下载者一包

显示全部楼层 · 发表于 2008-2-5 16:25:17

瑞星还是漏杀几个

133:http://www.333292.com/down/1.exe
133:http://www.333292.com/down/2.exe
133:http://www.333292.com/down/3.exe
133:http://www.333292.com/down/4.exe
133:http://www.333292.com/down/5.exe
133:http://www.333292.com/down/6.exe
133:http://www.333292.com/down/7.exe
133:http://www.333292.com/down/8.exe
133:http://www.333292.com/down/9.exe
133:http://www.333292.com/down/10.exe
133:http://www.333292.com/down/11.exe
133:http://www.333292.com/down/12.exe
133:http://www.333292.com/down/13.exe
133:http://www.333292.com/down/14.exe
133:http://www.333292.com/down/15.exe
133:http://www.333292.com/down/16.exe
133:http://www.333292.com/down/17.exe
133:http://www.333292.com/down/18.exe
133:http://www.333292.com/down/19.exe
133:http://www.333292.com/down/20.exe
133:http://www.333292.com/down/21.exe
133:http://www.333292.com/down/22.exe
133:http://www.333292.com/down/23.exe
133:http://www.333292.com/down/24.exe
133:http://www.333292.com/down/25.exe
133:http://www.333292.com/down/26.exe
133:http://www.333292.com/down/27.exe
133:http://www.333292.com/down/28.exe
133:http://www.333292.com/down/29.exe

样本：

瑞星病毒查杀结果报告
清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.ZhengTu.ymy
病毒： Trojan.PSW.Win32.GamesOnline.mh
病毒： Trojan.PSW.Win32.QQHX.tvu
病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： Trojan.PSW.Win32.XYOnline.abe
病毒： Trojan.PSW.Win32.QQPass.zck
病毒： Trojan.PSW.Win32.GameOL.lvs
病毒： Trojan.PSW.Win32.GameOL.luw
病毒： Trojan.IMMSG.Win32.TBMSG.ykq
病毒： Trojan.PSW.Win32.GameOL.lpn
病毒： Trojan.PSW.Win32.LMir.zaj
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.llb
病毒： Trojan.PSW.Win32.SunOnline.ma
病毒： Trojan.PSW.Win32.XYOnline.abc
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GamesOnline.hi
MAC 地址：00:00:00:00:00:00
用户来源：局域网
软件版本：20.30

显示全部楼层 · 发表于 2008-2-5 16:26:47

费尔53个

显示全部楼层 · 发表于 2008-2-5 16:26:48

IK

I:\virus\xzdz.rar:\xzdz\1.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\10.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\xzdz.rar:\xzdz\11.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\12.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\13.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\14.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\15.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\16.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\17.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\18.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\19.exe - Signature 'Trojan-PWS.Win32.Delf.ix' found
I:\virus\xzdz.rar:\xzdz\2.exe - Signature 'Virus.Win32.OnLineGames.SR' found
I:\virus\xzdz.rar:\xzdz\20.exe - Signature 'Trojan-PWS.Win32.Nilage.bga' found
I:\virus\xzdz.rar:\xzdz\21.exe - Signature 'Generic.PWS.Games.1' found
I:\virus\xzdz.rar:\xzdz\22.exe - Signature 'Win32.SuspectCrc' found
I:\virus\xzdz.rar:\xzdz\23.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\24.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\xzdz.rar:\xzdz\25.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\26.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\27.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\3.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\4.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\5.exe - Signature 'Trojan-PWS.Win32.Delf.ix' found
I:\virus\xzdz.rar:\xzdz\6.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar:\xzdz\7.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\xzdz.rar:\xzdz\8.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\xzdz.rar:\xzdz\9.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\xzdz.rar

28 Files scanned
(1 Archiv with 27 files)
27 Signatures found
0 Suspect code-parts found
Used time: 0:00.437

显示全部楼层 · 发表于 2008-2-5 16:29:02

Starting the file scan:

