红伞报

显示全部楼层 · 发表于 2007-12-17 09:18:33

.............................

显示全部楼层 · 发表于 2007-12-17 09:20:46

Starting the file scan:

Begin scan in 'E:\Virus\13.rar'
E:\Virus\13.rar
  [0] Archive type: RAR
  --> cmdbcs.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
  --> down[1].exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> kvdxjisa.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
  --> kvdxskis.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.23430
  --> LotusHlp.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> LYLOADER.EXE
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MsPrint32D.exe
   [DETECTION] Is the Trojan horse TR/PSW.27136.8
  --> ratbotl.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> TxHMoU.Exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> upxdnd.exe
   [DETECTION] Is the Trojan horse TR/PSW.28160.23
  --> avwghst.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
  --> avwlgst.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
   [WARNING] The file was ignored!

End of the scan: 2007年12月17日  09:21
Used time: 00:23 min

The scan has been done completely.

   0 Scanning directories
   14 Files were scanned
   13 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-17 09:27:39

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\13.rar'
C:\Users\morgan\Documents\
  13.rar
[0] Archive type: RAR
   --> cmdbcs.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
            [WARNING] Infected files in archives cannot be repaired!
--> down[1].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
   --> kvdxjisa.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
            [WARNING] Infected files in archives cannot be repaired!
   --> kvdxskis.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/FWDisable.23430
            [WARNING] Infected files in archives cannot be repaired!
   --> LotusHlp.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING] Infected files in archives cannot be repaired!
   --> LYLOADER.EXE
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
   --> MsPrint32D.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.27136.8
            [WARNING] Infected files in archives cannot be repaired!
   --> ratbotl.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
            [WARNING] Infected files in archives cannot be repaired!
--> svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [WARNING] Infected files in archives cannot be repaired!
--> TxHMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING] Infected files in archives cannot be repaired!
   --> upxdnd.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.28160.23
            [WARNING] Infected files in archives cannot be repaired!
   --> avwghst.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
            [WARNING] Infected files in archives cannot be repaired!
   --> avwlgst.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
            [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!

End of the scan: 2007年12月16日  17:27
Used time: 00:06 min

The scan has been done completely.

   0 Scanning directories
   14 Files were scanned
   12 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   11 Archives were scanned
   13 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-17 10:06:22

大蜘蛛13个全部杀

13.rar\cmdbcs.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Wsgame.2379;;
13.rar\down[1].exe;C:\Documents and Settings\77\My Documents\13.rar;Win32.HLLW.Autoruner.origin;;
13.rar\kvdxjisa.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.6406;;
13.rar\kvdxskis.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.6408;;
13.rar\LotusHlp.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Wsgame.2501;;
13.rar\LYLOADER.EXE;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.6448;;
13.rar\MsPrint32D.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Wsgame.2418;;
13.rar\ratbotl.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.origin;;
13.rar\svchost.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.Sniff;;
13.rar\TxHMoU.Exe;C:\Documents and Settings\77\My Documents\13.rar;Win32.HLLW.Autoruner.origin;;
13.rar\upxdnd.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Wsgame.2463;;
13.rar\avwghst.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.6427;;
13.rar\avwlgst.exe;C:\Documents and Settings\77\My Documents\13.rar;Trojan.PWS.Gamania.6346;;
13.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;

显示全部楼层 · 发表于 2007-12-17 10:29:57

咖啡10个

2007-12-17 10:30:34 引擎版本=5200.2160
2007-12-17 10:30:34 防病毒 DAT 版本=5186.0000
2007-12-17 10:30:34 EXTRA.DAT 中的检测项特征码数=无
2007-12-17 10:30:34 EXTRA.DAT 中的检测项特征码名称=无
2007-12-17 10:30:24 扫描已启动 MICROSOF-F67B91\Administrator 按需扫描
2007-12-17 10:30:37 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\CMDBCS.EXE\CMDBCS.EXE\00004060.EXE PWS-Mmorpg.gen(特洛伊)
2007-12-17 10:30:37 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\KVDXJISA.EXE\KVDXJISA.EXE\0000630c.EXE PWS-OnlineGames.i(特洛伊)
2007-12-17 10:30:38 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\KVDXSKIS.EXE New Malware.n(特洛伊)
2007-12-17 10:30:40 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\LYLOADER.EXE\LYLOADER.EXE PWS-LegMir.gen.h(特洛伊)
2007-12-17 10:30:42 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\MSPRINT32D.EXE\MSPRINT32D.EXE\00004060.EXE PWS-OnlineGames.v.dll(特洛伊)
2007-12-17 10:30:42 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\RATBOTL.EXE\RATBOTL.EXE\0000630c.EXE PWS-OnlineGames.q.dll(特洛伊)
2007-12-17 10:30:44 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\SVCHOST.EXE\SVCHOST.EXE\0000a200.EXE Generic BackDoor(特洛伊)
2007-12-17 10:30:47 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\UPXDND.EXE\UPXDND.EXE\00004060.EXE PWS-OnlineGames.v.dll(特洛伊)
2007-12-17 10:30:47 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\AVWGHST.EXE New Malware.n(特洛伊)
2007-12-17 10:30:47 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\13.rar\AVWLGST.EXE New Malware.n(特洛伊)

显示全部楼层 · 发表于 2007-12-17 11:18:42

毒霸11，瑞星8个，江民10个。

显示全部楼层 · 发表于 2007-12-17 11:26:34

原帖由 HC303 于 2007-12-17 11:18 发表
毒霸11，瑞星8个，江民10个。

国产三剑客啊

显示全部楼层 · 发表于 2007-12-17 11:31:30

解压就没看到文件了

nod32

显示全部楼层 · 发表于 2007-12-17 11:36:44

信息 2007-12-17  11:36:41 您此次查毒共查出11个病毒以及危险代码
信息 2007-12-17  11:36:41 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件18个
信息 2007-12-17  11:36:41 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\avwlgst.exe Win32.Troj.OnLineGamesT.gp.15597 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\avwghst.exe Win32.Troj.OnlineGamesT.zy.90112 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\upxdnd.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\TxHMoU.Exe Win32.TrojDownloader.Agent.57856 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\svchost.exe Win32.Troj.Delf.178193 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\ratbotl.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\MsPrint32D.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\kvdxskis.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\kvdxjisa.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\down[1].exe Win32.TrojDownloader.Agent.57856 跳过，未处理
病毒 2007-12-17  11:36:41 C:\Documents and Settings\Norways Winter\桌面\13.rar\cmdbcs.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理

显示全部楼层 · 发表于 2007-12-17 11:43:26

[病毒样本] 红伞报

本帖子中包含更多资源

本帖子中包含更多资源