[病毒样本] 28

显示全部楼层 · 发表于 2008-4-21 23:54:02

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abfp 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\CANI073X.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aazl 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\CARAK3V5.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ablh 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc10[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abbo 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc12[80].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abck 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc13[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abch 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc14[45].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aavi 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc15[1].exe//FSG//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abci 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc16[41].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abgw 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc17[45].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abcj 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc18[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abax 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc19[41].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ablw 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc20[41].exe//PE_Patch.UPX//UPX//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abcr 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc21[86].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ablv 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc22[41].exe//PE_Patch.UPX//UPX//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aayz 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc23[86].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abkq 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc24[1].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abcu 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc25[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abfm 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc26[41].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.bqy 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc27[1].exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aazw 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc2[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abfp 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc3[80].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abhs 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc4[41].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abfy 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc5[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abcq 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc6[1].exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abdd 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc7[51].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abah 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc8[80].exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aafo 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\soc9[1].exe//FSG
已刪除: 病毒 Worm.Win32.Downloader.ik 檔案: C:\Documents and Settings\kato9096\桌面\複製 -病毒.rar/瓷馮\xx[27].exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-4-21 23:54:53

C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/CANI073X.exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/CARAK3V5.exe3 - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc10[1].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc12[80].exe2 - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc13[1].exe2 - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc14[45].exe2 - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc15[1].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc16[41].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc17[45].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc18[1].exe2 - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc19[41].exe2 - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc20[41].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc21[86].exe2 - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc22[41].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc23[86].exe2 - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc24[1].exe2 - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc25[1].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc26[41].exe3 - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc27[1].exe3 - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc2[1].exe2 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc3[80].exe3 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc4[41].exe3 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc5[1].exe3 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc6[1].exe3 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc7[51].exe3 - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc8[80].exe3 - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/soc9[1].exe3 - Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don johnson\桌面\28.zip » ZIP » 28/28/xx[27].exe3 - probably a variant of Win32/Jalous worm

显示全部楼层 · 发表于 2008-4-21 23:58:24

C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\CANI073X.exe2 Trojan.Cap841915.bdyl 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\CARAK3V5.exe3 TrojanPSW.OnLineGames.aazl.mvpq 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc10[1].exe2 Trojan.Cap841915.pktr 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc12[80].exe2 TrojanPSW.GameOL.GEN.aeiw 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc13[1].exe2 TrojanDropper.Gen.stli 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc14[45].exe2 TrojanSpy.Gen.gnpw 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc15[1].exe2 TrojanPSW.OnLineGames.aavi.vzfo 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc16[41].exe2 TrojanPSW.OnLineGames.abci.hskw 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc17[45].exe2 Trojan.Cap841915.tehh 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc18[1].exe2 PWSteal.y.cgds 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc19[41].exe2 RootKit.Undef.fh.kzym 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc20[41].exe2 TrojanPSW.OnLineGames.acnc.nsho 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc21[86].exe2 TrojanPSW.GameOL.GEN.valx 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc22[41].exe2 TrojanSpy.Gen.sdky 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc23[86].exe2 Trojan.Cap841718.zbsc 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc24[1].exe2 Trojan.Cap841915.dejt 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc25[1].exe2 Trojan.Cap84176.eedv 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc26[41].exe3 Trojan.Cap841817.gctj 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc27[1].exe3 Trojan.Cap841617.ocpi 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc2[1].exe2 Trojan.Cap84174.vzym 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc3[80].exe3 Trojan.Cap841915.bdyl 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc4[41].exe3 TrojanPSW.GameOL.GEN.kimy 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc5[1].exe3 Trojan.Cap841915.eesr 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc6[1].exe3 TrojanPSW.OnLineGames.accl.kgxm 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc7[51].exe3 TrojanPSW.GameOL.GEN.xhnx 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc8[80].exe3 TrojanPSW.GameOL.GEN.jdfk 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\soc9[1].exe3 Trojan.Cap841023.gvdg 木马还未处理
C:\Documents and Settings\Administrator\桌面\28.zip>>28\28\xx[27].exe3 TrojanDownloader.Nurech.bd.bmqk 木马还未处理

显示全部楼层 · 发表于 2008-4-21 23:59:05

The file 'D:\我的文档\28.zip'
contained a virus or unwanted program 'TR/Dropper.Gen' [trojan]
Action(s) taken:
A backup was created as "483ab9cc.qua" ( QUARANTINE )
The file was deleted!

