查看: 4133|回复: 19
收起左侧

[病毒样本] 78个

[复制链接]
zzh161
发表于 2008-3-28 16:48:28 | 显示全部楼层 |阅读模式
这年头流行毒网上挂毒网吗。。。真是多啊

样本:   

PS,鄙视theone把附件弄得那么小

[ 本帖最后由 zzh161 于 2008-3-28 16:53 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
leonfg
发表于 2008-3-28 16:51:07 | 显示全部楼层
下面有人扫了

[ 本帖最后由 leonfg 于 2008-3-28 17:07 编辑 ]
挪威的冬天
发表于 2008-3-28 16:51:41 | 显示全部楼层
占座先 附件太大了?

信息        2008-03-28  17:18:13        您此次查毒隔离了63个文件                       
信息        2008-03-28  17:18:13        您此次查毒清除了1个病毒                       
信息        2008-03-28  17:18:13        您此次查毒共查出64个病毒以及危险代码                       
信息        2008-03-28  17:18:13        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件142个                       
信息        2008-03-28  17:18:13        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒

[ 本帖最后由 挪威的冬天 于 2008-3-28 17:18 编辑 ]
The EQs
发表于 2008-3-28 16:57:34 | 显示全部楼层

71。其余的To EVL

C:\Documents and Settings\Don johnson\桌面\11\11\001.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\002.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\003.exe - a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\004.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\005.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\006.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\007.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\008.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\009.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\010.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\1(1).exe - a variant of Win32/TrojanDropper.Small.NGH trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\1.exe - Win32/Ceckno.DL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\10.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\11(1).exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\11.exe - Win32/TrojanDownloader.Agent.NWG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\12(1).exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\13.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\14(1).exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\14.exe - Win32/PSW.QQPass.BMD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\15.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\16.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\17.exe - a variant of Win32/PSW.QQPass.NCZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\18.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\19.exe - Win32/PSW.WOW.WU trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\2.exe - a variant of Win32/Anilogo worm - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\20.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\21.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\22.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\23.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\24.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\25.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\27.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\30.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\6.exe - probably a variant of Win32/Hupigon trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\614.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\7.exe » NSIS » 115.exe » NSIS » DoSSSetup.dll - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\11\11\7.exe » NSIS » 115.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\11\11\7.exe » NSIS » 115.exe - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\11\11\7.exe - a variant of Win32/Adware.Cinmus application - deleted - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\8.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\bf.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\lz.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\pps.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\rl.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc1.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc10.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc11.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc12.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc13.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc14.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc15.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc16.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc17.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc18.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc19.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc20.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc21.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc22.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc23.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc24.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc25.exe - a variant of Win32/PSW.QQPass.NCZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc3.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc4.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc6.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc7.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc8.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\soc9.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\xl.exe - a variant of Win32/Small.NO trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\xl1.exe - Win32/TrojanDownloader.Small.NZS trojan - cleaned by deleting - quarantined
C:\Documents and Settings\Don johnson\桌面\11\11\yes.exe - probably a variant of Win32/TrojanDownloader.Delf.OBZ trojan - cleaned by deleting - quarantined
aerbeisi
发表于 2008-3-28 16:58:44 | 显示全部楼层

