18个

显示全部楼层 · 发表于 2007-12-21 20:08:35

坚强的host2.exe，已经挂在某毒网4个月了..还没有消失

显示全部楼层 · 发表于 2007-12-21 20:11:20

信息 2007-12-21  20:11:10 您此次查毒共查出14个病毒以及危险代码
信息 2007-12-21  20:11:10 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件33个
信息 2007-12-21  20:11:10 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2007-12-21  20:11:10 C:\Documents and Settings\Norways Winter\桌面\122101.rar\wincup.cab\wincup.exe Win32.Adware.Boran.p.69120 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\host2.exe Win32.PSWTroj.OnlineGames.tw.102510 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\lxh.exe Win32.Troj.Agent.nf.598016 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\fy.exe Win32.Hack.Delf.43319 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\mir.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\zt.exe Win32.Troj.OnlineGamesT.zy.90112 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\dh.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\wl.exe Win32.Troj.OnlineGamesT.zy.90112 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\zx.exe Win32.Troj.OnlineGamesT.zy.90112 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\qj.exe Trash.OnlineGamesT.aq.2615 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\qst.exe Win32.Troj.QQThiefT.ty.112755 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\wow.exe Win32.Troj.WoWT.zy.110592 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\jh.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-21  20:11:09 C:\Documents and Settings\Norways Winter\桌面\122101.rar\mh.exe Win32.Troj.Downloader.da.15872 跳过，未处理

显示全部楼层 · 发表于 2007-12-21 20:12:17

Begin scan in 'C:\Users\Wesley\Downloads\122101.rar'
C:\Users\Wesley\Downloads\122101.rar
  [0] Archive type: RAR
  --> mh.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> jh.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> wow.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> qst.exe
   [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.15
  --> qj.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> my.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.lgk
  --> zx.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> wl.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> dh.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.E
  --> tl.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.fij
  --> zt.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGam.htk
  --> mir.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.E
  --> fy.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> lxh.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.afl
  --> down2.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> down3.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
--> wincup.cab
   [1] Archive type: CAB (Microsoft)
   --> wincup.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.P
  --> host2.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.44157
   [INFO]    The file was moved to '479dadb1.qua'!

显示全部楼层 · 发表于 2007-12-21 20:12:41

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Dropper.Win32.XYOnline.x
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.gic
病毒： Worm.Win32.PaBug.fl
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.SO2Online.ag
病毒： Trojan.PSW.Win32.LMir.yzm
病毒： Trojan.Mnless.lpi
病毒： Trojan.Clicker.Win32.PopHot.cg
病毒： Trojan.PSW.Win32.QQPass.yxn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.23.42

显示全部楼层 · 发表于 2007-12-21 20:13:10

Start of the scan: 2007年12月21日  20:12

Starting the file scan:

Begin scan in 'I:\样本'
I:\样本\122101.rar
  [0] Archive type: RAR
  --> mh.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> jh.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> wow.exe
   [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> qst.exe
   [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.15
  --> qj.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> my.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.lgk
  --> zx.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.27585
  --> wl.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.26549
  --> dh.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.E
  --> tl.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.fij
  --> zt.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGam.htk
  --> mir.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.E
  --> fy.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> lxh.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.afl
  --> down2.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> down3.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
--> wincup.cab
   [1] Archive type: CAB (Microsoft)
   --> wincup.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.P
  --> host2.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.44157
   [INFO]    The file was deleted!

End of the scan: 2007年12月21日  20:12
Used time: 00:14 min

The scan has been done completely.

   1 Scanning directories
   20 Files were scanned
   18 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-21 20:48:46

clamwin..

Scan Started Fri Dec 21 20:48:04 2007
-------------------------------------------------------------------------------
C:\Test\0712\1221\122101\fy.exe: Trojan.Delf-832 FOUND
C:\Test\0712\1221\122101\host2.exe: Trojan.QQPass-493 FOUND
C:\Test\0712\1221\122101\qst.exe: Trojan.QQPass-493 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 175718
Engine version: 0.91.1
Scanned directories: 0
Scanned files: 18
Skipped non-executable files: 0
Infected files: 3

Data scanned: 0.98 MB
Time: 10.937 sec (0 m 10 s)
--------------------------------------
Completed
--------------------------------------

显示全部楼层 · 发表于 2007-12-21 20:52:33

小A 21个

显示全部楼层 · 发表于 2007-12-21 20:54:21

360 查出12个

显示全部楼层 · 发表于 2007-12-21 21:03:53

C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » mh.exe - Win32/PSW.OnLineGames.NKH trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » jh.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » wow.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » qst.exe - Win32/PSW.QQPass.NCQ trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » qj.exe - a variant of Win32/PSW.OnLineGames.JOJ trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » my.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » zx.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » wl.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » dh.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » tl.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » zt.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » mir.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » fy.exe - Win32/Delf.NFD trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » lxh.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » down2.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » down3.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\122101.rar » RAR » host2.exe - Win32/PSW.QQPass.NCJ trojan

显示全部楼层 · 发表于 2007-12-21 21:05:55

原帖由 zlq7zj 于 2007-12-21 20:54 发表
360 查出12个

不看图我还以为那个 360 。。。

[病毒样本] 18个

本帖子中包含更多资源

18

34/14

红伞！

本帖子中包含更多资源