[病毒样本] 26

显示全部楼层 · 发表于 2008-4-9 21:36:26

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\10.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yog 檔案: C:\Documents and Settings\kato9096\桌面\222\11.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\12.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\13.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yog 檔案: C:\Documents and Settings\kato9096\桌面\222\14.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\15.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\16.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\17.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\18.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\19.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\2.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\20.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\21.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\22.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\23.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\24.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\25.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.zkr 檔案: C:\Documents and Settings\kato9096\桌面\222\4.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.zfe 檔案: C:\Documents and Settings\kato9096\桌面\222\5.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.zfe 檔案: C:\Documents and Settings\kato9096\桌面\222\6.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\7.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yip 檔案: C:\Documents and Settings\kato9096\桌面\222\8.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yzt 檔案: C:\Documents and Settings\kato9096\桌面\222\9.exe//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.Downloader.hp 檔案: C:\Documents and Settings\kato9096\桌面\222\x.exe//PE_Patch//UPack

25

不报的上报卡巴

1.exe_,

No malicious code were found in these files.

[ 本帖最后由 kato9096 于 2008-4-11 19:27 编辑 ]

显示全部楼层 · 发表于 2008-4-9 21:38:19

显示全部楼层 · 发表于 2008-4-9 21:38:22

信息 2008-04-09  21:38:19 您此次查毒清除了25个病毒
信息 2008-04-09  21:38:19 您此次查毒共查出25个病毒以及危险代码
信息 2008-04-09  21:38:19 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件51个
信息 2008-04-09  21:38:19 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

显示全部楼层 · 发表于 2008-4-9 21:41:24

怪怪的....红伞跳出来发现病毒,病毒阻止了结果又继续下载了

显示全部楼层 · 发表于 2008-4-9 21:42:57

不杀的非毒

显示全部楼层 · 发表于 2008-4-9 21:53:56

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Packer.Win32.Upack.a
病毒： Trojan.PSW.Win32.SunOnline.nh

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.39.22

显示全部楼层 · 发表于 2008-4-9 21:55:44

[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\10.exe3->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\11.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\12.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\13.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\14.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\15.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\16.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\17.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\18.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\19.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\2.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\20.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\21.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\22.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\23.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\24.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\25.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\3.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\4.exe2->exefile->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\5.exe2->exefile->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\6.exe2->exefile->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\7.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\8.exe2->exefile->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\9.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> C:\test\26.rar->222\x.exe2->(UPack)

显示全部楼层 · 发表于 2008-4-9 21:59:02

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\26.rar'
C:\Documents and Settings\Administrator\桌面\26.rar
  [0] Archive type: RAR
  --> 222\10.exe3
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\11.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\12.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\13.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\14.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\15.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\16.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\17.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\18.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\19.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\2.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\20.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\21.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\22.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\23.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\24.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\25.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\3.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\4.exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.zkr
  --> 222\5.exe2
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 222\6.exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.zmb
  --> 222\7.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\8.exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yip.19
  --> 222\9.exe2
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 222\x.exe2
   [DETECTION] Contains detection pattern of the worm WORM/Downloader.HP
   [INFO]    The file was deleted!

End of the scan: 星期三 2008年4月9日  21:58
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   27 Files were scanned
   24 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-9 21:59:05

C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\10.exe3 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\11.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\12.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\13.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\14.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\15.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\16.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\17.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\18.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\19.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\2.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\20.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\21.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\22.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\23.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\24.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\25.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\3.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\4.exe2 - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\5.exe2 - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\6.exe2 - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\7.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\8.exe2 - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\9.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 222\x.exe2 - probably a variant of Win32/Jalous worm

显示全部楼层 · 发表于 2008-4-9 22:03:43

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:10.exe3 <- Trojan.Psw.Onlinegames.Yzt : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:12.exe2 <- Trojan.Psw.Onlinegames.Yzt : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:13.exe2 <- Trojan.Psw.Onlinegames.Yzt : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:22.exe2 <- Trojan.Psw.Onlinegames.Yzt : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:4.exe2 <- Trojan.Psw.Onlinegames.Zkr : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:8.exe2 <- Trojan.Psw.Onlinegames.Yip : No action
C:\Documents and Settings\All Users\Documents\Test\26.rar<RAR>:x.exe2<UPack>:x.exe2 <- Variant:Trojan.Agent.Fb : No action

Scanned objects : 32

Infected objects : 7

[病毒样本] 26

本帖子中包含更多资源

本帖子中包含更多资源

32/21

25

25