一包

显示全部楼层 · 发表于 2008-2-28 17:51:42

看看有没有能杀完的

样本：

显示全部楼层 · 发表于 2008-2-28 17:54:32

Result: 19 malware found
Trojan-PSW.Win32.OnLineGames.ode (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\014.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\bf.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\lz.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\pps.exe
Trojan-PSW.Win32.OnLineGames.pct (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\1.exe
Trojan.Win32.Vaklik.la (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\10.exe
Trojan-PSW.Win32.OnLineGames.pbp (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\12.exe
Trojan.Win32.Vaklik.ns (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\13.exe
Trojan-PSW.Win32.OnLineGames.rhu (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\14.exe
Trojan-PSW.Win32.OnLineGames.rwl (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\15.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\17.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\18.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\3.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\4.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\7.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\8.exe
Trojan-PSW.Win32.OnLineGames.ryw (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\16.exe
Trojan-PSW.Win32.OnLineGames.rsw (virus)
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\19.exe
C:\Documents and Settings\028222\×ÀÃæ\a[1].bkyes.com.rar\a.bkyes.com\down\5.exe

显示全部楼层 · 发表于 2008-2-28 17:54:48

22/红伞

显示全部楼层 · 发表于 2008-2-28 17:57:28

BD 22

显示全部楼层 · 发表于 2008-2-28 17:58:12

NOD 22
已扫描的磁盘，文件夹及文件：E:\pic\_PICtemp\a[1].bkyes.com.rar
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\014.exe - Win32/TrojanDownloader.Small.NZL 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\1.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\10.exe - Win32/PSW.OnLineGames.YA 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\11.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\12.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\13.exe - Win32/PSW.OnLineGames.NFL 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\14.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\15.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\16.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\17.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\18.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\19.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\2.exe - Win32/PSW.Agent.NGZ 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\3.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\4.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\5.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\7.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\8.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\down\9.exe - 可能是 Win32/Genetik 木马的一个变种
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\bf.exe - Win32/TrojanDownloader.Small.NZL 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\lz.exe - Win32/TrojanDownloader.Small.NZL 木马
E:\pic\_PICtemp\a[1].bkyes.com.rar >>RAR >>a.bkyes.com\pps.exe - Win32/TrojanDownloader.Small.NZL 木马
已扫描的文件数目：22
已发现的病毒数目：22
完成时间： 17:57:59 总扫描时间：12 秒 (00:00:12)

显示全部楼层 · 发表于 2008-2-28 18:01:05

Begin scan in 'C:\Documents and Settings\haha\桌面\a.bkyes.com.rar'
C:\Documents and Settings\haha\桌面\a.bkyes.com.rar
  [0] Archive type: RAR
--> a.bkyes.com\014.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
--> a.bkyes.com\down\1.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
         [4] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.phh.18
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\10.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.391
--> a.bkyes.com\down\11.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\12.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
         [4] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.2
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\13.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
--> a.bkyes.com\down\14.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
         [4] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.9
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\15.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\16.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\17.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
--> a.bkyes.com\down\18.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a.bkyes.com\down\2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.x
--> a.bkyes.com\down\3.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
--> a.bkyes.com\down\4.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\5.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\7.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\8.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
--> a.bkyes.com\down\9.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Steal.44656
--> a.bkyes.com\bf.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
--> a.bkyes.com\lz.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
--> a.bkyes.com\pps.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM
   [INFO]    A backup was created as '4828869d.qua'  ( QUARANTINE )

End of the scan: 2008年2月28日  18:01
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   23 Files were scanned
   26 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-28 18:06:34

扫描系统区域...
扫描所选择的目录和文件...
对象: a.bkyes.com 014.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ode (KAV 引擎)
对象: a.bkyes.com/down 1.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pct (KAV 引擎)
对象: a.bkyes.com/down 10.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.la (KAV 引擎)
对象: a.bkyes.com/down 12.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: a.bkyes.com/down 13.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan.Win32.Vaklik.ns (KAV 引擎)
对象: a.bkyes.com/down 14.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rhu (KAV 引擎)
对象: a.bkyes.com/down 15.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 16.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ryw (KAV 引擎)
对象: a.bkyes.com/down 17.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 18.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 19.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rsw (KAV 引擎)
对象: a.bkyes.com/down 3.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 4.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 5.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rsw (KAV 引擎)
对象: a.bkyes.com/down 7.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com/down 8.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.rwl (KAV 引擎)
对象: a.bkyes.com bf.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ode (KAV 引擎)
对象: a.bkyes.com lz.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ode (KAV 引擎)
对象: a.bkyes.com pps.exe
在压缩档案里: C:\Documents and Settings\Administrato\桌面\a.bkyes.com.rar
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ode (KAV 引擎)
对象: a.bkyes.com.rar
路径: C:\Documents and Settings\Administrato\桌面
状态: 已发现病毒
病毒: Trojan-PSW.Win32.OnLineGames.ode (4x), Trojan-PSW.Win32.OnLineGames.pct, Trojan.Win32.Vaklik.la, Trojan-PSW.Win32.OnLineGames.pbp, Trojan.Win32.Vaklik.ns, Trojan-PSW.Win32.OnLineGames.rhu, Trojan-PSW.Win32.OnLineGames.rwl (7x), Trojan-PSW.Win32.OnLineGames.ryw, Trojan-PSW.Win32.OnLineGames.rsw (2x) (KAV 引擎)
分析完成: 2/28/2008 18:06
已扫描 1 个文件
已发现 1 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2008-2-28 18:07:16

费尔22个

显示全部楼层 · 发表于 2008-2-28 18:11:32

论坛流行AVK了

显示全部楼层 · 发表于 2008-2-28 19:42:10

22 TO KL

detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\014.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pct       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\1.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Vaklik.la       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\10.exe//UPack
detected: virus Heur.Trojan.Generic (modification)       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\11.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pbp       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\12.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Vaklik.ns       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\13.exe//UPack//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\14.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\15.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ryw       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\16.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\17.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\18.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rsw       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\19.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rxx       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\2.exe//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\3.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\4.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rsw       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\5.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\7.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\down\8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\bf.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\lz.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ode       File: C:\Documents and Settings\Owner\×ÀÃæ\a.bkyes.com.rar/a.bkyes.com\pps.exe//NSPack

[ 本帖最后由 wangjay1980 于 2008-2-28 19:46 编辑 ]

[病毒样本] 一包

本帖子中包含更多资源

回复 7楼 dd2006 的帖子