查看: 4489|回复: 24
收起左侧

[病毒样本] 50

[复制链接]
jimmyleo
发表于 2008-4-6 10:32:12 | 显示全部楼层 |阅读模式
fport的黄金乡...库为071025的

Engine version: 4.4.2.54
Virus signatures: 200710251250909bf0fa9c2a66db3298ceb076da70c7

[Clean]    D:\download\s\3b8273a245cadba701da3317188c6aa8.exe->(UPX)
[Clean]    D:\download\s\3b8273a245cadba701da3317188c6aa8.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\5f497629699a69ef7917fe1a645659f6.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\6e85206665e12d22d488e7934b5067da.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\30b639258f42d3fafc9d6ebac1b149d0.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\35a936db8f01c7f24a72be62ff31c498.exE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\70f26b962ba90babae934dd82b7447b0.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\85cdf0580ec4c6a5983e1349c83d6f8f.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (not disinfectable)>  D:\download\s\96bc0b378e0863ded0c21ffb4f5f2c1c.exe->(NSPack)->(PE_Patch)
[Found backdoor] <W32/Backdoor.BNXG (exact)>  D:\download\s\489d900f02c2c7b58f6542dde77f2cc1.exe->(embedded)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\720f2c7ee0f09c6a2634354f760bb120.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\594957c3d620f25d0a46cbfecb51b079.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\4899336ab5d3e7d8f56f7aed13807724.exe->(UPack)
[Found possible virus] <W32/SelfStarterInternetTrojan!Maximus>  D:\download\s\a90f1f20ae51eefdf35aaba6af34908d.Exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\ab2e17da3bc2a4ae162024099b843390.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\b53332ddb8c0f72b623835b614466019.exe->(UPack)
[Found security risk] <W32/Agent.GDI (exact)>  D:\download\s\bcb7be78a7e9a37d6a42b228a6ec95cd.exe
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\c2b59a7a2ccc61fb60f4973d79a9d612.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\ce7d7b4fe8f330291f93e2fc65270563.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\d3f67ef6f01470127db5c68a7da43293.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\dbf1e45a15ce4922a8e2b2f0f24ce774.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\eb1fc9de14d78b0c3772e687d2d4cc47.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (not disinfectable)>  D:\download\s\fb071ad54da2ae55d4c5df250104dfec.EXE->(NSPack)->(PE_Patch)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\1c505c79341692c8b142935d394abc77.dll->(UPack)
[Clean]    D:\download\s\3bd47a56722cfcd9e762583a6e22bddd.dll
[Clean]    D:\download\s\042a7afcab2a845957150d829c0d870b.dlL
[Clean]    D:\download\s\55d0f0099a79b5cd00652df56e53789e.dll
[Found backdoor] <W32/Backdoor.BNXG (exact)>  D:\download\s\88cf37a65a3adcab1b935604568caff1.dll
[Found downloader] <W32/Downloader.A.gen!Eldorado (generic, not disinfectable)>  D:\download\s\9979de29219d055231ec86fc62b6f4ab.dll
[Clean]    D:\download\s\19671db6b00d133f68bc47539d6244bf.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\81679daf7c57a6962aad4b5337a59db9.dll->(UPack)
[Found trojan] <W32/Trojan.YCB (exact)>  D:\download\s\861077df85a0ff10f0f13dd1b1f8318f.dll
[Clean]    D:\download\s\a6bdc4bc822402122152132dae6f67aa.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\a87951a5f9b7e12970b7496220daacb5.dll->(UPack)
[Clean]    D:\download\s\b29ccd24d1f2d07cd30afa01d5e65277.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\c26f6f051d975626331b7381fdd46ed5.dll->(UPack)
[Clean]    D:\download\s\c295836b58790dd2bcea33a97f7c53bb.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\d5d5007ab58cfa58585e5ef8e66ae5d5.dll->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\ddd196a38fbf1ca648c750e91614ae0b.dll->(UPack)
[Clean]    D:\download\s\f16b5c84317eb1bca77a2d835e3063b6.dll
[Clean]    D:\download\s\f187e8a8cd3fef98680de261bf15cae3.dll
[Clean]    D:\download\s\fb41ed5230b123ce9242558700698fb9.dll
[Clean]    D:\download\s\a99c681983a78ab9ed9a721a9021c7f1.rmvb
[Found security risk] <W32/SYStroj.B.gen!Eldorado (generic, not disinfectable)>  D:\download\s\3af748b9d0606808421ab704fb2db0fa.sys
[Clean]    D:\download\s\4cd1e2427e9a148fef186262c1b476ad.sys
[Clean]    D:\download\s\39dd1e28d0c846ae338b452176580968.sys
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>  D:\download\s\6761ce26743124e0af7cf3a39fa91c84.Sys
[Found adware] <W32/Cinmus.E.gen!Eldorado (generic, not disinfectable)>  D:\download\s\ae907c990c1c0195b9d3df546bb3c95a.sys
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\81679daf7c57a6962aad4b5337a59db9.tmp->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\a87951a5f9b7e12970b7496220daacb5.tmp->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>  D:\download\s\d5d5007ab58cfa58585e5ef8e66ae5d5.tmp->(UPack)

