自动上门的

显示全部楼层 · 发表于 2008-3-25 16:45:03

被映像劫持了。。。拍照留念一下，难得的。。。。昨天才刚刚体验一下深度7.0，还没设置呢....

，除了劫持以外，清理了几个dll和tmp，这些垃圾就不拿上来了，远程的木马就全收了，各位慢用。。。。

[ 本帖最后由曲中求于 2008-3-25 16:49 编辑 ]

显示全部楼层 · 发表于 2008-3-25 16:46:53

C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\1.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\10.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\11.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\12.exe - Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\13.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\14.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\15.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\16.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\17.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\18.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\19.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\20.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\21.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\22.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\23.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\24.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\25.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\26.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\27.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\28.exe - probably a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\29.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\3.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\30.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\32.exe - a variant of Win32/Agent.FWC trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\4.exe - Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\6.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\7.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\8.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\Don johnson\桌面\Programs.rar » RAR » Programs\9.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan

显示全部楼层 · 发表于 2008-3-25 16:48:14

紅傘全滅

显示全部楼层 · 发表于 2008-3-25 16:50:01

信息 2008-03-25  16:48:59 您此次查毒清除了24个病毒
信息 2008-03-25  16:48:59 您此次查毒共查出24个病毒以及危险代码
信息 2008-03-25  16:48:59 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件62个
信息 2008-03-25  16:48:59 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\8.exe Win32.PSWTroj.QQPass.106616 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\6.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\5.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\4.exe Win32.Troj.OnLineGamesT.b.20198 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\30.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\3.exe Win32.Troj.OnlineGamesT.ee.94208 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\28.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\27.exe Win32.Troj.OnlineGamesT.ee.94208 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\26.exe Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\25.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\24.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\23.exe Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\22.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\21.exe Win32.Troj.OnlineGames.dp.106496 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\20.exe Win32.Troj.OnLineGamesT.b.20198 清除成功
病毒 2008-03-25  16:48:59 D:\Desktop\Programs.rar\Programs\2.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\18.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\17.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\16.exe Win32.Troj.QQChief.sg.106496 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\15.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\13.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\12.exe Win32.Troj.OnLineGamesT.b.20198 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\10.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-25  16:48:58 D:\Desktop\Programs.rar\Programs\1.exe Win32.Troj.OnlineGameT.lf.94208 清除成功

显示全部楼层 · 发表于 2008-3-25 16:54:50

[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\1.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\10.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\11.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\13.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\14.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\15.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\16.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\17.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\18.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\19.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\2.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\21.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\22.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\23.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\24.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\25.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\26.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\27.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\28.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\3.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\30.exe->(UPack)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> c:\test\Programs.rar->Programs\31.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\5.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\6.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\7.exe->(UPack)
[Found security risk] <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)> c:\test\Programs.rar->Programs\8.exe->(UPX)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\Programs.rar->Programs\9.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-3-25, 16:54:01
Duration: 00:00:04

Scan result:

Scanned files:    2
Infected objects:    27
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-3-25 16:55:48

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.usl 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\1.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vdr 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\10.exe//PE_Patch//UPack
已隔離: 病毒 Heur.Trojan.Generic (修改) 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\11.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.rkf 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\12.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.whl 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\13.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vlp 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\14.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.whj 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\15.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vsi 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\16.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wen 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\17.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wef 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\18.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.weg 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\19.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.weh 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\2.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.rkf 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\20.exe
已隔離: 病毒 Heur.Trojan.Generic (修改) 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\21.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wfb 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\22.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.tmj 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\23.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vdr 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\24.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vdr 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\25.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.uir 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\26.exe//PE_Patch//UPack
已隔離: 病毒 Heur.Trojan.Generic (修改) 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\27.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vdr 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\28.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wej 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\29.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wek 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\3.exe//UPack//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vdr 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\30.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.fxb 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\33.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.rkf 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\4.exe
已隔離: 病毒 Heur.Trojan.Generic (修改) 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\5.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.who 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\6.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wdh 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\7.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wel 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\8.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.vww 檔案: C:\Documents and Settings\kato9096\桌面\223597.rar/Programs\9.exe//PE_Patch//UPack

31,上报6

[ 本帖最后由 kato9096 于 2008-3-25 16:57 编辑 ]

