29个

显示全部楼层 · 发表于 2008-1-1 16:57:18

AVG Anti-Spyware - 扫描报告
---------------------------------------------------------

+ 创建时间: 17:00:26 2008-1-1

+ 扫描结果:

C:\Documents and Settings\zh\桌面\样本.rar/re.exe -> Downloader.Small.eyz : 未进行操作.
C:\Documents and Settings\zh\桌面\样本.rar/16.exe -> Trojan.OnLineGames.eza : 未进行操作.
C:\Documents and Settings\zh\桌面\样本.rar/9.exe -> Trojan.OnLineGames.loy : 未进行操作.

::报告结束

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.gnx
病毒： Trojan.PSW.Win32.GameOL.glg
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.XYOnline.yy
病毒： Trojan.PSW.Win32.XYOnline.yz
病毒： Trojan.Clicker.Win32.Agent.adg
病毒： Malicious Code
病毒： Trojan.PSW.Win32.ZeroOnline.cy
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.SO2Online.ap
病毒： Trojan.PSW.Win32.GameOL.gog
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.DL.Win32.Mnless.km

用户来源：互联网

软件版本：20.25.10

显示全部楼层 · 发表于 2008-1-1 17:16:16

Mcafee 8.5i
扫了28个...

显示全部楼层 · 发表于 2008-1-1 17:21:40

金山毒霸 24个

显示全部楼层 · 发表于 2008-1-1 17:23:41

费尔29个

显示全部楼层 · 发表于 2008-1-1 17:36:41

哎呀，NOD32只找到27个

已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Administrator\桌面\样本.rar
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>1.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>2.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>3.exe - Win32/PSW.OnLineGames.JOJ 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>4.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>6.exe - 可能是 Win32/PSW.OnLineGames.NHF 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>7.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>8.exe - 可能是 Win32/PSW.OnLineGames.NGU 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>9.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>10.exe - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>12.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>13.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>14.exe - 可能是 Win32/PSW.OnLineGames.NHF 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>15.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>16.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>w3.exe - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>avzxlmn.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>gdgji32.dll - 可能是 Win32/PSW.OnLineGames.NHF 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>gdhnxai32.dll - Win32/PSW.OnLineGames.JOJ 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>gdqqhxi32.dll - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>gdtli32.dll - 可能是 Win32/PSW.OnLineGames.NHF 木马的一个变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>gjfhayc.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>jsqsbyc.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>kvdxslma.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>raqjkpi.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>rarjepi.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>rsmyjpm.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator\桌面\样本.rar >>RAR >>wsmsezx.dll - Win32/PSW.OnLineGames.FDY 木马的变种
已扫描的文件数目：29
已发现的病毒数目：27
完成时间： 17:39:55 总扫描时间：33 秒 (00:00:33)

显示全部楼层 · 发表于 2008-1-2 22:53:04

费尔扫描30文件
29病毒

显示全部楼层 · 发表于 2008-1-2 23:16:12

费尔 29个

显示全部楼层 · 发表于 2008-1-3 08:29:05

Starting the file scan:

Begin scan in 'E:\��.rar'
E:\��.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 2.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 3.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 4.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 7.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 8.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 9.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.28619
  --> 10.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 12.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ISB.11
  --> 13.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 14.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 15.exe
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 16.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.21963
  --> re.exe
   [DETECTION] Is the Trojan horse TR/Conime.8192
  --> w3.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> avzxlmn.dll
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> gdgji32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdhnxai32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdqqhxi32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdtli32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gjfhayc.dll
   [DETECTION] Is the Trojan horse TR/FWDisable.21963
  --> jsqsbyc.dll
   [DETECTION] Is the Trojan horse TR/FWDisable.2119627
  --> kvdxslma.dll
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> msvcp51.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Small.hll
  --> raqjkpi.dll
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> rarjepi.dll
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> rsmyjpm.dll
   [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> wsmsezx.dll
   [DETECTION] Is the Trojan horse TR/FWDisable.28619
   [INFO]    The file was deleted!

End of the scan: 2008年1月3日  08:29
Used time: 00:21 min

The scan has been done completely.

   0 Scanning directories
   30 Files were scanned
   29 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-3 09:02:21

扫描报告
2008年1月2日 17:02:00 - 17:02:01
计算机名称: XING-PC
扫描类型: 扫描指定目标
目标: C:\Users\Xing\Desktop\Downloads\样本.rar

