3个

显示全部楼层 · 发表于 2008-3-7 21:27:56

朋友网站被挂了，。。

显示全部楼层 · 发表于 2008-3-7 21:31:08

detected: virus Heur.Trojan.Generic (modification)       File: C:\Documents and Settings\Owner\×ÀÃæ\ÐÂ½¨ÎÄ¼þ¼Ð.rar/ÐÂ½¨ÎÄ¼þ¼Ð\oybrba.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.tea       File: C:\Documents and Settings\Owner\×ÀÃæ\ÐÂ½¨ÎÄ¼þ¼Ð.rar/ÐÂ½¨ÎÄ¼þ¼Ð\upxdnd.exe//UPack
detected: virus Heur.Trojan.Generic (modification)       File: C:\Documents and Settings\Owner\×ÀÃæ\ÐÂ½¨ÎÄ¼þ¼Ð.rar/ÐÂ½¨ÎÄ¼þ¼Ð\WSockDrv32.exe//UPack

那两个

WSockDrv32.exe_ - Trojan-PSW.Win32.OnLineGames.tgb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[ 本帖最后由 wangjay1980 于 2008-3-7 23:00 编辑 ]

显示全部楼层 · 发表于 2008-3-7 21:31:40

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.34.42

老毒！

显示全部楼层 · 发表于 2008-3-7 21:31:47

Start of the scan: 2008年3月7日星期五  21:30

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹.rar'
C:\Documents and Settings\Administrator\桌面\新建文件夹.rar
  [0] Archive type: RAR
  --> ÐÂ½¨ÎÄ¼þ¼Ð\oybrba.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> ÐÂ½¨ÎÄ¼þ¼Ð\upxdnd.exe
   [DETECTION] Is the Trojan horse TR/Onlinegames.rxt
  --> ÐÂ½¨ÎÄ¼þ¼Ð\WSockDrv32.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was successfully wiped!
   [INFO]    The file was deleted!

End of the scan: 2008年3月7日星期五  21:30
Used time: 00:16 min

The scan has been done completely.

   0 Scanning directories
   4 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-7 21:32:42

被ESS斩杀致死
病毒库版本: 2929 (20080307)
日期: 2008-3-7 时间: 21:34:56
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\xx\桌面\新建文件夹.rar
D:\Documents and Settings\xx\桌面\新建文件夹.rar > RAR > 新建文件夹\oybrba.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\新建文件夹.rar > RAR > 新建文件夹\upxdnd.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
D:\Documents and Settings\xx\桌面\新建文件夹.rar > RAR > 新建文件夹\WSockDrv32.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
已扫描的对象数: 3
发现的威胁数: 3
完成时间: 21:35:01 总扫描时间: 5 秒 (00:00:05)

显示全部楼层 · 发表于 2008-3-7 21:48:46

已检测到: 病毒 Heur.Trojan.Generic （变种） URL: http://bbs.kafan.cn/attachment.php?aid=215694//新建文件夹/oybrba.exe//UPack
已检测到: 病毒 Heur.Trojan.Generic （变种） URL: http://bbs.kafan.cn/attachment.php?aid=215694//新建文件夹/WSockDrv32.exe//UPack
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.tea URL: http://bbs.kafan.cn/attachment.php?aid=215694//新建文件夹/upxdnd.exe//UPack

显示全部楼层 · 发表于 2008-3-7 22:03:31

盗号木马红伞NOD32同时报。

显示全部楼层 · 发表于 2008-3-7 22:05:36

点击后8.0.0.268报警特洛伊程序。

显示全部楼层 · 发表于 2008-3-7 22:08:06

Date Virus Name Virus Type Scan Type
2008-3-7 22:06 W32.Viking.k 病毒 Manual scan
2008-3-7 22:06 W32.Viking.k 病毒 Manual scan
2008-3-7 22:06 W32.Viking.k 病毒 Manual scan
2008-3-7 22:06 W32.Viking.k 病毒 Manual scan
2008-3-7 22:06 W32.Viking.k 病毒 Manual scan

显示全部楼层 · 发表于 2008-3-7 22:16:22

[病毒样本] 3个

本帖子中包含更多资源

7/3

本帖子中包含更多资源