显示全部楼层 · 发表于 2008-3-25 17:29:39

红伞V8 S

Begin scan in 'C:\Documents and Settings\sanhu35\桌面\Programs.rar'
C:\Documents and Settings\sanhu35\桌面\Programs.rar
  [0] Archive type: RAR
--> Programs\1.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.15209
--> Programs\10.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> Programs\12.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
--> Programs\16.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdj
--> Programs\19.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.weg.1
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
  --> Programs\20.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
  --> Programs\23.exe
   [DETECTION] Is the Trojan horse TR/Small.6910
--> Programs\24.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
--> Programs\25.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
--> Programs\26.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
--> Programs\28.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
--> Programs\29.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
      [3] Archive type: RSRC
      --> Object
            [DETECTION] Contains detection pattern of the SPR/PortScan.I program
      --> Object
            [DETECTION] Is the Trojan horse TR/Dldr.VB.VOV
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wej
--> Programs\30.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
--> Programs\32.exe
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> Programs\33.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delf.crp.3
  --> Programs\4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
--> Programs\7.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Agent.aef
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
--> Programs\8.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wel
--> Programs\9.exe
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.vxf
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
   [NOTE]    A backup was created as '4857c652.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年3月25日星期二  17:29
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   34 Files were scanned
   38 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -4 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-3-25 17:42:55

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.mnp
病毒： Trojan.PSW.Win32.GameOL.mnj
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.SunOnline.mu
病毒： Trojan.PSW.Win32.GameOL.mpz
病毒： Trojan.PSW.Win32.GameOL.mot
病毒： Trojan.PSW.Win32.GameOL.mqg
病毒： Trojan.PSW.Win32.SunOnline.mz
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.OnlineGames.eop
病毒： Trojan.PSW.Win32.GameOL.mjf
病毒： Trojan.PSW.Win32.SunOnline.mr
病毒： RootKit.Win32.Mnless.km
病毒： Trojan.PSW.Win32.GameOL.mpt
病毒： Trojan.PSW.Win32.QQPass.zfd
病毒： Trojan.PSW.Win32.GameOL.mpv

MAC 地址：00:30:18:A9:75:A2

用户来源：局域网

软件版本：20.37.10

显示全部楼层 · 发表于 2008-3-25 17:54:53

E:\VIRUS\Programs.rar>>Programs\1.exe TrojanDownloader.Nurech.bd.bmqk 木马还未处理
E:\VIRUS\Programs.rar>>Programs\10.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
E:\VIRUS\Programs.rar>>Programs\11.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\12.exe TrojanPSW.OnLineGames.rkf.skmg 木马还未处理
E:\VIRUS\Programs.rar>>Programs\13.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\14.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\15.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\16.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\17.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\18.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\19.exe TrojanPSW.OnLineGames.weg.bbyg 木马还未处理
E:\VIRUS\Programs.rar>>Programs\2.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\20.exe TrojanPSW.OnLineGames.rkf.daak 木马还未处理
E:\VIRUS\Programs.rar>>Programs\21.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\22.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\23.exe TrojanPSW.OnLineGames.tmj.jhey 木马还未处理
E:\VIRUS\Programs.rar>>Programs\24.exe TrojanPSW.OnLineGames.vdr.ulsl 木马还未处理
E:\VIRUS\Programs.rar>>Programs\25.exe TrojanPSW.OnLineGames.vdr.jjah 木马还未处理
E:\VIRUS\Programs.rar>>Programs\26.exe TrojanPSW.OnLineGames.uir.ylgw 木马还未处理
E:\VIRUS\Programs.rar>>Programs\27.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\28.exe TrojanPSW.OnLineGames.vdr.zxzo 木马还未处理
E:\VIRUS\Programs.rar>>Programs\29.exe W32.Generic.worm.jhho 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\3.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\30.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
E:\VIRUS\Programs.rar>>Programs\33.exe>>emb-1.dll Trojan.Delf.yiy.jblm.dll 木马还未处理
E:\VIRUS\Programs.rar>>Programs\4.exe TrojanPSW.OnLineGames.rkf.ohuo 木马还未处理
E:\VIRUS\Programs.rar>>Programs\5.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\6.exe W32.Viking.k 病毒还未处理
E:\VIRUS\Programs.rar>>Programs\7.exe TrojanPSW.OnLineGames.wdh.aitd 木马还未处理
E:\VIRUS\Programs.rar>>Programs\8.exe TrojanPSW.QQPass.zfd.vmcc 木马还未处理
E:\VIRUS\Programs.rar>>Programs\9.exe TrojanPSW.OnLineGames.vww.xyge 木马还未处理

显示全部楼层 · 发表于 2008-3-25 17:57:14

终于想起来在哪个网站了，不过清得很快，还好被我抢先一步：被插入hxxp://www.ackii.net/2.htm?1

再一次起用咖啡：

2008-3-25 17:52:01 已由访问保护规则禁止 PC-200803241624\星星 C:\Program Files\Internet Explorer\iexplore.exe C:\WINDOWS\system32\a.exe 通用最大保护:禁止在 Windows 文件夹中创建新的可执行文件已阻止的操作: 创建

[病毒样本] 自动上门的

本帖子中包含更多资源

31

本帖子中包含更多资源

31