Results:
Files: 50
Skipped files: 0
MBR/boot sectors checked: 0
Objects scanned: 52
Infected objects: 36

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
醉一生爱妍
发表于 2008-4-6 10:33:27 | 显示全部楼层
江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-04-05
        更新日期 2008-03-22

扫描目标 C:\Documents and Settings\Administrator\桌面\S.rar

开始时间 2008-03-22 22:21:39

在 C:\Documents and Settings\Administrator\桌面\S.rar->35a936db8f01c7f24a72be62ff31c498.exE 中发现 TrojanSpy.Agent.egy 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->3af748b9d0606808421ab704fb2db0fa.sys 中发现 Rootkit.Vanti.ewq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->489d900f02c2c7b58f6542dde77f2cc1.exe 中发现 Trojan/Agent.nnj 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->55d0f0099a79b5cd00652df56e53789e.dll 中发现 Trojan/PSW.OnLineGames.aand 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->594957c3d620f25d0a46cbfecb51b079.exe 中发现 Trojan/PSW.OnLineGames.aaoe 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->5f497629699a69ef7917fe1a645659f6.exe 中发现 Trojan/PSW.OnLineGames.aada 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->70f26b962ba90babae934dd82b7447b0.exe 中发现 TrojanSpy.Agent.egz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->85cdf0580ec4c6a5983e1349c83d6f8f.exe 中发现 Trojan/PSW.OnLineGames.zas 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->861077df85a0ff10f0f13dd1b1f8318f.dll 中发现 TrojanSpy.Delf.iv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->88cf37a65a3adcab1b935604568caff1.dll 中发现 Trojan/Agent.noh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->9979de29219d055231ec86fc62b6f4ab.dll 中发现 TrojanSpy.Agent.eet 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->a6bdc4bc822402122152132dae6f67aa.dll 中发现 Trojan/PSW.OnLineGames.sqo 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->a87951a5f9b7e12970b7496220daacb5.dll 中发现 Trojan/PSW.OnLineGames.aanb 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->a87951a5f9b7e12970b7496220daacb5.tmp 中发现 Trojan/PSW.OnLineGames.aanb 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->a90f1f20ae51eefdf35aaba6af34908d.Exe 中发现 TrojanDownloader.Delf.hlx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->a99c681983a78ab9ed9a721a9021c7f1.rmvb 中发现 Trojan/Delf.don 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->ab2e17da3bc2a4ae162024099b843390.exe 中发现 TrojanSpy.Agent.egq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->b53332ddb8c0f72b623835b614466019.exe 中发现 TrojanSpy.Agent.egp 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->bcb7be78a7e9a37d6a42b228a6ec95cd.exe 中发现 Exploit.MS05-054.a 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->c26f6f051d975626331b7381fdd46ed5.dll 中发现 Trojan/PSW.OnLineGames.tgv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->c2b59a7a2ccc61fb60f4973d79a9d612.exe 中发现 Trojan/PSW.OnLineGames.aalj 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->ce7d7b4fe8f330291f93e2fc65270563.exe 中发现 Trojan/PSW.OnLineGames.spx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->ddd196a38fbf1ca648c750e91614ae0b.dll 中发现 Trojan/Agent.arvs 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->f187e8a8cd3fef98680de261bf15cae3.dll 中发现 Trojan/PSW.OnLineGames.aaqm 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->fb071ad54da2ae55d4c5df250104dfec.EXE 中发现 Backdoor/Huigezi.2007.faq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->fb41ed5230b123ce9242558700698fb9.dll 中发现 Trojan/PSW.OnLineGames.znv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->042a7afcab2a845957150d829c0d870b.dlL 中发现 Trojan/PSW.OnLineGames.aaoq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->19671db6b00d133f68bc47539d6244bf.dll 中发现 Trojan/PSW.OnLineGames.aaqn 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->1c505c79341692c8b142935d394abc77.dll 中发现 Trojan/PSW.GameDLL.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\S.rar->30b639258f42d3fafc9d6ebac1b149d0.exe 中发现 Trojan/PSW.OnLineGames.znu 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :51                                  病毒体 :30        
                   删除 :30                                    解毒 :0         
    扫描速度(千字节/秒) :172                               扫描时间 :00:00:18
    扫描文件速度(个/秒) :2

