amazing的教育网

显示全部楼层 · 发表于 2008-3-5 14:09:00

……别说中毒了连主动下载都下不成……

25PCS

显示全部楼层 · 发表于 2008-3-5 14:17:31

Begin scan in 'C:\Documents and Settings\haha\桌面\0305.rar'
C:\Documents and Settings\haha\桌面\0305.rar
  [0] Archive type: RAR
  --> 0305\1.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.1
--> 0305\12.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/CrashSystem.C
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 0305\13.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ryp.2
--> 0305\15.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.442
--> 0305\17.exe
      [DETECTION] Contains suspicious code HEUR/Malware
--> 0305\18.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      --> Object
         [4] Archive type: RSRC
         --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.seu.2
--> 0305\2.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.rxt
  --> 0305\23.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12342.2
  --> 0305\24.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12143
--> 0305\25.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sqb
--> 0305\26.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Dldr.Adload.MG.8
  --> 0305\4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sqz.3
--> 0305\5.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> 0305\8.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rwu.2
--> 0305\9.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne.8
  --> 0305\sysupdate.exe
   [DETECTION] Is the Trojan horse TR/Agent.2433
   [INFO]    A backup was created as '47fe3b44.qua'  ( QUARANTINE )

End of the scan: 2008年3月5日  14:17
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   26 Files were scanned
   27 viruses and/or unwanted programs were found
   4 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

许久不见阿米啦。

显示全部楼层 · 发表于 2008-3-5 14:28:19

ess
25

显示全部楼层 · 发表于 2008-3-5 14:48:46

25个，测试组又要忙了

显示全部楼层 · 发表于 2008-3-5 14:49:32

毒霸KILL 22

显示全部楼层 · 发表于 2008-3-5 15:28:26

D:\firefox download\0305.rar » RAR » 0305\1.exe - probably a variant of Win32/Genetik trojan
D:\firefox download\0305.rar » RAR » 0305\10.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\11.exe - Win32/PSW.QQPass.NCZ trojan
D:\firefox download\0305.rar » RAR » 0305\12.exe - probably a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\13.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
D:\firefox download\0305.rar » RAR » 0305\14.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\15.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\firefox download\0305.rar » RAR » 0305\16.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\17.exe - a variant of Win32/PSW.OnLineGames.NML trojan
D:\firefox download\0305.rar » RAR » 0305\18.exe - Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
D:\firefox download\0305.rar » RAR » 0305\20.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\21.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\firefox download\0305.rar » RAR » 0305\22.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\23.exe - Win32/PSW.OnLineGames.PBQ trojan
D:\firefox download\0305.rar » RAR » 0305\24.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
D:\firefox download\0305.rar » RAR » 0305\25.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\26.exe - Win32/VB.NKD trojan
D:\firefox download\0305.rar » RAR » 0305\3.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\4.exe - probably a variant of Win32/Genetik trojan
D:\firefox download\0305.rar » RAR » 0305\5.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
D:\firefox download\0305.rar » RAR » 0305\7.exe - Win32/PSW.WOW.WU trojan
D:\firefox download\0305.rar » RAR » 0305\8.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
D:\firefox download\0305.rar » RAR » 0305\9.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\firefox download\0305.rar » RAR » 0305\sysupdate.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2008-3-5 15:32:39

瑞星病毒查杀结果报告

软件版本：20.34.20

18个

[ 本帖最后由 kkgh 于 2008-3-5 15:34 编辑 ]

显示全部楼层 · 发表于 2008-3-5 15:34:33

ESS扫描日志
病毒库版本: 2922 (20080305)
日期: 2008-3-5 时间: 15:36:26
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\xx\桌面\0305.rar
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\1.exe - 可能是 Win32/Genetik 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\10.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\11.exe - Win32/PSW.QQPass.NCZ 特洛伊木马
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\12.exe - 可能是 Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\13.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\14.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\15.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\16.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\17.exe - Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\18.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\2.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\20.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\21.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\22.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\23.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\24.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\25.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\26.exe - Win32/VB.NKD 特洛伊木马
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\3.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\4.exe - 可能是 Win32/Genetik 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\5.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\7.exe - Win32/PSW.WOW.WU 特洛伊木马
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\8.exe - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\9.exe - Win32/PSW.OnLineGames.YA 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\0305.rar > RAR > 0305\sysupdate.exe - 未查明的 NewHeur_PE 病毒 [7]
已扫描的对象数: 25
发现的威胁数: 25
完成时间: 15:36:43 总扫描时间: 17 秒 (00:00:17)
备注:
[7] 对象可能感染了未知病毒。

显示全部楼层 · 发表于 2008-3-5 15:52:45

信息 2008-03-05  15:51:52 您此次查毒清除了22个病毒
信息 2008-03-05  15:51:52 您此次查毒共查出22个病毒以及危险代码
信息 2008-03-05  15:51:52 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件49个
信息 2008-03-05  15:51:52 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\9.exe Win32.Troj.OnlineGamesT.ty.98304 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\8.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\7.exe Win32.Troj.LmirT.by.9900 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\5.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\4.exe Win32.Troj.OnLineGames.ea.94208 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\25.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\24.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\23.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\22.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\21.exe Win32.Troj.OnlineGamesT.ty.98304 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\20.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\2.exe Win32.Troj.OnlineGamesT.ty.98304 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\18.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-05  15:51:52 D:\Desktop\0305.rar\0305\17.exe Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\16.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\15.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\14.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\13.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\12.exe Win32.Troj.OnLineGamesT.en.5437 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\11.exe Win32.Troj.QQPswT.bs.116858 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\10.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-05  15:51:51 D:\Desktop\0305.rar\0305\1.exe Win32.Troj.OnLineGamesT.ax.94208 清除成功

显示全部楼层 · 发表于 2008-3-5 16:07:16

微点都砍掉了

[病毒样本] amazing的教育网

本帖子中包含更多资源

all kill