[病毒样本] 25

显示全部楼层 · 发表于 2008-4-1 23:57:48

dpack.rar
[0] Archive type: RAR
--> admin2.exe
      [DETECTION] Contains detection pattern of the dropper DR/Inject.alz
      [WARNING] Infected files in archives cannot be repaired!
--> servstr.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.brp Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> webinst.cab
      [1] Archive type: CAB (Microsoft)
      --> webinst.dll
         [DETECTION] Is the Trojan horse TR/Downloader.Gen
         [WARNING] Infected files in archives cannot be repaired!
      --> setup.inf
--> Kvmon.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> Kvmon.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING] Infected files in archives cannot be repaired!
--> mrofinu.exe.bin
      [1] Archive type: ZIP
      --> mrofinu.exe
         [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
         [WARNING] Infected files in archives cannot be repaired!
--> mrofinu1535.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> mrofinu1535.exe.tmp
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> svchost.exe
      [DETECTION] Is the Trojan horse TR/PSW.Maran.FF
      [WARNING] Infected files in archives cannot be repaired!
--> Ir32_a.exe
      [DETECTION] Is the Trojan horse TR/Agent.AHQQ.1
      [WARNING] Infected files in archives cannot be repaired!
--> Ir32_b.exe
--> lwisys16_080122.dll
      [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.12
      [WARNING] Infected files in archives cannot be repaired!
--> mwisys32_080122.dll
      [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.11
      [WARNING] Infected files in archives cannot be repaired!
--> myhide.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
      [WARNING] Infected files in archives cannot be repaired!
--> rqRKBtUL.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> svchst.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wgc
      [WARNING] Infected files in archives cannot be repaired!
--> sysgrw.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
      [WARNING] Infected files in archives cannot be repaired!
--> sysgrz.exe
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
      [WARNING] Infected files in archives cannot be repaired!
--> systemlf.dll
      [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
      [WARNING] Infected files in archives cannot be repaired!
--> systemz.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wna
      [WARNING] Infected files in archives cannot be repaired!
--> syswin.sys
--> tj1viwer.dll
      [DETECTION] Is the Trojan horse TR/Drop.Maran.CJ.2
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was moved to '48535bd8.qua'!

显示全部楼层 · 发表于 2008-4-2 00:41:44

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\SERVSTR.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\NTTHIA.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\IR32_A.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\IR32_B.EXE
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2008-4-2 10:31:06

20080402 023744 扫描 '单击右键扫描' 已启动。
20080402 023746 在 'D:\dpack.rar\admin2.exe\SfxArchiveData\t1.exe' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 在 'D:\dpack.rar\admin2.exe\SfxArchiveData\f1.exe' 中检测到病毒/间谍软件 'Mal/Packer' 。
20080402 023746 在 'D:\dpack.rar\servstr.exe' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 在 'D:\dpack.rar\webinst.cab\webinst.dll' 中检测到病毒/间谍软件 'Troj/SpyWad-AW' 。
20080402 023746 在 'D:\dpack.rar\Kvmon.dll\FILE:0000' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 已确认文件 "D:\dpack.rar\Kvmon.dll" 为可疑文件（类型 'Sus/Dropper-A'）。
请向 Sophos 寄送一份样本。
20080402 023746 在 'D:\dpack.rar\Kvmon.exe\FILE:0000\FILE:0000' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 已确认文件 "D:\dpack.rar\Kvmon.exe\FILE:0000" 为可疑文件（类型 'Sus/Dropper-A'）。
请向 Sophos 寄送一份样本。
20080402 023746 已确认文件 "D:\dpack.rar\Kvmon.exe" 为可疑文件（类型 'Sus/Dropper-R'）。
请向 Sophos 寄送一份样本。
20080402 023746 在 'D:\dpack.rar\mrofinu.exe.bin\mrofinu.exe' 中检测到病毒/间谍软件 'Mal/Behav-191' 。
20080402 023746 在 'D:\dpack.rar\mrofinu1535.exe' 中检测到病毒/间谍软件 'Mal/Behav-191' 。
20080402 023746 在 'D:\dpack.rar\mrofinu1535.exe.tmp' 中检测到病毒/间谍软件 'Mal/Behav-191' 。
20080402 023746 在 'D:\dpack.rar\svchost.exe' 中检测到病毒/间谍软件 'Troj/Maran-AL' 。
20080402 023746 在 'D:\dpack.rar\Ir32_b.exe' 中检测到病毒/间谍软件 'Mal/Behav-204' 。
20080402 023746 在 'D:\dpack.rar\lwisys16_080122.dll' 中检测到病毒/间谍软件 'Mal/Agent-C' 。
20080402 023746 已确认文件 "D:\dpack.rar\rqRKBtUL.dll" 为可疑文件（类型 'Sus/Behav-200'）。
请向 Sophos 寄送一份样本。
20080402 023746 在 'D:\dpack.rar\svchst.exe' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 在 'D:\dpack.rar\sysgrw.exe' 中检测到病毒/间谍软件 'Mal/Packer' 。
20080402 023746 在 'D:\dpack.rar\sysgrz.exe' 中检测到病毒/间谍软件 'Mal/Packer' 。
20080402 023746 在 'D:\dpack.rar\systemlf.dll' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 在 'D:\dpack.rar\systemz.dll' 中检测到病毒/间谍软件 'Mal/Generic-A' 。
20080402 023746 在 'D:\dpack.rar\tj1viwer.dll' 中检测到病毒/间谍软件 'Troj/Maran-Gen' 。
20080402 023746 扫描 '单击右键扫描' 已完成。
20080402 023746 扫描'单击右键扫描'摘要：
已扫描项目：7
错误：0
已隔离项目：1
已处置项目：0