Begin scan in 'E:\xzdz.rar'
E:\xzdz.rar
  [0] Archive type: RAR
  --> xzdz\1.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.291
  --> xzdz\10.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.274
  --> xzdz\11.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pww
  --> xzdz\12.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.29
  --> xzdz\13.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Qha.6
  --> xzdz\14.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.35
  --> xzdz\15.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Qha.5
  --> xzdz\16.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.33
  --> xzdz\17.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.270
  --> xzdz\18.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bxx.5
  --> xzdz\19.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> xzdz\2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.x
  --> xzdz\20.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.44669
  --> xzdz\21.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.qlc
  --> xzdz\22.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12211
  --> xzdz\23.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.283
  --> xzdz\24.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> xzdz\25.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.phh.10
  --> xzdz\26.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.4
  --> xzdz\27.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.301
  --> xzdz\3.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pil
  --> xzdz\4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oxf.3
  --> xzdz\5.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> xzdz\6.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.8
  --> xzdz\7.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.173
  --> xzdz\8.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kug.2
  --> xzdz\9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.nrt.1
   [INFO]    The file was deleted!

End of the scan: 2008年2月5日  16:29
Used time: 00:21 min

The scan has been done completely.

   0 Scanning directories
   28 Files were scanned
   27 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-5 16:29:14

扫描系统区域...
扫描所选择的目录和文件...
对象: xzdz 1.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.qfw (KAV 引擎)
对象: xzdz 10.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.isb (KAV 引擎)
对象: xzdz 11.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pww (KAV 引擎)
对象: xzdz 12.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pud (KAV 引擎)
对象: xzdz 13.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pzl (KAV 引擎)
对象: xzdz 14.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: xzdz 15.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pzl (KAV 引擎)
对象: xzdz 16.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: xzdz 17.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.hc (KAV 引擎)
对象: xzdz 18.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.Nilage.bxx (KAV 引擎)
对象: xzdz 19.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Pakes.bzp (KAV 引擎)
对象: xzdz 2.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.qhu (KAV 引擎)
对象: xzdz 20.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.QQPass.atp (KAV 引擎)
对象: xzdz 21.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.qlc (KAV 引擎)
对象: xzdz 22.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.ebc (KAV 引擎)
对象: xzdz 23.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.ih (KAV 引擎)
对象: xzdz 24.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Backdoor.Win32.Popwin.awj (KAV 引擎)
对象: xzdz 25.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pjj (KAV 引擎)
对象: xzdz 26.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.poj (KAV 引擎)
对象: xzdz 27.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.ig (KAV 引擎)
对象: xzdz 3.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pil (KAV 引擎)
对象: xzdz 4.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ozk (KAV 引擎)
对象: xzdz 5.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Pakes.bzp (KAV 引擎)
对象: xzdz 6.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pry (KAV 引擎)
对象: xzdz 7.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.eh (KAV 引擎)
对象: xzdz 8.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.isb (KAV 引擎)
对象: xzdz 9.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.oai (KAV 引擎)
对象: xzdz.rar
路径: C:\Documents and Settings\Administrato\桌面\1
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.qfw, Trojan-PSW.Win32.OnLineGames.isb (2x), Trojan-PSW.Win32.OnLineGames.pww, Trojan-PSW.Win32.OnLineGames.pud, Trojan-PSW.Win32.OnLineGames.pzl (2x), Trojan-PSW.Win32.OnLineGames.pbp (2x), Trojan.Win32.Vaklik.hc, Trojan-PSW.Win32.Nilage.bxx, Trojan.Win32.Pakes.bzp (2x), Trojan-PSW.Win32.OnLineGames.qhu, Trojan-PSW.Win32.QQPass.atp, Trojan-PSW.Win32.OnLineGames.qlc, Trojan-Dropper.Win32.Agent.ebc, Trojan.Win32.Vaklik.ih, Backdoor.Win32.Popwin.awj, Trojan-PSW.Win32.OnLineGames.pjj, Trojan-PSW.Win32.OnLineGames.poj, Trojan.Win32.Vaklik.ig, Trojan-PSW.Win32.OnLineGames.pil, Trojan-PSW.Win32.OnLineGames.ozk, Trojan-PSW.Win32.OnLineGames.pry, Trojan.Win32.Vaklik.eh, Trojan-PSW.Win32.OnLineGames.oai (KAV 引擎)
分析完成: 2/5/2008 16:28
已扫描 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrato\桌面\1\xzdz.rar'
C:\Documents and Settings\Administrato\桌面\1\xzdz.rar
  [0] Archive type: RAR
  --> xzdz\1.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.291
  --> xzdz\10.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.274
  --> xzdz\11.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pww
  --> xzdz\12.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.29
  --> xzdz\13.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Qha.6
  --> xzdz\14.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.35
  --> xzdz\15.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Qha.5
  --> xzdz\16.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.33
  --> xzdz\17.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.270
  --> xzdz\18.exe
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bxx.5
  --> xzdz\19.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> xzdz\2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.x
  --> xzdz\20.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.44669
  --> xzdz\21.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.qlc
  --> xzdz\22.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12211
  --> xzdz\23.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.283
  --> xzdz\24.exe
   [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> xzdz\25.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.phh.10
  --> xzdz\26.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.4
  --> xzdz\27.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.301
  --> xzdz\3.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pil
  --> xzdz\4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oxf.3
  --> xzdz\5.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> xzdz\6.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.8
  --> xzdz\7.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.173
  --> xzdz\8.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kug.2
  --> xzdz\9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.nrt.1
   [WARNING] The file was ignored!

