX//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: E:\Ñù±¾\new\102.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fym        File: E:\Ñù±¾\new\103.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.gfe        File: E:\Ñù±¾\new\104.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.gfb        File: E:\Ñù±¾\new\105.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.get        File: E:\Ñù±¾\new\106.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fts        File: E:\Ñù±¾\new\107.exe//PE_Patch.UPX//UPX//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ftr        File: E:\Ñù±¾\new\108.exe//PE_Patch.UPX//UPX//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: E:\Ñù±¾\new\109.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbm        File: E:\Ñù±¾\new\110.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ghq        File: E:\Ñù±¾\new\111.exe//PE_Patch.UPX//UPX//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fzb        File: E:\Ñù±¾\new\112.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: E:\Ñù±¾\new\113.exe
detected: malware HackTool.Win32.Jakuz.f        File: E:\Ñù±¾\new\dogdel.exe
detected: riskware not-a-virus:NetTool.Win32.Agent.b        File: E:\Ñù±¾\new\arpkk.exe//data.rar/Vml.exe
detected: Trojan program Trojan.BAT.Agent.be        File: E:\Ñù±¾\new\arpkk.exe//data.rar/run.bat

nosferatu

解压后红伞扫描17个，漏掉wmp11exe.exe
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\120402'
C:\Documents and Settings\Administrator\桌面\120402\100.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.ajm
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\101.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\102.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ges
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\103.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\104.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\105.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\106.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gey
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\107.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\108.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\109.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fnn
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\110.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\111.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\112.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.22620.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\113.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\arpkk.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.318861
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\dogdel.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.19968.14
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\120402\setup_file.exe
      [DETECTION] Is the Trojan horse TR/EliteBar.H.1
      [INFO]      The file was deleted!


End of the scan: 星期二 2007年12月4日  22:24
Used time: 00:10 min

The scan has been done completely.

      1 Scanning directories
     18 Files were scanned
     17 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     17 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

nosferatu

AVG Anti-Spyware - Scan Report（16个）
---------------------------------------------------------

+ Created at:        22:31:10 2007-12-4

+ Scan result:       



C:\Documents and Settings\Administrator\桌面\120402\dogdel.exe -> Not-A-Virus.HackTool.Win32.Jakuz.f : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\setup_file.exe -> Trojan.EliteBar.h : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\106.exe -> Trojan.OnLineGames.dwe : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\110.exe -> Trojan.OnLineGames.eul : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\112.exe -> Trojan.OnLineGames.eza : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\107.exe -> Trojan.OnLineGames.fjn : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\101.exe -> Trojan.OnLineGames.fmd : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\108.exe -> Trojan.OnLineGames.fmd : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\103.exe -> Trojan.OnLineGames.fym : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\105.exe -> Trojan.OnLineGames.gfb : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\104.exe -> Trojan.OnLineGames.gfe : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\111.exe -> Trojan.OnLineGames.ghq : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\102.exe -> Trojan.OnLineGames.hqh : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\109.exe -> Trojan.OnLineGames.hqh : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\113.exe -> Trojan.OnLineGames.hqh : Cleaned.
C:\Documents and Settings\Administrator\桌面\120402\100.exe -> Trojan.QQPass.ajl : Cleaned.


::Report end

jimmyleo

两包一起扫

D:\Download\Scan\101.exe >>> suspicion for Trojan-PSW.Win32.OnLineGames.gaa ( 0A93216A 07A6EEBB 0023B8E5 00276048 15360)
D:\Download\Scan\102.exe - Suspicion for Virus.Win32.PE_Type1(danger level 75%)
D:\Download\Scan\105.exe >>> suspicion for Trojan-PSW.Win32.OnLineGames.gem ( 0A8A477A 03614B33 001B7848 0020077A 26624)
D:\Download\Scan\107.exe >>> suspicion for Trojan-PSW.Win32.OnLineGames.fts ( 0AD1FD3E 062C8A41 002489C3 00214E78 18432)
D:\Download\Scan\109.exe >>> suspicion for Trojan-PSW.Win32.OnLineGames.hqh ( 0E3ADE42 0C9B1EC9 002A1C6C 0024792D 14796)
D:\Download\Scan\113.exe - Suspicion for Virus.Win32.PE_Type1(danger level 75%)
D:\Download\Scan\83122.exe >>>>> Trojan-Clicker.Win32.Small.jf  deletion disabled by settings
D:\Download\Scan\acdt-pid67N.exe >>> suspicion for Trojan-Clicker.Win32.Small.jf ( 09BA228B 0EF0FFEA 00244262 001B2CFF 43063)
D:\Download\Scan\Porno.exe >>>>> Trojan-Clicker.Win32.Agent.ip  deletion disabled by settings
D:\Download\Scan\SetupInstRe.exe >>>>> AdvWare.Win32.WhenU.a  deletion disabled by settings
D:\Download\Scan\setup_file.exe >>>>> Trojan.Win32.EliteBar.h  deletion disabled by settings
D:\Download\Scan\user4.exe >>> suspicion for Trojan-Downloader.Win32.Small.fvt ( 0786A6B8 166079D2 0027E3C5 00000000 9769)
D:\Download\Scan\win.exe >>>>> Trojan.Win32.Agent.qt  deletion disabled by settings

scottxzt

木马名称:Trojan.Win32.EliteBar.l

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\SETUP_FILE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-PSW.Win32.QQPass.gjd

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\100.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ted

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\101.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-PSW.Win32.OnLineGames.tao

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\102.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.teh

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\103.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sza

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\104.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.tei

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\105.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-PSW.Win32.OnLineGames.tej

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\106.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sxf

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\107.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sxh

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\108.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.tkd

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\109.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.swz

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\110.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-PSW.Win32.OnLineGames.tbk

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\111.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sxe

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\112.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?马名称:Trojan-PSW.Win32.OnLineGames.teg

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\113.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:HackTool.Win32.Jakuz.a

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\DOGDEL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

欠妳緈諨

ESS16
D:\病毒测试\解压样本\100.exe - probably a variant of Win32/AutoRun.Q worm
D:\病毒测试\解压样本\101.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\102.exe - Win32/PSW.OnLineGames.NGU trojan
D:\病毒测试\解压样本\103.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\病毒测试\解压样本\104.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\105.exe - Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\106.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\解压样本\107.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\病毒测试\解压样本\108.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\109.exe - Win32/PSW.OnLineGames.NGU trojan
D:\病毒测试\解压样本\110.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\111.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\解压样本\112.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\解压样本\113.exe - Win32/PSW.OnLineGames.NGU trojan
D:\病毒测试\解压样本\arpkk.exe » RAR » Vml.exe - Win32/NetTool.Agent.B application
D:\病毒测试\解压样本\setup_file.exe - Win32/TrojanDropper.Agent.TV trojan

scottxzt

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\ARPKK.EXE
被修改文件:
C:\WINDOWS\SYSTEM32\NPPTOOLS.DLL程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\ARPKK.EXE
是否删除病毒程序及其衍生物?
是否阻止文件被修改?