显示全部楼层 · 发表于 2008-4-2 18:09:31

Begin scan in 'C:\Documents and Settings\haha\桌面\dpack.rar'
C:\Documents and Settings\haha\桌面\dpack.rar
  [0] Archive type: RAR
  --> admin2.exe
   [DETECTION] Contains detection pattern of the dropper DR/Inject.alz
  --> servstr.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.brp Backdoor server programs
--> webinst.cab
   [1] Archive type: CAB (Microsoft)
   --> webinst.dll
      [DETECTION] Is the Trojan horse TR/Hoax.Renos.bfn
  --> Kvmon.dll
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Kvmon.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
--> mrofinu.exe.bin
   [1] Archive type: ZIP
   --> mrofinu.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> mrofinu1535.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> mrofinu1535.exe.tmp
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/PSW.Maran.FF
  --> Ir32_a.exe
   [DETECTION] Is the Trojan horse TR/Agent.AHQQ.1
  --> lwisys16_080122.dll
   [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.12
  --> mwisys32_080122.dll
   [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.11
  --> myhide.sys
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
  --> rqRKBtUL.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> svchst.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wgc
  --> sysgrw.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
  --> sysgrz.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
  --> systemlf.dll
   [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
  --> systemz.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wna
  --> tj1viwer.dll
   [DETECTION] Is the Trojan horse TR/Drop.Maran.CJ.2
   [INFO]    A backup was created as '48545bd4.qua'  ( QUARANTINE )

End of the scan: 2008年4月2日  18:09
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   27 Files were scanned
  20 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-2 18:42:37

IK
I:\virus\样本区\dpack.rar:\admin2.exe - Signature 'Backdoor.Win32.Hupigon.eez' found
I:\virus\样本区\dpack.rar:\servstr.exe - Signature 'Backdoor.Win32.PcClient.yw' found
I:\virus\样本区\dpack.rar:\webinst.cab\webinst.dll - Signature 'Trojan.Peed' found
I:\virus\样本区\dpack.rar:\webinst.cab\setup.inf
I:\virus\样本区\dpack.rar:\webinst.cab
I:\virus\样本区\dpack.rar:\Kvmon.dll - Signature 'Backdoor.Win32.Hupigon.ene' found
I:\virus\样本区\dpack.rar:\Kvmon.exe - Signature 'Trojan-Dropper.Win32.Mudrop.bn' found
I:\virus\样本区\dpack.rar:\mrofinu.exe.bin\mrofinu.exe - Signature 'Trojan.Crypt.ULPM' found
I:\virus\样本区\dpack.rar:\mrofinu.exe.bin
I:\virus\样本区\dpack.rar:\mrofinu1535.exe - Signature 'Trojan.Crypt.ULPM' found
I:\virus\样本区\dpack.rar:\mrofinu1535.exe.tmp - Signature 'Trojan.Crypt.ULPM' found
I:\virus\样本区\dpack.rar:\svchost.exe - Signature 'Trojan-Spy.Win32.Delf.GI' found
I:\virus\样本区\dpack.rar:\Ir32_a.exe - Signature 'Trojan.Agent.AHQQ' found
I:\virus\样本区\dpack.rar:\Ir32_b.exe
I:\virus\样本区\dpack.rar:\lwisys16_080122.dll - Signature 'Trojan.Hitpop.J' found
I:\virus\样本区\dpack.rar:\mwisys32_080122.dll - Signature 'Virus.Win32.Agent.ICL' found
I:\virus\样本区\dpack.rar:\myhide.sys - Signature 'Trojan-PWS.Win32.OnLineGames.wkt' found
I:\virus\样本区\dpack.rar:\rqRKBtUL.dll - Signature 'not-a-virus:AdWare.Win32.Virtumonde' found
I:\virus\样本区\dpack.rar:\svchst.exe - Signature 'Trojan-PWS.Win32.OnLineGames.wgc' found
I:\virus\样本区\dpack.rar:\sysgrw.exe - Signature 'Trojan-PWS.Win32.OnLineGames.lyx' found
I:\virus\样本区\dpack.rar:\sysgrz.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\样本区\dpack.rar:\systemlf.dll - Signature 'Trojan-Spy.Win32.Agent.ash' found
I:\virus\样本区\dpack.rar:\systemz.dll - Signature 'Trojan-PWS.Win32.OnLineGames.wna' found
I:\virus\样本区\dpack.rar:\syswin.sys
I:\virus\样本区\dpack.rar:\tj1viwer.dll - Signature 'Generic.PWS.Maran' found
I:\virus\样本区\dpack.rar

