出门前 14只一捆

jimmyleo

那个hxxxz连出去的失效了。。。。

jimmyleo

吃个早饭出门去

bjfhj

病毒库版本: 2946 (20080313)
日期: 2008-3-14  时间: 8:42:10
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\S.rar
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 12.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 13.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 15.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 16.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 17.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 18.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 19.exe - Win32/PSW.OnLineGames.NMN 特洛伊木马
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 20.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 21.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 22.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 23.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 24.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > hxxxzz.exe - 可能是 Win32/Delf.NDF 蠕虫 的变种
C:\Documents and Settings\Administrator\桌面\S.rar > RAR > 11.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
已扫描的对象数: 14
发现的威胁数: 14
完成时间: 8:42:12  总扫描时间: 2 秒 (00:00:02)

llgiggs

傘C全滅

jick117

Virus: Generic.PWS.Games.4.FA4AE674, Trojan.PWS.OnLineGames.NSR (6x), Trojan.PWS.OnLineGames.SQL (3x), Trojan.PWS.Delf.IID, Generic.PWS.Games.4.6528CC4E, Generic.Malware.SP!Pk!g.76765502, Generic.PWS.Games.4.30F5B6B5
File: S[1].rar
Directory: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VD9OC4FL
Process: IEXPLORE.EXE

看来卡巴挂了一些

红心王子

蠕虫名称:Worm.Win32.AutoRun.ayv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\HXXXZZ.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

秋叶濛濛

Begin scan in 'F:\Virus\S.rar'
F:\Virus\S.rar
  [0] Archive type: RAR
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sie
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ktw
  --> 20.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 21.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 22.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 23.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> hxxxzz.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.cyj
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

Nblock

微点杀光

22.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WSOCKDRV32.EXE
2) C:\WINDOWS\SYSTEM32\WSOCKDRV32.DLL
是否删除木马程序及其衍生物?

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\S'
C:\Documents and Settings\Administrator\My Documents\S\
  11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.sie
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  19.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ktw
      [NOTE]      The file was deleted!
  20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  21.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  22.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  23.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  24.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  hxxxzz.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.cyj
      [NOTE]      The file was deleted!


End of the scan: 2008年3月13日  19:39
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     14 Files were scanned
     14 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     14 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      2 Warnings
     14 Notes

spaceplane

BD  14