6pcs

显示全部楼层 · 发表于 2008-3-29 11:23:05

6
C:\Documents and Settings\Administrator\桌面\6.rar>>2.exe W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>27.exe W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>4.exe W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>11.exe TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>34.exe TrojanPSW.OnLineGames.rri.fccq 木马还未处理
C:\Documents and Settings\Administrator\桌面\6.rar>>32.exe TrojanPSW.GameOL.mpw.flfw 木马还未处理

显示全部楼层 · 发表于 2008-3-29 11:23:51

Starting the file scan:

Begin scan in 'D:\6.rar'
D:\6.rar
  [0] Archive type: RAR
  --> 34.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 2.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 27.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 32.exe
   [DETECTION] Is the Trojan horse TR/VB.cjq
  --> 11.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-29 11:24:10

信息 2008-03-29  11:23:58 您此次查毒清除了4个病毒
信息 2008-03-29  11:23:58 您此次查毒共查出4个病毒以及危险代码
信息 2008-03-29  11:23:58 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件13个
信息 2008-03-29  11:23:58 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-29  11:23:58 D:\Desktop\6.rar\32.exe Win32.Troj.OnlineGameT.lf.94208 清除成功
病毒 2008-03-29  11:23:58 D:\Desktop\6.rar\27.exe Win32.Troj.OnlineGamesT.ee.94208 清除成功
病毒 2008-03-29  11:23:58 D:\Desktop\6.rar\2.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-03-29  11:23:58 D:\Desktop\6.rar\34.exe Win32.Troj.OnlineGamesT.ur.90112 清除成功

显示全部楼层 · 发表于 2008-3-29 11:26:23

下不来

显示全部楼层 · 发表于 2008-3-29 11:26:27

C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 34.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 27.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 4.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 32.exe - a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\6.rar » RAR » 11.exe - a variant of Win32/PSW.OnLineGames.NML trojan

显示全部楼层 · 发表于 2008-3-29 11:27:46

微点已知的：
木马名称:Trojan-Downloader.Win32.Dadobra.vf

程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\E\34.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Dropper.Win32.Agent.iqe

程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\E\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Backdoor.Win32.GreyPigeon.pwt

程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\E\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.VB.cqp

程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\E\32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

未知的：
程序:
C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\E\27.EXE
木马程序生成以下文件:
1) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\WINSVR32.EXE
2) C:\SANDBOX\ADMINISTRATOR\DEFAULTBOX\DRIVE\C\WINDOWS\SYSTEM32\WINSVR32.DLL
是否删除木马程序及其衍生物?

11.exe，这个不认识，上报

[ 本帖最后由 spatra 于 2008-3-29 11:28 编辑 ]

显示全部楼层 · 发表于 2008-3-29 19:04:12

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： RootKit.Win32.Undef.ec
病毒： Trojan.PSW.Win32.GameOL.msu
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.SO2Online.bh
病毒： RootKit.Win32.Mnless.kl
病毒： Trojan.PSW.Win32.GameOL.mpw

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.51

显示全部楼层 · 发表于 2008-3-29 19:05:30

[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->34.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->2.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->27.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->4.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->32.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\virus\6.rar->11.exe->(UPack)
[Contains infected objects] C:\virus\6.rar
[Quarantined] C:\virus\6.rar->11.exe->(UPack)

显示全部楼层 · 发表于 2008-3-29 20:27:49

-----------------------------SCAN REPORT-----------------------------
F-PROT Antivirus for Windows

Antivirus Scanning Engine version number: 4.4.2
Virus signature file from: 2008-3-29, 4:09

Scan name: Virus Tester
Path to scan: C:\Documents and Settings\All Users\Documents\Test\|

Normal scan
Also scan: Inside subfolders, Compressed files, Streams

Scan started: 2008-3-29, 20:27:28
---------------------------------------------------------------------
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\6.rar->34.exe->(embedded)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\6.rar->2.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\6.rar->27.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\6.rar->4.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\6.rar->32.exe->(embedded)

---------------------------------------------------------------------
Scan ended: 2008-3-29, 20:27:34
Duration: 0:00:06

Scan result:

Scanned files:    6
Infected objects:    5
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 6pcs

本帖子中包含更多资源

six

本帖子中包含更多资源

6

20/7