26 Files scanned
(1 Archiv with 25 files)
20 Signatures found
0 Suspect code-parts found
Used time: 0:00.343

显示全部楼层 · 发表于 2008-4-2 18:48:14

诺顿17个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Backdoor.Win32.PcClient.ebb
病毒： Backdoor.Win32.Gpigeon2007.mlr
病毒： Trojan.DL.Win32.Mnless.xe
病毒： Trojan.PSW.Ran.a
病毒： Trojan.Win32.Undef.eho
病毒： Trojan.Win32.Agent.zzs
病毒： Trojan.Clicker.Win32.PopHot.hb
病毒： Trojan.Clicker.Win32.PopHot.hn
病毒： RootKit.Win32.Mnless.kq
病毒： Trojan.Win32.Undef.elm
病毒： Trojan.PSW.Win32.Agent.vqp
病毒： Trojan.PSW.Win32.GameOL.mtb
病毒： Trojan.PSW.Win32.Agent.vho
病毒： Trojan.PSW.Win32.GameOL.mtb
病毒： Trojan.PSW.RoOnline.a

用户来源：互联网

软件版本：20.38.21

20个

显示全部楼层 · 发表于 2008-4-2 18:57:55

对象: admin2.exe=>(CAB Sfx r) t1.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Agent.AHQQ (BD 引擎)
对象: admin2.exe=>(CAB Sfx r) f1.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.NKN (BD 引擎)
对象: webinst.cab webinst.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Application.Malwarealarm.B (BD 引擎)
对象: Kvmon.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Generic.Graybird.67C9A64E (BD 引擎)
对象: Kvmon.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.SSN (BD 引擎)
对象: mrofinu.exe.bin mrofinu.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.ZEX (BD 引擎)
对象: mrofinu1535.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.ZEX (BD 引擎)
对象: mrofinu1535.exe.tmp
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Downloader.Agent.ZEX (BD 引擎)
对象: svchost.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.Maran.DT (BD 引擎)
对象: Ir32_a.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Agent.AHQQ (BD 引擎)
对象: lwisys16_080122.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Hitpop.1 (BD 引擎)
对象: mwisys32_080122.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.Spy.Agent.NNO (BD 引擎)
对象: myhide.sys
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.SSW (BD 引擎)
对象: svchst.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.Delf.IIX (BD 引擎)
对象: sysgrw.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.NKN (BD 引擎)
对象: sysgrz.exe
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.NKN (BD 引擎)
对象: systemlf.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.NKN (BD 引擎)
对象: systemz.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.NKN (BD 引擎)
对象: tj1viwer.dll
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\dpack.rar
Status: 已发现病毒
病毒: Generic.PWS.Maran.4B0AE63A (BD 引擎)

