[MD5: 534818]

显示全部楼层 · 发表于 2007-12-9 09:37:01

[MD5: 534818]

显示全部楼层 · 发表于 2007-12-9 09:38:05

Starting the file scan:

Begin scan in 'E:\a.rar'
E:\a.rar
  [0] Archive type: RAR
  --> a.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-12-9 09:51:01

detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Owner\×ÀÃæ\a.rar/a.exe

已上报

显示全部楼层 · 发表于 2007-12-9 09:52:01

已删除: 病毒 Heur.Trojan.Generic 文件: F:\a.rar/a.exe

显示全部楼层 · 发表于 2007-12-9 10:06:15

Scan Log
Version of virus signature database: 2711 (20071207)
Date: 2007-12-9 Time: 10:07:00
Scanned disks, folders and files: F:\virus\a.rar
F:\virus\a.rar » RAR » a.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 10:07:03 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2007-12-9 10:14:25

显示全部楼层 · 发表于 2007-12-9 10:16:43

Starting the file scan:

Begin scan in 'E:\dload.rar'
E:\dload.rar
  [0] Archive type: RAR
  --> 0j560u3i.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1akhCkdC.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3lUggGfv.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 6BavLACB.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jro
  --> BuiSROv9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jlc.2
  --> cWKPB8X7.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jrd
  --> Fpksgv4m.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> GfSL9tk2.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> hzNBdE4j.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> kCNg2rUx.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> lDCv5IRJ.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> naEVnmPz.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jsl
  --> NzxpRfSk.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jft
  --> sbjuceER.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> Uc5tNoTE.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> XffYtuun.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> YUWJ4laM.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLiGames.jqp
  --> ZmBOXCki.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

End of the scan: 2007年12月9日  10:17
Used time: 00:30 min

The scan has been done completely.

   0 Scanning directories
   20 Files were scanned
   19 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-9 10:17:00

G:\Users\Administrator\Desktop\a.rar » RAR » a.exe - probably a variant of Win32/Genetik trojan

G:\Users\Administrator\Desktop\dload.rar » RAR » 0j560u3i.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » 1akhCkdC.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » 3lUggGfv.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » 6BavLACB.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » BuiSROv9.exe - Win32/PSW.OnLineGames.NJF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » cWKPB8X7.exe - Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » Fpksgv4m.exe - a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » GfSL9tk2.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » lDCv5IRJ.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » naEVnmPz.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » NzxpRfSk.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » sbjuceER.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » Uc5tNoTE.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » XffYtuun.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » YUWJ4laM.exe - a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » ZmBOXCki.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar » RAR » svchost.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\dload.rar - multiple threats - deleted - quarantined

显示全部楼层 · 发表于 2007-12-9 10:40:57

C:\Documents and Settings\gho\桌面\a.exe W32/Autorun.worm.w (Virus)

显示全部楼层 · 发表于 2007-12-9 10:42:50

2007-12-9 10:41:38 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\0j560u3i.exe New Malware.n (Trojan)
2007-12-9 10:41:38 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\1akhCkdC.exe New Malware.aj (Trojan)
2007-12-9 10:41:40 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\6BavLACB.exe New Malware.n (Trojan)
2007-12-9 10:41:40 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\BuiSROv9.exe New Malware.aj (Trojan)
2007-12-9 10:41:41 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\cWKPB8X7.exe New Malware.n (Trojan)
2007-12-9 10:41:42 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\GfSL9tk2.exe New Malware.aj (Trojan)
2007-12-9 10:41:46 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\kCNg2rUx.exe New Malware.aj (Trojan)
2007-12-9 10:41:47 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\lDCv5IRJ.exe New Malware.aj (Trojan)
2007-12-9 10:41:48 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\naEVnmPz.exe New Malware.n (Trojan)
2007-12-9 10:41:49 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\NzxpRfSk.exe New Malware.n (Trojan)
2007-12-9 10:41:49 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\sbjuceER.exe New Malware.n (Trojan)
2007-12-9 10:41:50 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\Uc5tNoTE.exe New Malware.n (Trojan)
2007-12-9 10:41:51 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\YUWJ4laM.exe New Malware.aj (Trojan)
2007-12-9 10:41:52 Moved (Clean failed because the file isn't cleanable) WHUT-D9193C067E\gho WinRAR.exe W:\ZmBOXCki.exe New Malware.n (Trojan)
2007-12-9 10:41:55 Deleted WHUT-D9193C067E\gho WinRAR.exe W:\svchost.exe W32/Autorun.worm.w (Virus)

[病毒样本] [MD5: 534818]

本帖子中包含更多资源

本帖子中包含更多资源

回复 6楼 a256886572008 的帖子

浏览过的版块