显示全部楼层 · 发表于 2008-2-5 16:29:51

MicroVita AntiSpyware 100 C
_____________________________________________

         风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]
               http://221.10.254.214/
----------------------------------------------
开始扫描……

正在检查启动……
[F:\xzdz\xzdz\1.exe]
                  …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:17854  MD5:bcbca17f0ca272b60e437aeb159b5f5e

[F:\xzdz\xzdz\10.exe]
                  …………发现Spy！报告:[2] [1] Win32.Unknow
文件信息:  大小:17392  MD5:393afc6307370f0829e8dc38d75fb956

[F:\xzdz\xzdz\11.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing[5] 下载者
文件信息:  大小:10201  MD5:66ed9e98c23af708494dac0c826cf2be

[F:\xzdz\xzdz\12.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:23468  MD5:59158bddf3aac3d2be0deab3f92b30a6

[F:\xzdz\xzdz\13.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:22664  MD5:7edc40b29817a76ab8eb49ee5f6e378c

[F:\xzdz\xzdz\14.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:18836  MD5:ea6efd1fd511e7152995e5e7217ee1cd

[F:\xzdz\xzdz\15.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:18088  MD5:16cf2e9d3f1264879016c5fde0660bad

[F:\xzdz\xzdz\16.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:18016  MD5:057cc3025c379f22f2c91f3eb92a695a

[F:\xzdz\xzdz\17.exe]
                  …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:18206  MD5:dcc8ed729637bd0d8271bdc7b958cadd

[F:\xzdz\xzdz\18.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:18628  MD5:223187a96c7d34aacb45b272653f5804

[F:\xzdz\xzdz\19.exe]
                  …………发现Spy！报告:[2] [1] Win32.NkHack.FSG.A
文件信息:  大小:31217  MD5:2efe7f599a6447a4c4447f01239399e2

[F:\xzdz\xzdz\20.exe]
                  …………发现Spy！报告:[2]
文件信息:  大小:30840  MD5:1f339ea6c9448674c29fdcbe17ce8a9b

[F:\xzdz\xzdz\21.exe]
                  …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:11636  MD5:6d0b4921fe61cbbf1caf6a5e74c089b7

[F:\xzdz\xzdz\22.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing[5] 下载者
文件信息:  大小:12211  MD5:2cdd4ecbd7a1e2db229cbe72cd95a0c1

[F:\xzdz\xzdz\23.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:17682  MD5:2f4d68b69db0011d9058f7141fe0d67b

[F:\xzdz\xzdz\24.exe]
                  …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:14264  MD5:3332e435ca778d04532499c69570d7b4

[F:\xzdz\xzdz\25.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:17492  MD5:bafe64c2ee102865116ef8c3dc1ddf2d

[F:\xzdz\xzdz\26.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:20968  MD5:fb67aee14df36d10e5d5f9abffae06bc

[F:\xzdz\xzdz\27.exe]
                  …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:18546  MD5:cabcdf26276cf30f8803324dfe0b91a0

[F:\xzdz\xzdz\3.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:9736  MD5:69daafe29bb34d6eb8ec32600b14baad

[F:\xzdz\xzdz\4.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:17560  MD5:112b25c2450f2931dcf16f5525aa568a

[F:\xzdz\xzdz\5.exe]
                  …………发现Spy！报告:[2] [1] Win32.NkHack.FSG.A
文件信息:  大小:33221  MD5:3a13d75c3273753af5c88144f6a2c1a6