显示全部楼层 · 发表于 2008-4-2 19:04:42

Begin scan in 'C:\Documents and Settings\haha\桌面\dpack.rar'
C:\Documents and Settings\haha\桌面\dpack.rar
  [0] Archive type: RAR
  --> admin2.exe
   [DETECTION] Contains detection pattern of the dropper DR/Inject.alz
  --> servstr.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.brp Backdoor server programs
--> webinst.cab
   [1] Archive type: CAB (Microsoft)
   --> webinst.dll
      [DETECTION] Is the Trojan horse TR/Hoax.Renos.bfn
  --> Kvmon.dll
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Kvmon.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
--> mrofinu.exe.bin
   [1] Archive type: ZIP
   --> mrofinu.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> mrofinu1535.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> mrofinu1535.exe.tmp
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/PSW.Maran.FF
  --> Ir32_a.exe
   [DETECTION] Is the Trojan horse TR/Agent.AHQQ.1
  --> lwisys16_080122.dll
   [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.12
  --> mwisys32_080122.dll
   [DETECTION] Is the Trojan horse TR/Spy.Pophot.abr.11
  --> myhide.sys
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
  --> rqRKBtUL.dll
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> svchst.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wgc
  --> sysgrw.exe
   [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
  --> sysgrz.exe
   [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aas
  --> systemlf.dll
   [DETECTION] Is the Trojan horse TR/Spy.Agent.ash
  --> systemz.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wna
  --> tj1viwer.dll
   [DETECTION] Is the Trojan horse TR/Drop.Maran.CJ.2
   [INFO]    A backup was created as '48545bd4.qua'  ( QUARANTINE )

End of the scan: 2008年4月2日  18:09
Used time: 00:02 min

The scan has been done completely.

   0 Scanning directories
   27 Files were scanned
  20 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   3 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-2 20:09:41

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Backdoor.Win32.PcClient.ebb
病毒： Backdoor.Win32.Gpigeon2007.mlr
病毒： Trojan.DL.Win32.Mnless.xe
病毒： Trojan.PSW.Ran.a
病毒： Trojan.Win32.Undef.eho
病毒： Trojan.Win32.Agent.zzs
病毒： Trojan.Clicker.Win32.PopHot.hb
病毒： Trojan.Clicker.Win32.PopHot.hn
病毒： RootKit.Win32.Mnless.kq
病毒： Trojan.Win32.Undef.elm
病毒： Trojan.PSW.Win32.Agent.vqp
病毒： Trojan.PSW.Win32.GameOL.mtb
病毒： Trojan.PSW.Win32.Agent.vho
病毒： Trojan.PSW.Win32.GameOL.mtb
病毒： Trojan.PSW.RoOnline.a

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.38.21

显示全部楼层 · 发表于 2008-4-3 12:07:36

信息 2008-04-03 12:08:02 您此次查毒清除了17个病毒
信息 2008-04-03 12:08:02 您此次查毒共查出20个病毒以及危险代码
信息 2008-04-03 12:08:02 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件59个
信息 2008-04-03 12:08:02 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-04-03 12:08:02 C:\Documents and Settings\Administrator\桌面\22.rar\install_1356_M3w0fHx8fHx8fA_.exe Win32.NotVirus.Renos.31232 跳过，未处理
风险程序 2008-04-03 12:08:02 C:\Documents and Settings\Administrator\桌面\22.rar\install_1356_M3w0fHx8fHx8fA_.exe Win32.NotVirus.Renos.31232 跳过，未处理
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\a8da234k8asdf.exe Worm.AutoRun.122880 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__DD99A.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__CC2F9.exe Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__C59EF.exe Win32.TrojDownloader.Direct.me.110592 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__ACAD7.exe Win32.Hack.Delf.m.221184 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__97105.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__10907.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__850B9.exe Win32.Troj.AgentT.fm.14452 清除成功
病毒 2008-04-03 12:07:47 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__748B2.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__686.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__359DE.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__4F077.exe Win32.Troj.OnlineGamesT.af.57344 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__3F0F3.exe Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__2C034.exe Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\2008-3-31__1AE96.exe Win32.Troj.OnlineGamesT.e.94315 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\lin.exe Win32.Troj.Magania.be.38400 清除成功
病毒 2008-04-03 12:07:46 C:\Documents and Settings\Administrator\桌面\22.rar\keygen.exe Win32.TrojDownloader.Small.28672 清除成功
信息 2008-04-03 12:07:11 金山毒霸主程序启动查毒过程，查毒方式：命令行查毒
信息 2008-04-03 12:07:11 金山毒霸主程序启动
信息 2008-04-03 11:38:52 金山毒霸主程序退出

[病毒样本] 25

37/20