75

[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\001.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\002.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\003.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\004.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\005.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\006.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\007.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\008.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\009.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\010.exe->exefile->(UPack)
[Found downloader]         <W32/Downldr2.AJJN (exact)>        c:\test\11\1.exe
[Found security risk]         <W32/Agent.S.gen!Eldorado (not disinfectable, generic)>        c:\test\11\10.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\11(1).exe->(UPack)
[Found Trojan]         <W32/Trojan2.AFNY (exact)>        c:\test\11\11.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\12(1).exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\12.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\13.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\14(1).exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        c:\test\11\14.exe->(UPX)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\15.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\16.exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        c:\test\11\17.exe->(UPX)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\18.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\19.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\2.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\20.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\21.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\22.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\23.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\24.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\25.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\26.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-CSU!Eldorado (dropper, damaged, not disinfectable)>        c:\test\11\27.exe->(embedded)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\28.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\29.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\30.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\6(1).exe->(UPack)
[Found security risk]         <W32/Agent.S.gen!Eldorado (not disinfectable, generic)>        c:\test\11\6.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\614.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\8.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        c:\test\11\9.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\bf.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\lz.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\pps.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\rl.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc1.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc10.exe->(UPack)
[Found virus]         <W32/Downloader.gen10>        c:\test\11\soc11.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc12.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc13.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc14.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc15.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc16.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc17.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc18.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc19.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc2.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc20.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc21.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc22.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc23.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc24.exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        c:\test\11\soc25.exe->(UPX)
[Found possible virus]         <W32/VBEMU:VisualBasicMalware!Maximus>        c:\test\11\soc26.exe->(NSPack)->(PE_Patch)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc3.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc4.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc5.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc6.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc7.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc8.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\soc9.exe->(UPack)
[Found possible virus]         <W32/NewMalware-Rootkit-PX-based!Maximus>        c:\test\11\xl.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\xl1.exe->(UPack)
[Found security risk]         <W32/OnlineGames.H.gen!Eldorado (not disinfectable, generic)>        c:\test\11\xx.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\11\yes.exe->(UPack)
wb800921
头像被屏蔽
发表于 2008-3-28 17:01:01 | 显示全部楼层
费尔75
ilyf44
发表于 2008-3-28 17:07:18 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
nosferatu
头像被屏蔽
发表于 2008-3-28 17:37:16 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\11'
C:\Documents and Settings\Administrator\桌面\11\11\001.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.usl
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\002.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\003.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tll
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\004.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4820bc80.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\005.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wkm.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\006.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12703
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\007.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.jue.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\008.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\009.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12351
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\010.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481cbc81.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\1(1).exe
      [DETECTION] Is the Trojan horse TR/Drop.RKY.7
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\1.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Ceckno.DL.4 Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\10.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.NAC
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\11(1).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\11.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.113152
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\12(1).exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4814bc82.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc84.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\14(1).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\14.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.36
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\16.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\17.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc89.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\19.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\2(1).exe
      [DETECTION] Contains detection pattern of the dropper DR/Rbot.157803
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\2.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Autorun.BK
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.jue.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\21.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc83.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\22.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wkm.4
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\23.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc85.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\24.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc86.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\25.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Vxd.3
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\26.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc88.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\27.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/HideProcess.B
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\28.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '481abc8a.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\29.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\30.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\6(1).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\6.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\614.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\9.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\bf.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\lz.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\pps.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\rl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc1.exe
      [DETECTION] Is the Trojan horse TR/PSW.15225
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc10.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '484fbcc2.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\soc14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wjo.4
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxqe
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wfb.2
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc18.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc20.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc21.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc22.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc23.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uyq.12
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc24.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '484fbcc3.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\soc25.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc26.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '49ee1f94.qua'!
C:\Documents and Settings\Administrator\桌面\11\11\soc3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wmi
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.652
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.615
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc7.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\soc9.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\xl.exe
      [DETECTION] Is the Trojan horse TR/Agent.ifd
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\xl1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\xx.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\11\11\yes.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.few
      [INFO]      The file was deleted!


End of the scan: 星期五 2008年3月28日  17:37
Used time: 00:14 min

The scan has been done completely.

      2 Scanning directories
     78 Files were scanned
     64 viruses and/or unwanted programs were found
     13 Files were classified as suspicious:
     64 files were deleted
      0 files were repaired
     13 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     14 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
凝逸反毒
发表于 2008-3-28 20:00:36 | 显示全部楼层
[凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸反毒.扫描病毒引擎3.4-日志]       20080328_195716
----------