    - - - - -   - - - - - - -   - - - - - - -    - - - - - - -    - - - - - - -     - - - - - - -   - - - - -
geforce
发表于 2008-4-6 10:43:14 | 显示全部楼层
Begin scan in 'C:\S.rar'
C:\S.rar
  [0] Archive type: RAR
  --> 35a936db8f01c7f24a72be62ff31c498.exE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3af748b9d0606808421ab704fb2db0fa.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 3b8273a245cadba701da3317188c6aa8.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 3bd47a56722cfcd9e762583a6e22bddd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4899336ab5d3e7d8f56f7aed13807724.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 489d900f02c2c7b58f6542dde77f2cc1.exe
      [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
  --> 55d0f0099a79b5cd00652df56e53789e.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.cfb
  --> 594957c3d620f25d0a46cbfecb51b079.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yrq
  --> 5f497629699a69ef7917fe1a645659f6.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
  --> 6761ce26743124e0af7cf3a39fa91c84.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6e85206665e12d22d488e7934b5067da.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 70f26b962ba90babae934dd82b7447b0.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 720f2c7ee0f09c6a2634354f760bb120.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 81679daf7c57a6962aad4b5337a59db9.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 81679daf7c57a6962aad4b5337a59db9.tmp
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 85cdf0580ec4c6a5983e1349c83d6f8f.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 861077df85a0ff10f0f13dd1b1f8318f.dll
      [DETECTION] Is the Trojan horse TR/Agent.stb
  --> 88cf37a65a3adcab1b935604568caff1.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.ZN.2 Backdoor server programs
  --> 96bc0b378e0863ded0c21ffb4f5f2c1c.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.242 Backdoor server programs
  --> 9979de29219d055231ec86fc62b6f4ab.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a6bdc4bc822402122152132dae6f67aa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ymk
  --> a87951a5f9b7e12970b7496220daacb5.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a87951a5f9b7e12970b7496220daacb5.tmp
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a90f1f20ae51eefdf35aaba6af34908d.Exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> ab2e17da3bc2a4ae162024099b843390.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ae907c990c1c0195b9d3df546bb3c95a.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> b29ccd24d1f2d07cd30afa01d5e65277.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> b53332ddb8c0f72b623835b614466019.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> bcb7be78a7e9a37d6a42b228a6ec95cd.exe
      [DETECTION] Is the Trojan horse TR/Expl.MS05-054.A
  --> c26f6f051d975626331b7381fdd46ed5.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xku
  --> c295836b58790dd2bcea33a97f7c53bb.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> c2b59a7a2ccc61fb60f4973d79a9d612.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.cfb
  --> ce7d7b4fe8f330291f93e2fc65270563.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ymk
  --> d3f67ef6f01470127db5c68a7da43293.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> d5d5007ab58cfa58585e5ef8e66ae5d5.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> d5d5007ab58cfa58585e5ef8e66ae5d5.tmp
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> dbf1e45a15ce4922a8e2b2f0f24ce774.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ddd196a38fbf1ca648c750e91614ae0b.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxos
  --> eb1fc9de14d78b0c3772e687d2d4cc47.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> f16b5c84317eb1bca77a2d835e3063b6.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> f187e8a8cd3fef98680de261bf15cae3.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> fb071ad54da2ae55d4c5df250104dfec.EXE
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> fb41ed5230b123ce9242558700698fb9.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
  --> 042a7afcab2a845957150d829c0d870b.dlL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 19671db6b00d133f68bc47539d6244bf.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 1c505c79341692c8b142935d394abc77.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 30b639258f42d3fafc9d6ebac1b149d0.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xjl.4
      [WARNING]   The file was ignored!


