瑞星用户中毒

显示全部楼层 · 发表于 2008-4-6 12:33:18

估计金山没什么人敢用吧

不过其实不怎么差的...

显示全部楼层 · 发表于 2008-4-6 12:42:26

backups\ttdabdab1058.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.6BD2D2DE (BD 引擎)
对象: backups\ttezzezz1044.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.E0BFED27 (BD 引擎)
对象: backups\tthadhad1059.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.8E1FBA43 (BD 引擎)
对象: backups\ttsadsad1033.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.C552DB9A (BD 引擎)
对象: backups\txwlvwlv1005.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.7A14CA7E (BD 引擎)
对象: backups\txwwqwwq1006.dll.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Generic.Malware.SBdld.931B5547 (BD 引擎)
对象: backups\dbghlp32.exe.bak
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\backups.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)

显示全部楼层 · 发表于 2008-4-6 13:41:20

驱逐舰不杀

显示全部楼层 · 发表于 2008-4-6 13:44:07

ess扫描日志
病毒库版本: 3005 (20080406)
日期: 2008-4-6 时间: 13:48:11
已扫描的磁盘、文件夹和文件: G:\backups.rar
G:\backups.rar > RAR > backups\ttdabdab1058.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\ttezzezz1044.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\tthadhad1059.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\ttsadsad1033.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\txwlvwlv1005.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\txwwqwwq1006.dll.bak - Win32/PSW.OnLineGames.PBQ 特洛伊木马的变种
G:\backups.rar > RAR > backups\dbghlp32.exe.bak - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
已扫描的对象数: 7
发现的威胁数: 7
完成时间: 13:48:15 总扫描时间: 4 秒 (00:00:04)

显示全部楼层 · 发表于 2008-4-6 15:04:51

卡巴已删除：木马程序 Trojan-PSW.Win32.OnLineGames.zfd 文件: F:\Download\backups.rar/backups\ttezzezz1044.dll.bak//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.zjx 文件: F:\Download\backups.rar/backups\txwwqwwq1006.dll.bak//UPack
已删除：病毒 Heur.Trojan.Generic (修改) 文件: F:\Download\backups.rar/backups\dbghlp32.exe.bak//PE_Patch//UPack
咖啡2木马。

显示全部楼层 · 发表于 2008-4-6 15:16:17

小A报。

显示全部楼层 · 发表于 2008-4-6 15:30:38

扫描 : 已完成
-------------
已扫描： 16
检测到： 2
未处理： 0
开始时间： 2008-4-6 15:31:04
运行时间： 00:00:08
完成时间： 2008-4-6 15:31:12

检测到
------
状态对象
---- ----
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.zfd 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttezzezz1044.dll.bak//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.zjx 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\txwwqwwq1006.dll.bak//UPack

事件
----
时间名称状态原因
---- ---- ---- ----
2008-4-6 15:31:04 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar 档案文件RAR
2008-4-6 15:31:04 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttdabdab1058.dll.bak 正常 iChecker
2008-4-6 15:31:05 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttezzezz1044.dll.bak 压缩文件UPack
2008-4-6 15:31:05 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttezzezz1044.dll.bak//UPack 检测到：木马程序 'Trojan-PSW.Win32.OnLineGames.zfd'
2008-4-6 15:31:05 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttezzezz1044.dll.bak//UPack 未清除延迟
2008-4-6 15:31:05 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\tthadhad1059.dll.bak 正常 iChecker
2008-4-6 15:31:07 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\ttsadsad1033.dll.bak 正常 iChecker
2008-4-6 15:31:08 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\txwlvwlv1005.dll.bak 正常 iChecker
2008-4-6 15:31:09 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\txwwqwwq1006.dll.bak 压缩文件UPack
2008-4-6 15:31:09 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\txwwqwwq1006.dll.bak//UPack 检测到：木马程序 'Trojan-PSW.Win32.OnLineGames.zjx'
2008-4-6 15:31:09 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\txwwqwwq1006.dll.bak//UPack 未清除延迟
2008-4-6 15:31:09 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\dbghlp32.exe.bak 压缩文件PE_Patch
2008-4-6 15:31:09 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\dbghlp32.exe.bak//PE_Patch 正常 iChecker
2008-4-6 15:31:10 文件: C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar/backups\dbghlp32.exe.bak 正常已扫描
2008-4-6 15:31:10 文件: c:\documents and settings\administrator\桌面\virus\backups.rar 档案文件RAR
2008-4-6 15:31:10 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\ttezzezz1044.dll.bak 压缩文件UPack
2008-4-6 15:31:10 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\ttezzezz1044.dll.bak//UPack 检测到：木马程序 'Trojan-PSW.Win32.OnLineGames.zfd'
2008-4-6 15:31:12 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\ttezzezz1044.dll.bak 已备份
2008-4-6 15:31:12 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\ttezzezz1044.dll.bak 已删除
2008-4-6 15:31:12 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\txwwqwwq1006.dll.bak 压缩文件UPack
2008-4-6 15:31:12 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\txwwqwwq1006.dll.bak//UPack 检测到：木马程序 'Trojan-PSW.Win32.OnLineGames.zjx'
2008-4-6 15:31:12 文件: c:\documents and settings\administrator\桌面\virus\backups.rar/backups\txwwqwwq1006.dll.bak 已删除