[F:\xzdz\xzdz\6.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:18484  MD5:a87d530ce0f6eb2bbc0fee4440566b85

[F:\xzdz\xzdz\7.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:17718  MD5:9f870b36ea9c17abd008be4061184c03

[F:\xzdz\xzdz\8.exe]
                  …………发现Spy！报告:[2] [1] Win32.Unknow
文件信息:  大小:16456  MD5:9a4a6f21a5a292828660d9e361c863d5

[F:\xzdz\xzdz\9.exe]
                  …………发现Spy！报告:[2] [1] Win32.F/S.ByDwing
文件信息:  大小:17724  MD5:b9a93fec19a5fde97710c7a2ecc1a91d

文件数:27 病毒数:26  比重:0.962962962963
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎
[2] 文件特征码引擎
[1] 文件启发式引擎

显示全部楼层 · 发表于 2008-2-5 16:30:10

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.qfw 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\1.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.isb 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\10.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pww 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\11.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pud 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\12.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pzl 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\13.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pbp 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\14.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pzl 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\15.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pbp 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\16.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Vaklik.hc 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\17.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.Nilage.bxx 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\18.exe//UPack
已删除：木马程序 Trojan.Win32.Pakes.bzp 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\19.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.qhu 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\2.exe
已删除：木马程序 Trojan-PSW.Win32.QQPass.atp 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\20.exe//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.qlc 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\21.exe//PE_Patch//UPack
已删除：木马程序 Trojan-Dropper.Win32.Agent.ebc 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\22.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Vaklik.ih 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\23.exe//UPack
已删除：木马程序 Backdoor.Win32.Popwin.awj 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\24.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pjj 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\25.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.poj 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\26.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Vaklik.ig 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\27.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pil 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\3.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ozk 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\4.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Pakes.bzp 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\5.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.pry 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\6.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Vaklik.eh 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\7.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.isb 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\8.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.oai 文件: C:\Documents and Settings\Administrator\桌面\xzdz.rar/xzdz\9.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-2-5 16:32:43

路过

显示全部楼层 · 发表于 2008-2-5 16:41:37

病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\9.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\8.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\7.exe Win32.Troj.OnlineGamesT.ty.98304 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\6.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\5.exe Win32.Troj.WoWT.zy.110592 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\4.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\3.exe Win32.Troj.OnlineGamesT.wf.118784 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\27.exe Win32.Troj.OnlineGamesT.ky.151552 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\26.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\25.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\24.exe Win32.Troj.TBMSG.135168 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\23.exe Win32.Troj.OnlineGamesT.ee.94208 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\22.exe Win32.Troj.OnlineGamesT.af.57344 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\21.exe Win32.Troj.OnlineGamesT.af.57344 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\20.exe Win32.PSWTroj.QQPass.104056 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\2.exe Win32.PSWTroj.Agent.4055 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\19.exe Win32.PSWTroj.OnLineGames.77824 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\18.exe Win32.Troj.OnlineGamesT.ty.98304 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\17.exe Win32.Troj.OnlineGamesT.ty.98304 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\16.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\15.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\14.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\13.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\12.exe Win32.Troj.OnlineGamesT.nr.37008 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\10.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2008-02-05  16:41:13 C:\Documents and Settings\Administrator\桌面\xzdz.rar\xzdz\1.exe Win32.Troj.OnlineGamesT.ty.98304 跳过，未处理

显示全部楼层 · 发表于 2008-2-5 16:50:16

蜘蛛 25
ESET 27全k：
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\1.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\10.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\11.exe - a variant of Win32/PSW.OnLineGames.NLY trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\12.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\13.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\14.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\15.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\16.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\17.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\18.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\19.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\2.exe - Win32/PSW.Agent.NGZ trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\20.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\21.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\22.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\23.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\24.exe - Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\25.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\26.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\27.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\3.exe - Win32/PSW.OnLineGames.NLY trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\4.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\5.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\6.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\7.exe - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\8.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\xzdz.rar » RAR » xzdz\9.exe - Win32/PSW.OnLineGames.MUG trojan

[病毒样本] 下载者一包

本帖子中包含更多资源

本帖子中包含更多资源

27

本帖子中包含更多资源