End of the scan: 2008年4月6日  10:42
Used time: 00:13 min

The scan has been done completely.

      0 Scanning directories
     51 Files were scanned
     40 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
timhas266
发表于 2008-4-6 10:44:55 | 显示全部楼层

47

Start of the scan: Sunday, 6 April, 2008  10:44

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Tim\桌面\S.rar'
C:\Documents and Settings\Tim\桌面\S.rar
  [0] Archive type: RAR
  --> 35a936db8f01c7f24a72be62ff31c498.exE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3af748b9d0606808421ab704fb2db0fa.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 3b8273a245cadba701da3317188c6aa8.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 3bd47a56722cfcd9e762583a6e22bddd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4899336ab5d3e7d8f56f7aed13807724.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 489d900f02c2c7b58f6542dde77f2cc1.exe
      [DETECTION] Contains detection pattern of the dropper DR/PcClient.Gen
  --> 55d0f0099a79b5cd00652df56e53789e.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.cfb
  --> 594957c3d620f25d0a46cbfecb51b079.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yrq
  --> 5f497629699a69ef7917fe1a645659f6.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
  --> 6761ce26743124e0af7cf3a39fa91c84.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6e85206665e12d22d488e7934b5067da.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 70f26b962ba90babae934dd82b7447b0.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 720f2c7ee0f09c6a2634354f760bb120.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 81679daf7c57a6962aad4b5337a59db9.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 81679daf7c57a6962aad4b5337a59db9.tmp
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 85cdf0580ec4c6a5983e1349c83d6f8f.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 861077df85a0ff10f0f13dd1b1f8318f.dll
      [DETECTION] Is the Trojan horse TR/Agent.stb
  --> 88cf37a65a3adcab1b935604568caff1.dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.ZN.2 Backdoor server programs
  --> 96bc0b378e0863ded0c21ffb4f5f2c1c.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Pcclient.GV.242 Backdoor server programs
  --> 9979de29219d055231ec86fc62b6f4ab.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a6bdc4bc822402122152132dae6f67aa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ymk
  --> a87951a5f9b7e12970b7496220daacb5.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a87951a5f9b7e12970b7496220daacb5.tmp
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a90f1f20ae51eefdf35aaba6af34908d.Exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> ab2e17da3bc2a4ae162024099b843390.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ae907c990c1c0195b9d3df546bb3c95a.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> b29ccd24d1f2d07cd30afa01d5e65277.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> b53332ddb8c0f72b623835b614466019.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> bcb7be78a7e9a37d6a42b228a6ec95cd.exe
      [DETECTION] Is the Trojan horse TR/Expl.MS05-054.A
  --> c26f6f051d975626331b7381fdd46ed5.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xku
  --> c295836b58790dd2bcea33a97f7c53bb.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> c2b59a7a2ccc61fb60f4973d79a9d612.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.cfb
  --> ce7d7b4fe8f330291f93e2fc65270563.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ymk
  --> d3f67ef6f01470127db5c68a7da43293.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> d5d5007ab58cfa58585e5ef8e66ae5d5.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> d5d5007ab58cfa58585e5ef8e66ae5d5.tmp
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> dbf1e45a15ce4922a8e2b2f0f24ce774.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ddd196a38fbf1ca648c750e91614ae0b.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rxos
  --> eb1fc9de14d78b0c3772e687d2d4cc47.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> f16b5c84317eb1bca77a2d835e3063b6.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> f187e8a8cd3fef98680de261bf15cae3.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> fb071ad54da2ae55d4c5df250104dfec.EXE
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> fb41ed5230b123ce9242558700698fb9.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
  --> 042a7afcab2a845957150d829c0d870b.dlL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 19671db6b00d133f68bc47539d6244bf.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 1c505c79341692c8b142935d394abc77.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 30b639258f42d3fafc9d6ebac1b149d0.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xjl.4
      [INFO]      A backup was created as '486a3948.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Sunday, 6 April, 2008  10:44
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     52 Files were scanned
     40 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     12 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
aerbeisi
发表于 2008-4-6 10:45:03 | 显示全部楼层

39

20080405的病毒库
冷冷
发表于 2008-4-6 10:46:17 | 显示全部楼层
IKAURS
        50 Files scanned
          (0 Archives with 0 files)
        47 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.812
Joker
发表于 2008-4-6 10:47:14 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
lijinbo
发表于 2008-4-6 10:48:43 | 显示全部楼层

