3PCS

显示全部楼层 · 发表于 2008-3-26 13:27:51

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\3.rar->3.exe->(embedded)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\3.rar->1.exe->(embedded)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\3.rar->2.exe->(embedded)
[Contains infected objects] C:\3.rar
[Quarantined] C:\3.rar->2.exe->(embedded)

显示全部楼层 · 发表于 2008-3-26 13:28:15

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\3.rar'
C:\Documents and Settings\Administrator\My Documents\
  3.rar
[0] Archive type: RAR
   --> 3.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
            [WARNING] Infected files in archives cannot be repaired!
   --> 1.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.vxf
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
            [WARNING] Infected files in archives cannot be repaired!
   --> 2.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.15225
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wdi
            [WARNING] Infected files in archives cannot be repaired!
   [WARNING] The file was ignored!
  3.rar:Zone.Identifier

End of the scan: 2008年3月25日  22:28
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   5 Files were scanned
   5 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   1 Archives were scanned
   6 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-26 13:44:21

2008-3-26 13:43:57 未采取操作 EKINCHENG D:\Documents and Settings\EKINCHENG\桌面\3.rar\1.EXE Generic.dx(特洛伊)

显示全部楼层 · 发表于 2008-3-26 15:08:43

Virus: Trojan-PSW.Win32.OnLineGames.vww

显示全部楼层 · 发表于 2008-3-26 16:01:15

D:\firefox download\Autorun.rar > RAR > Autorun.inf - 正常
D:\firefox download\Autorun.rar > RAR > delautorun.bat - 正常
D:\firefox download\Autorun.rar > RAR > delautorun.ini - 正常
D:\firefox download\Autorun.rar:Zone.Identifier - 正常

[ 本帖最后由傻猪猪米走鸡于 2008-3-26 16:02 编辑 ]

显示全部楼层 · 发表于 2008-3-26 16:07:58

E:\VIRUS\3(3).rar>>3.exe RootKit.Mnless.km.tshb 木马还未处理
E:\VIRUS\3(3).rar>>1.exe TrojanPSW.OnLineGames.vww.xyge 木马还未处理
E:\VIRUS\3(3).rar>>2.exe Heuri.Suspicious.ERNM 启发式扫描还未处理

显示全部楼层 · 发表于 2008-3-26 16:08:13

detected: Trojan program Trojan-PSW.Win32.OnLineGames.wdi URL: http://bbs.kafan.cn/attachment.p ... /PE_Patch//UPack//#

显示全部楼层 · 发表于 2008-3-26 16:48:47

信息 2008-03-26  16:48:35 您此次查毒清除了2个病毒
信息 2008-03-26  16:48:35 您此次查毒共查出2个病毒以及危险代码
信息 2008-03-26  16:48:35 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件7个
信息 2008-03-26  16:48:35 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-26  16:48:35 D:\Desktop\3.rar\2.exe Win32.Troj.OnlineGameT.lf.94208 清除成功
病毒 2008-03-26  16:48:35 D:\Desktop\3.rar\1.exe Win32.Troj.OnlineGamesT.ur.90112 清除成功

显示全部楼层 · 发表于 2008-3-26 17:51:33

原帖由 傻猪猪米走鸡 于 2008-3-26 16:01 发表
D:\firefox download\Autorun.rar > RAR > Autorun.inf - 正常
D:\firefox download\Autorun.rar > RAR > delautorun.bat - 正常
D:\firefox download\Autorun.rar > RAR > delautorun.ini - 正常
D:\firefox dow ...

哥哥仔，报告唔岩啵，点来嘎？点解点解？

[病毒样本] 3PCS

本帖子中包含更多资源

浏览过的版块