扫描目录:f:\999\76\11|
文件总数:78
删除文件 | virus [478>20080325_ny0810.axx] | f:\999\76\11\001.exe
删除文件 | virus [479>20080325_ny0810.axx] | f:\999\76\11\002.exe
删除文件 | virus [3067>20080311_ny0803.axx] | f:\999\76\11\003.exe
删除文件 | virus [155>20080328_ny0811.axx] | f:\999\76\11\004.exe
删除文件 | virus [166>20080328_ny0811.axx] | f:\999\76\11\005.exe
删除文件 | virus [173>20080328_ny0811.axx] | f:\999\76\11\006.exe
删除文件 | virus [467>20080325_ny0810.axx] | f:\999\76\11\007.exe
删除文件 | virus [147>20080328_ny0811.axx] | f:\999\76\11\008.exe
删除文件 | virus [464>20080325_ny0810.axx] | f:\999\76\11\11(1).exe
删除文件 | virus [168>20080328_ny0811.axx] | f:\999\76\11\12(1).exe
删除文件 | virus [170>20080328_ny0811.axx] | f:\999\76\11\13.exe
删除文件 | virus [473>20080325_ny0810.axx] | f:\999\76\11\14(1).exe
删除文件 | virus [179>20080328_ny0811.axx] | f:\999\76\11\15.exe
删除文件 | virus [150>20080328_ny0811.axx] | f:\999\76\11\18.exe
删除文件 | virus [2937>20080311_ny0803.axx] | f:\999\76\11\19.exe
删除文件 | virus [986>20080221_ny0035.axx] | f:\999\76\11\2(1).exe
删除文件 | virus [480>20080325_ny0810.axx] | f:\999\76\11\20.exe
删除文件 | virus [152>20080328_ny0811.axx] | f:\999\76\11\22.exe
删除文件 | virus [458>20080325_ny0810.axx] | f:\999\76\11\23.exe
删除文件 | virus [459>20080325_ny0810.axx] | f:\999\76\11\24.exe
删除文件 | virus [460>20080325_ny0810.axx] | f:\999\76\11\25.exe
删除文件 | virus [1154>20080328_ny0811.axx] | f:\999\76\11\26.exe
删除文件 | virus [175>20080328_ny0811.axx] | f:\999\76\11\29.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\30.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\614.exe
删除文件 | virus [1138>20080328_ny0811.axx] | f:\999\76\11\7.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\bf.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\lz.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\pps.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\rl.exe
删除文件 | virus [319>20080325_ny0810.axx] | f:\999\76\11\soc1.exe
删除文件 | virus [3069>20080302_ny0801.axx] | f:\999\76\11\soc10.exe
删除文件 | virus [944>20080328_ny0811.axx] | f:\999\76\11\soc12.exe
删除文件 | virus [946>20080328_ny0811.axx] | f:\999\76\11\soc14.exe
删除文件 | virus [862>20080306_ny0802.axx] | f:\999\76\11\soc16.exe
删除文件 | virus [307>20080325_ny0810.axx] | f:\999\76\11\soc17.exe
删除文件 | virus [936>20080328_ny0811.axx] | f:\999\76\11\soc19.exe
删除文件 | virus [948>20080328_ny0811.axx] | f:\999\76\11\soc22.exe
删除文件 | virus [315>20080325_ny0810.axx] | f:\999\76\11\soc23.exe
删除文件 | virus [954>20080328_ny0811.axx] | f:\999\76\11\soc3.exe
删除文件 | virus [951>20080328_ny0811.axx] | f:\999\76\11\soc4.exe
删除文件 | virus [320>20080325_ny0810.axx] | f:\999\76\11\soc5.exe
删除文件 | virus [945>20080328_ny0811.axx] | f:\999\76\11\soc9.exe
删除文件 | virus [148>20080328_ny0811.axx] | f:\999\76\11\xl1.exe
扫描完成|病毒:44|感染:0|未知:34|正常:0|文件:78|耗时:1.88分
冷冷
发表于 2008-3-28 20:31:55 | 显示全部楼层
IKARUS
78 Files scanned
   (0 Archives with 0 files)
65 Signatures found
11 Suspect code-parts found
Used time: 0:04.000
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-14 17:47 , Processed in 0.142486 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表