统计
----
对象已扫描危险对象未处理已删除移动到隔离区档案文件压缩文件密码保护损坏
---- ------ -------- ------ ------ ------------ -------- -------- -------- ----
所有对象 16 2 0 2 0 1 3 0 0
C:\Documents and Settings\Administrator\桌面\VIRUS\backups.rar 16 2 0 2 0 1 3 0 0

设置
----
参数值　
---- ----
安全级别最大保护
操作扫描完成后提示操作
运行模式手动
文件类型扫描所有文件
只扫描新建和已更改的文件否
扫描档案文件所有
扫描嵌入式OLE对象所有
不扫描大于...的档案文件否
如果扫描时间大于...则跳过否
分析邮件格式否
扫描密码保护的档案文件否
使用iChecker技术是
使用iSwift技术是
在程序统计表中记录危险对象信息是
Rootkit扫描是
扩展的rootkit扫描否
使用启发式分析器是
启发式分析器级别 3

显示全部楼层 · 发表于 2008-4-6 15:32:22

卡巴报特洛伊程序

显示全部楼层 · 发表于 2008-4-6 15:40:24

红伞报
Starting the file scan:

Begin scan in 'D:\download\backups.rar'
D:\download\backups.rar
  [0] Archive type: RAR
  --> backups\ttdabdab1058.dll.bak
   [DETECTION] Contains suspicious code HEUR/Malware
  --> backups\ttezzezz1044.dll.bak
   [DETECTION] Contains suspicious code HEUR/Malware
  --> backups\tthadhad1059.dll.bak
   [DETECTION] Contains suspicious code HEUR/Malware
  --> backups\ttsadsad1033.dll.bak
   [DETECTION] Contains suspicious code HEUR/Malware
  --> backups\txwlvwlv1005.dll.bak
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> backups\txwwqwwq1006.dll.bak
   [DETECTION] Contains suspicious code HEUR/Malware
  --> backups\dbghlp32.exe.bak
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [INFO]    The file was deleted!

End of the scan: 2008年4月6日  15:38
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   8 Files were scanned
   2 viruses and/or unwanted programs were found
   5 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-6 16:16:39

C:\Documents and Settings\swans\桌面\backups.rar>>backups\dbghlp32.exe.bak Trojan.Cap84614.acsq 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\ttdabdab1058.dll.bak TrojanPSW.GameDLL.Gen.prbi.dll 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\ttezzezz1044.dll.bak TrojanPSW.GameDLL.Gen.qhjw.dll 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\tthadhad1059.dll.bak TrojanPSW.GameDLL.Gen.easw.dll 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\ttsadsad1033.dll.bak TrojanPSW.GameDLL.Gen.ogdf.dll 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\txwlvwlv1005.dll.bak Trojan.Cap84614.dckj.dll 木马还未处理
C:\Documents and Settings\swans\桌面\backups.rar>>backups\txwwqwwq1006.dll.bak TrojanPSW.OnLineGames.zjx.piss.dll 木马还未处理

[病毒样本] 瑞星用户中毒

回复 10楼傻猪猪米走鸡的帖子

本帖子中包含更多资源

[病毒样本] 瑞星用户中毒

回复 10楼 傻猪猪米走鸡 的帖子

本帖子中包含更多资源

回复 10楼傻猪猪米走鸡的帖子