NOD32的扫描情况,发现46个

D:\Downloads\S.rar > RAR > 35a936db8f01c7f24a72be62ff31c498.exE - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 3af748b9d0606808421ab704fb2db0fa.sys - Win32/Rootkit.Agent.NBQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 3b8273a245cadba701da3317188c6aa8.exe - Win32/PSW.QQPass.NCZ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 3bd47a56722cfcd9e762583a6e22bddd.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 4899336ab5d3e7d8f56f7aed13807724.exe - Win32/TrojanDownloader.Agent.NWV 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 489d900f02c2c7b58f6542dde77f2cc1.exe - 可能是 Win32/PcClient 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 4cd1e2427e9a148fef186262c1b476ad.sys - 可能是 Win32/PSW.OnLineGames.NNE 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 55d0f0099a79b5cd00652df56e53789e.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 594957c3d620f25d0a46cbfecb51b079.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 5f497629699a69ef7917fe1a645659f6.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 6761ce26743124e0af7cf3a39fa91c84.Sys - Win32/PSW.QQPass.NCZ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 6e85206665e12d22d488e7934b5067da.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 70f26b962ba90babae934dd82b7447b0.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 720f2c7ee0f09c6a2634354f760bb120.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 81679daf7c57a6962aad4b5337a59db9.dll - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 81679daf7c57a6962aad4b5337a59db9.tmp - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 85cdf0580ec4c6a5983e1349c83d6f8f.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 861077df85a0ff10f0f13dd1b1f8318f.dll - Win32/Spy.Delf.NEH 特洛伊木马
D:\Downloads\S.rar > RAR > 88cf37a65a3adcab1b935604568caff1.dll - Win32/PcClient.NAV 特洛伊木马
D:\Downloads\S.rar > RAR > 9979de29219d055231ec86fc62b6f4ab.dll - Win32/TrojanDownloader.Agent.NVK 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > a6bdc4bc822402122152132dae6f67aa.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > a87951a5f9b7e12970b7496220daacb5.dll - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > a87951a5f9b7e12970b7496220daacb5.tmp - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > a90f1f20ae51eefdf35aaba6af34908d.Exe - 未查明的 NewHeur_PE 病毒
D:\Downloads\S.rar > RAR > ab2e17da3bc2a4ae162024099b843390.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > ae907c990c1c0195b9d3df546bb3c95a.sys - Win32/Rootkit.Agent.NCK 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > b29ccd24d1f2d07cd30afa01d5e65277.dll - 可能是 Win32/PSW.OnLineGames.HCV 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > b53332ddb8c0f72b623835b614466019.exe - Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > c26f6f051d975626331b7381fdd46ed5.dll - Win32/PSW.OnLineGames.XKU 特洛伊木马
D:\Downloads\S.rar > RAR > c295836b58790dd2bcea33a97f7c53bb.dll - 可能是 Win32/PSW.OnLineGames.HCV 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > c2b59a7a2ccc61fb60f4973d79a9d612.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > ce7d7b4fe8f330291f93e2fc65270563.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > d3f67ef6f01470127db5c68a7da43293.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > d5d5007ab58cfa58585e5ef8e66ae5d5.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > d5d5007ab58cfa58585e5ef8e66ae5d5.tmp - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > dbf1e45a15ce4922a8e2b2f0f24ce774.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > ddd196a38fbf1ca648c750e91614ae0b.dll - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > eb1fc9de14d78b0c3772e687d2d4cc47.exe - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > f16b5c84317eb1bca77a2d835e3063b6.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > f187e8a8cd3fef98680de261bf15cae3.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > fb071ad54da2ae55d4c5df250104dfec.EXE - 可能是 Win32/Hupigon 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > fb41ed5230b123ce9242558700698fb9.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 042a7afcab2a845957150d829c0d870b.dlL - 可能是 Win32/PSW.OnLineGames.HCV 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 19671db6b00d133f68bc47539d6244bf.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 1c505c79341692c8b142935d394abc77.dll - 可能是 Win32/PSW.OnLineGames.NHF 特洛伊木马 的变种
D:\Downloads\S.rar > RAR > 30b639258f42d3fafc9d6ebac1b149d0.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
hign
头像被屏蔽
发表于 2008-4-6 10:54:21 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
马力
发表于 2008-4-6 10:58:45 | 显示全部楼层
驱逐舰不杀

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-14 21:47 , Processed in 0.140417 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表