小包

显示全部楼层 · 发表于 2007-12-8 16:48:17

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jys 檔案: C:\Documents and Settings\kato9096\桌面\168166\10(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyu 檔案: C:\Documents and Settings\kato9096\桌面\168166\11(1).exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyt 檔案: C:\Documents and Settings\kato9096\桌面\168166\11.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyv 檔案: C:\Documents and Settings\kato9096\桌面\168166\12(1).exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyw 檔案: C:\Documents and Settings\kato9096\桌面\168166\13(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyx 檔案: C:\Documents and Settings\kato9096\桌面\168166\14(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyy 檔案: C:\Documents and Settings\kato9096\桌面\168166\15(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyz 檔案: C:\Documents and Settings\kato9096\桌面\168166\16(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jza 檔案: C:\Documents and Settings\kato9096\桌面\168166\17.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzb 檔案: C:\Documents and Settings\kato9096\桌面\168166\18(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzc 檔案: C:\Documents and Settings\kato9096\桌面\168166\19.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzd 檔案: C:\Documents and Settings\kato9096\桌面\168166\3(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jze 檔案: C:\Documents and Settings\kato9096\桌面\168166\4(1)(1).exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzf 檔案: C:\Documents and Settings\kato9096\桌面\168166\5(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzg 檔案: C:\Documents and Settings\kato9096\桌面\168166\6(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzh 檔案: C:\Documents and Settings\kato9096\桌面\168166\7(1).exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzi 檔案: C:\Documents and Settings\kato9096\桌面\168166\8(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jzj 檔案: C:\Documents and Settings\kato9096\桌面\168166\9(1).exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jza 檔案: C:\Documents and Settings\kato9096\桌面\168166\dahua.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyt 檔案: C:\Documents and Settings\kato9096\桌面\168166\hx.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jyt 檔案: C:\Documents and Settings\kato9096\桌面\168166\sanguo.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jza 檔案: C:\Documents and Settings\kato9096\桌面\168166\tl.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jza 檔案: C:\Documents and Settings\kato9096\桌面\168166\wl(1).exe//PE_Patch//UPack

23个，7个沒报,已上报

显示全部楼层 · 发表于 2007-12-8 17:00:32

FS扫描全不报

运行后只有图片没拦截，别的全主防和沙盘拦截了

[ 本帖最后由 gogo8989 于 2007-12-8 17:25 编辑 ]

显示全部楼层 · 发表于 2007-12-8 17:17:55

FS一个都扫不出来下次在虚拟机里装一个运行看看

显示全部楼层 · 发表于 2007-12-8 17:25:19

C:\Users\Wesley\Downloads\30.zip » RAR » wl(1).exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 3(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 4(1)(1).exe - Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 5(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 6(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 7(1).exe - Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 8(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 9(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 10(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 11(1).exe - Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 12(1).exe - Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 13(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 14(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 15(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 16(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 18(1).exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » 19.exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Users\Wesley\Downloads\30.zip » RAR » dahua.exe - a variant of Win32/PSW.OnLineGames.NFC trojan
C:\Users\Wesley\Downloads\30.zip » RAR » tl.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
C:\Users\Wesley\Downloads\30.zip » RAR » wd(2).exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2007-12-8 21:24:46

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Clicker.Win32.PopHot.ep
病毒： AdWare.Win32.Agent.zat
病毒： Trojan.PSW.Win32.AskTao.fn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.21.52

显示全部楼层 · 发表于 2007-12-8 22:15:20

AVAST25

显示全部楼层 · 发表于 2007-12-8 23:49:17

FS病毒库升级到2007-12-08-01依然扫描一个不报

显示全部楼层 · 发表于 2007-12-9 02:22:43

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1056
Paranoia Database - 49719
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\wl(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\3(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\4(1)(1).exe - Suspected TROJAN-DOWNLOADER (HTTP://{REMOVED}/...)
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\5(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\6(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\7(1).exe - Suspected MaliciousScope:GENERIC.MALWARE.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\8(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\9(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\10(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\11(1).exe - Suspected TROJAN-PSW.SMALL.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\11.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\12(1).exe - Infected TROJAN-PSW.GAME.30 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\13(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\14(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\15(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\16(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\17.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\18(1).exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\19.exe - Suspected MaliciousScope:GENERIC.MALWARE.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\bf.gif - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\dahua.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\hx.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Link.gif - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\myself(1).exe - Suspected MaliciousScope:GENERIC.MALWARE.4
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\reader.gif - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\sanguo.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\tl.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\ttpsetupexe.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.8
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\wd(2).exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\wei.exe - Infected BACKDOOR.HUPIGON.10 - Deleted

30 Files scanned
2 Infected files found
25 Suspected files found
0 Files disinfected
2 Files deleted

[病毒样本] 小包

ESET Smart Security

56/3

本帖子中包含更多资源