显示全部楼层 · 发表于 2008-4-22 00:18:38

默认启发，F-PROT杀19

[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\CANI073X.exe2->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\CANI073X.exe2->(FSG)
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus> C:\Documents and Settings\Admin\Desktop\28\28\CARAK3V5.exe3
[Failed to disinfect] CARAK3V5.exe3
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\CARAK3V5.exe3
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc10[1].exe2->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc10[1].exe2->(FSG)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc13[1].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc13[1].exe2
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc15[1].exe2->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc15[1].exe2->(FSG)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc17[45].exe2->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc17[45].exe2->(FSG)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc18[1].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc18[1].exe2
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus> C:\Documents and Settings\Admin\Desktop\28\28\soc19[41].exe2
[Failed to disinfect] soc19[41].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc19[41].exe2
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus> C:\Documents and Settings\Admin\Desktop\28\28\soc23[86].exe2
[Failed to disinfect] soc23[86].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc23[86].exe2
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus> C:\Documents and Settings\Admin\Desktop\28\28\soc24[1].exe2
[Failed to disinfect] soc24[1].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc24[1].exe2
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc25[1].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc25[1].exe2
[Found possible virus] <W32/NewMalware-Rootkit-PX-based!Maximus> C:\Documents and Settings\Admin\Desktop\28\28\soc26[41].exe3
[Failed to disinfect] soc26[41].exe3
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc26[41].exe3
[Found security risk] <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc27[1].exe3->(UPX)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc27[1].exe3->(UPX)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc2[1].exe2
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc2[1].exe2
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc3[80].exe3->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc3[80].exe3->(FSG)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc5[1].exe3->(FSG)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc5[1].exe3->(FSG)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc6[1].exe3
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc6[1].exe3
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\soc9[1].exe3->(embedded)
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\soc9[1].exe3->(embedded)
[Found backdoor] <W32/Rbot.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\Admin\Desktop\28\28\xx[27].exe3
[Quarantined] C:\Documents and Settings\Admin\Desktop\28\28\xx[27].exe3

---------------------------------------------------------------------
Scan ended: 22/04/2008
Duration: 0:00:04

Scan result:

Scanned files:    28
Infected objects:    19
Disinfected objects:    0
Quarantined files:    19
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-4-22 00:20:58

avg found 26 threats

显示全部楼层 · 发表于 2008-4-22 01:10:21

杀了很多

显示全部楼层 · 发表于 2008-4-22 07:16:08

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\28'
C:\Documents and Settings\Administrator\My Documents\28\28\28\
  CANI073X.exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: OVL
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  CARAK3V5.exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aio
         [WARNING] Infected files in archives cannot be repaired!
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc10[1].exe2
   [DETECTION] Is the Trojan horse TR/PSW.16769
   [NOTE]    The file was deleted!
  soc12[80].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc13[1].exe2
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  soc14[45].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc15[1].exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aavi
   [NOTE]    The file was deleted!
  soc16[41].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc17[45].exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abgw
   [NOTE]    The file was deleted!
  soc18[1].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: OVL
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc19[41].exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abax
   [NOTE]    The file was deleted!
  soc20[41].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc21[86].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc22[41].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc23[86].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aij
         [WARNING] Infected files in archives cannot be repaired!
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The fund was classified as suspicious.
   [NOTE]    The file was moved to '48702095.qua'!
  soc24[1].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abkp
         [WARNING] Infected files in archives cannot be repaired!
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ait.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  soc25[1].exe2
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: OVL
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc26[41].exe3
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abfm
   [NOTE]    The file was deleted!
  soc27[1].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.QQpass.bqs
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  soc2[1].exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.36
   [NOTE]    The file was deleted!
  soc3[80].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: OVL
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc4[41].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc5[1].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc6[1].exe3
   [DETECTION] Is the Trojan horse TR/PSW.16161
   [NOTE]    The file was deleted!
  soc7[51].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  soc8[80].exe3
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
   [NOTE]    The file was deleted!
  soc9[1].exe3
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Agent.agp
         [WARNING] Infected files in archives cannot be repaired!
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/OnLineGames.C.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  xx[27].exe3
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!

End of the scan: 2008年4月21日  16:15
Used time: 00:05 min

The scan has been done completely.

   3 Scanning directories
   28 Files were scanned
   31 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   27 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -3 Files not concerned
   0 Archives were scanned
   7 Warnings
   28 Notes

显示全部楼层 · 发表于 2008-4-22 07:50:57

信息 2008-04-22  07:50:46 您此次查毒清除了14个病毒
信息 2008-04-22  07:50:46 您此次查毒共查出14个病毒以及危险代码
信息 2008-04-22  07:50:46 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件57个
信息 2008-04-22  07:50:46 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-04-22  07:50:46 D:\Desktop\28.zip\28\28\xx[27].exe3 Win32.Troj.DownLoaderT.hu.147456 清除成功
病毒 2008-04-22  07:50:46 D:\Desktop\28.zip\28\28\soc9[1].exe3 Win32.PSWTroj.GameOL.61440 清除成功
病毒 2008-04-22  07:50:46 D:\Desktop\28.zip\28\28\soc6[1].exe3 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc2[1].exe2 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc27[1].exe3 Win32.Troj.QQPswT.bs.116858 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc26[41].exe3 Win32.Troj.GameOnlineT.b.45320 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc25[1].exe2 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc24[1].exe2 Win32.Troj.GameOnlineT.b.65808 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc23[86].exe2 Win32.Troj.GameOnlineT.b.45320 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc19[41].exe2 Win32.Troj.GameOnlineT.b.45320 清除成功
病毒 2008-04-22  07:50:45 D:\Desktop\28.zip\28\28\soc18[1].exe2 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:44 D:\Desktop\28.zip\28\28\soc15[1].exe2 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:44 D:\Desktop\28.zip\28\28\soc13[1].exe2 Win32.Troj.OnlineGameT.bd.65697 清除成功
病毒 2008-04-22  07:50:44 D:\Desktop\28.zip\28\28\CARAK3V5.exe3 Win32.Troj.GameOnlineT.b.45320 清除成功

显示全部楼层 · 发表于 2008-4-22 19:15:59

红伞怎么杀出31个？

[病毒样本] 28

本帖子中包含更多资源

28

28

瑞星发现了

本帖子中包含更多资源

本帖子中包含更多资源