11个

显示全部楼层 · 发表于 2008-2-29 13:52:54

11个

显示全部楼层 · 发表于 2008-2-29 14:01:47

BD 11
项目: #$@%1\ckcltblov.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Dropped:Generic.Malware.gPWS.70BE6218 (BD 引擎)
项目: #$@%1\hhuspjsp.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.PWS.Onlinegames.OPP (BD 引擎)
项目: #$@%1\itbmuwzj.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Dropped:Generic.Malware.gPWS.70BE6218 (BD 引擎)
项目: #$@%1\update.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.Downloader.Agent.YZY (BD 引擎)
项目: #$@%1\y10.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.NSR (BD 引擎)
项目: #$@%1\y17.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.OPB (BD 引擎)
项目: #$@%1\y18.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.Agent.AGBN (BD 引擎)
项目: #$@%1\y19.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Generic.PWStealer.E73D37A9 (BD 引擎)
项目: #$@%1\y21.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.NSR (BD 引擎)
项目: #$@%1\y5.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.NSR (BD 引擎)
项目: #$@%1\y6.exe
检查档案: E:\pic\_PICtemp\#$@%1.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.NSR (BD 引擎)

显示全部楼层 · 发表于 2008-2-29 14:05:34

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\_$@%1.rar'
C:\Documents and Settings\Administrator\My Documents\
  _$@%1.rar
[0] Archive type: RAR
   --> #$@%1\ckcltblov.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pfr
            [WARNING] Infected files in archives cannot be repaired!
--> #$@%1\hhuspjsp.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pcn.5
      [WARNING] Infected files in archives cannot be repaired!
   --> #$@%1\itbmuwzj.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pfr
            [WARNING] Infected files in archives cannot be repaired!
   --> #$@%1\update.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.Agent.hig.5
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
   --> #$@%1\y10.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ocu
            [WARNING] Infected files in archives cannot be repaired!
   --> #$@%1\y17.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
   --> #$@%1\y18.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
   --> #$@%1\y19.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.QQpass.ass
            [WARNING] Infected files in archives cannot be repaired!
   --> #$@%1\y21.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.206
            [WARNING] Infected files in archives cannot be repaired!
   --> #$@%1\y5.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
   --> #$@%1\y6.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Omm.13
            [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
  _$@%1.rar:Zone.Identifier

End of the scan: 2008年2月28日  22:05
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   13 Files were scanned
   12 viruses and/or unwanted programs were found
   3 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   9 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-2-29 14:06:08

Scanned file: #$@%1.rar - Infected
#$@%1.rar/#$@%1/ckcltblov.exe - infected by Trojan-PSW.Win32.OnLineGames.pgc
#$@%1.rar/#$@%1/hhuspjsp.exe - infected by Trojan-PSW.Win32.OnLineGames.pcn
#$@%1.rar/#$@%1/itbmuwzj.exe - infected by Trojan-PSW.Win32.OnLineGames.pgc
#$@%1.rar/#$@%1/update.exe - infected by Trojan-Downloader.Win32.Small.hrp
#$@%1.rar/#$@%1/y10.exe - infected by Trojan-PSW.Win32.OnLineGames.ocq
#$@%1.rar/#$@%1/y17.exe - infected by Trojan-PSW.Win32.OnLineGames.omq
#$@%1.rar/#$@%1/y18.exe - infected by Trojan-PSW.Win32.Lmir.bpv
#$@%1.rar/#$@%1/y19.exe - infected by Trojan-PSW.Win32.QQPass.atb
#$@%1.rar/#$@%1/y21.exe - infected by Trojan.Win32.Vaklik.eb
#$@%1.rar/#$@%1/y5.exe - infected by Trojan.Win32.Vaklik.gi
#$@%1.rar/#$@%1/y6.exe - infected by Trojan-PSW.Win32.OnLineGames.omm

显示全部楼层 · 发表于 2008-2-29 14:08:29

删除文件后，发现全灭了

显示全部楼层 · 发表于 2008-2-29 14:17:45

木马名称:Trojan.Win32.Rootkit.bgb
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\HHUSPJSP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.jbo
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\ITBMUWZJ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Small.lpn
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\UPDATE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.hiv
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y10.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.iyf
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.QQPass.hru
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Vaklik.y
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y21.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Vaklik.es
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.huj
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\_$@%1\#$@%1\Y6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-2-29 14:30:40

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.Win32.Edog.q
病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： Trojan.PSW.Win32.Shanda.bd
病毒： Trojan.PSW.Win32.GamesOnline.fz
病毒： Worm.Win32.PaBug.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.QQGame.GEN

用户来源：互联网

软件版本：20.33.40

瑞星，诺顿11个

显示全部楼层 · 发表于 2008-2-29 14:33:37

Scan Log
Version of virus signature database: 2910 (20080228)
Date: 2008-2-29 Time: 14:33:37
Scanned disks, folders and files: E:\病毒\_$@%1.rar
E:\病毒\_$@%1.rar » RAR » #$@%1\ckcltblov.exe - a variant of Win32/PSW.OnLineGames.NLY trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\hhuspjsp.exe - Win32/PSW.OnLineGames.NMF trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\itbmuwzj.exe - a variant of Win32/PSW.OnLineGames.NLY trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\update.exe - a variant of Win32/TrojanDownloader.Small.HLV trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y10.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y17.exe - probably a variant of Win32/PSW.WOW.WU trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y18.exe - Win32/PSW.WOW.WU trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y19.exe - probably a variant of Win32/Genetik trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y21.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y5.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\病毒\_$@%1.rar » RAR » #$@%1\y6.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
Number of scanned objects: 12
Number of threats found: 11
Time of completion: 14:33:44 Total scanning time: 7 sec (00:00:07)

显示全部楼层 · 发表于 2008-2-29 14:45:12

毒霸2008 KILL 11。

显示全部楼层 · 发表于 2008-2-29 16:27:49

Roboon：已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.pgc 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\ckcltblov.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.pcn 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\hhuspjsp.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.pgc 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\itbmuwzj.exe//UPack
已删除: 木马程序 Trojan-Downloader.Win32.Small.hrp 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\update.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ocq 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y10.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.omq 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y17.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.Lmir.bpv 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y18.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.QQPass.atb 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y19.exe//UPX
已删除: 木马程序 Trojan.Win32.Vaklik.eb 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y21.exe//UPack
已删除: 木马程序 Trojan.Win32.Vaklik.gi 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y5.exe//UPack//PE_Patch
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.omm 文件: D:\Documents\桌面\_$@%1.rar/#$@%1\y6.exe//UPack

[病毒样本] 11个

本帖子中包含更多资源

本帖子中包含更多资源