--------------------------------------------------------------------------------

结果: 发现29个恶意软件
Trojan-PSW.Win32.OnLineGames.mqx (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\1.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\rarjepi.dll
Trojan-PSW.Win32.OnLineGames.mqz (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\2.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\avzxlmn.dll
C:\Users\Xing\Desktop\Downloads\样本.rar\jsqsbyc.dll
Trojan-PSW.Win32.OnLineGames.mnc (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\3.exe
Trojan-PSW.Win32.OnLineGames.mra (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\4.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\rsmyjpm.dll
Trojan-PSW.Win32.OnLineGames.lry (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\6.exe
Trojan-PSW.Win32.OnLineGames.mrb (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\7.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\kvdxslma.dll
Trojan-PSW.Win32.OnLineGames.lzl (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\8.exe
Trojan-PSW.Win32.OnLineGames.mmy (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\9.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\15.exe
Trojan-PSW.Win32.OnLineGames.lzg (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\10.exe
Trojan-PSW.Win32.OnLineGames.isb (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\12.exe
Trojan-PSW.Win32.OnLineGames.mqy (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\13.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\raqjkpi.dll
Trojan-PSW.Win32.OnLineGames.mhq (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\14.exe
C:\Users\Xing\Desktop\Downloads\样本.rar\gdtli32.dll
Trojan-PSW.Win32.OnLineGames.mqa (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\16.exe
Trojan-Downloader.Win32.Small.eyz (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\re.exe
Worm.Win32.AutoRun.bkv (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\w3.exe
Trojan-PSW.Win32.OnLineGames.may (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\gdgji32.dll
Trojan-PSW.Win32.OnLineGames.mqj (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\gdhnxai32.dll
Trojan-PSW.Win32.OnLineGames.lzf (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\gdqqhxi32.dll
Trojan-PSW.Win32.OnLineGames.mft (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\gjfhayc.dll
Trojan-Downloader.Win32.Small.hll (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\msvcp51.dll
Trojan-PSW.Win32.OnLineGames.mmx (病毒)
C:\Users\Xing\Desktop\Downloads\样本.rar\wsmsezx.dll

--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 30
未扫描: 0
结果:
病毒: 29
间谍软件: 0
可疑对象: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
引导区:
已扫描: 0
受感染: 0
可疑对象: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
病毒定义版本:
病毒: 2008-01-02_07
间谍软件: 2008-01-02_06
扫描引擎:
F-Secure AVP: 7.00.171, 2008-01-02
F-Secure Libra: 2.04.01, 2008-01-02
F-Secure Orion: 1.02.37, 2008-01-02
F-Secure Draco: 1.00.35, 2007-11-28
扫描选项:
扫描指定类型的文件: COM EXE SYS OV? BIN SCR DLL SHS HTM HTML HTT VBS JS INF VXD DO? XL? RTF CPL WIZ HTA PP? PWZ P?T MSO PIF . ACM ASP AX CNV CSC DRV INI MDB MPD MPP MPT OBD OBT OCX PCI TLB TSP WBK WBT WPC WSH VWP WML BOO HLP TD0 TT6 MSG ASD JSE VBE WSC CHM EML PRC SHB LNK WSF {* PDF ZL? XML ANI AVB BAT CEO CMD LSP MAP MHT MIF PHP POT WMF NWS TAR TGZ SWF ZIP JAR ARJ LZH TAR TGZ GZ CAB RAR BZ2 HQX
扫描压缩包内部
操作:
病毒: 扫描后询问
间谍软件: 扫描后询问

--------------------------------------------------------------------------------

版权 © 1998-2007 产品支持 | 发送病毒样本到 F-Secure
对于 F-Secure 网页上所链接的由第三方创建和发布的材料， F-Secure 不承担任何责任。除非已通过电子邮件或 F-Secure CGI 电子邮件向任一台服务器提交材料以清楚说明情况，您同意通过 F-Secure 网页或硬拷贝发布已有的材料。单击带下划线的链接，可访问 F-Secure 公共网站。此时，系统会在专用访问统计信息中用域名记录您的访问。此信息不会提供给任何第三方。您同意不针对所提交的材料向我们提出诉讼。除非您已明确说明，否则应提交材料以保证 F-Secure 针对可能在 F-Secure 产品/出版物中采用的概念，不承担任何责任。

显示全部楼层 · 发表于 2008-1-3 14:04:14

"趋势病毒扫描日志" "2008/01/03" ""

"时间" "已检测，用户设定为信任" "类型" "威胁名称" "受感染文件" "第一处理措施" "第二处理措施"
"14:04" "手动扫描" "文件" "TSPY_FRETHOG.CK" "4.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TROJ_DELF.MD" "1.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.MGU" "6.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.MGR" "8.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.LXX" "10.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TROJ_ONLINEG.NIZ" "12.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEGA.IG" "13.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.WN" "14.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.EK" "15.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.ISZ" "16.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TROJ_DLOADER.SVI" "re.exe (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "TSPY_ONLINEG.ISZ" "gjfhayc.dll (C:\Documents and Settings\Administrator\桌面\样本.rar)" "隔离成功" ""
"14:04" "手动扫描" "文件" "---" "C:\Documents and Settings\Administrator\桌面\样本.rar" "隔离成功" ""

[病毒样本] 29个

29