近期发现的病毒4

youthnet

spaceplane

BD 6个

挪威的冬天

信息        2008-02-23  13:53:23        您此次查毒共查出5个病毒以及危险代码                       
信息        2008-02-23  13:53:23        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件11个                       
信息        2008-02-23  13:53:23        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-02-23  13:53:23        C:\Users\挪威的冬天\Desktop\sv3.zip\a18.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-02-23  13:53:23        C:\Users\挪威的冬天\Desktop\sv3.zip\a13.exe        Win32.Troj.LmirT.by.9900        跳过，未处理       
病毒        2008-02-23  13:53:23        C:\Users\挪威的冬天\Desktop\sv3.zip\down3.exe        Win32.Troj.DownloaderT.to.15360        跳过，未处理       
病毒        2008-02-23  13:53:23        C:\Users\挪威的冬天\Desktop\sv3.zip\ad(1).exe        Win32.Troj.DownloaderT.to.15360        跳过，未处理       
病毒        2008-02-23  13:53:23        C:\Users\挪威的冬天\Desktop\sv3.zip\a24.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理

wangjay1980

detected: Trojan program Trojan.Win32.Vaklik.gk        File: C:\Documents and Settings\Owner\×ÀÃæ\sv3.zip/a24.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Owner\×ÀÃæ\sv3.zip/ad(1).exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Small.hsh        File: C:\Documents and Settings\Owner\×ÀÃæ\sv3.zip/down3.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.Lmir.bpv        File: C:\Documents and Settings\Owner\×ÀÃæ\sv3.zip/a13.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.obo        File: C:\Documents and Settings\Owner\×ÀÃæ\sv3.zip/a18.exe




一个TO KL

[ 本帖最后由 wangjay1980 于 2008-2-23 14:02 编辑 ]

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\sv3'
C:\Documents and Settings\Administrator\My Documents\sv3\
  a13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [INFO]      The file was deleted!
  a18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.116
            [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!
  a24.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.256
            [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!
  ad(1).exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
      [INFO]      The file was deleted!
  Down(1940881349).exe
    [0] Archive type: RSRC
    --> Object
      [INFO]      The file was deleted!
  down3.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.8848
      [INFO]      The file was deleted!


End of the scan: 2008年2月22日  22:05
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
      6 Files were scanned
      6 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      4 Archives were scanned
      2 Warnings
      0 Notes

傻猪猪米走鸡

E:\virus\sv3.zip » ZIP » a24.exe - a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
E:\virus\sv3.zip » ZIP » ad(1).exe - Win32/TrojanDownloader.Small.NZT trojan - was a part of the deleted object
E:\virus\sv3.zip » ZIP » down3.exe - Win32/TrojanDownloader.Small.NZT trojan - was a part of the deleted object
E:\virus\sv3.zip » ZIP » Down(1940881349).exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
E:\virus\sv3.zip » ZIP » a13.exe - Win32/PSW.WOW.WU trojan - was a part of the deleted object
E:\virus\sv3.zip » ZIP » a18.exe - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
E:\virus\sv3.zip - multiple threats - deleted - quarantined

啊弥陀佛

木马名称:Trojan.Win32.Vaklik.fe
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV3\A24.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Small.lpx
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV3\AD(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Small.lpx
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV3\DOWN3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.Lmir.dlg
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV3\A13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.hkf
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV3\A18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

wangjay1980

Down(1940881349).exe - Backdoor.Win32.Ceckno.sv,

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： Trojan.DL.Win32.Mnless.rq
病毒： Backdoor.Win32.Agent.yxx
病毒： Trojan.PSW.Win32.GamesOnline.fz
病毒： Trojan.PSW.Win32.GameOL.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.32.52

hj5abc

all

Sign of "Win32:Onlinegames-CDJ [Trj]" has been found in "F:\sv3.zip\a24.exe\[Upack]\[Embedded#4060]" file.  
Sign of "Win32:Small-JLI [Trj]" has been found in "F:\sv3.zip\ad(1).exe" file.  
Sign of "Win32:Small-JLI [Trj]" has been found in "F:\sv3.zip\down3.exe" file.  
Sign of "Win32:Delf-IHQ [Trj]" has been found in "F:\sv3.zip\Down(1940881349).exe\[Embedded#MYDLL]" file.  
Sign of "Win32:Delf-IHQ [Trj]" has been found in "F:\sv3.zip\Down(1940881349).exe" file.  
Sign of "Win32:Lmir-OK [Trj]" has been found in "F:\sv3.zip\a13.exe\[Upack]\[Embedded#J999666]" file.  
Sign of "Win32:OnLineGames-BUK [Trj]" has been found in "F:\sv3.zip\a18.exe\[Upack]\[Embedded#4060]" file.