收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 某贴挖 55个
12
返回列表 发新帖
楼主: promised
 收起左侧

[病毒样本] 某贴挖 55个

[复制链接]
Nerazzurri
发表于 2008-5-1 15:14:29 | 显示全部楼层

55

扫描进行于：2008-5-1 15:07:06
扫描日志
NOD32版本 3067 (20080430) NT
命令行： C:\Documents and Settings\Nerazzurri\桌面\样本.rar

日期： 1.5.2008  时间：15:07:10
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Nerazzurri\桌面\样本.rar
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>yuiabct.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>MsIMMs32.dll - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosdohs00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>tciocp32.dll - Win32/PSW.OnLineGames.NFL 木马
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>608769WL.DLL - Win32/PSW.Legendmir.NFQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>bincdwsa.dll - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>dbhlp32.dlL - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>dionpis.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>dndsioc.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>fiosectc.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>fmbiost.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>fmsbbqi.dll - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>fmsiocps.dll - Win32/PSW.OnLineGames.NVW 木马
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>fmsjhif.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>huifitc.dll - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>issms32.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>mfchlp64.dll - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosfmsq00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosmhfp00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosmnsf00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosping00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>msosptfs00.dll - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>Nt_Sys32.Sys - Win32/PSW.QQPass.NCZ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>ptshell.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>sfnqpewv.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc01.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc02.exe - Win32/PSW.OnLineGames.NFL 木马
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc03.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc04.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc05.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc06.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc07.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc08.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc09.exe - Win32/PSW.OnLineGames.NMQ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc10.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc11.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc12.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc13.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc14.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc15.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc16.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc17.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc18.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc19.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc20.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc21.exe - Win32/PSW.OnLineGames.NFL 木马
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc22.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc23.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc24.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc25.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc26.exe - 可能是 Win32/PSW.Legendmir.NFR 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc27.exe - 可能是 Win32/PSW.WOW.WU 木马 的一个变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>soc28.exe - Win32/PSW.QQPass.NCZ 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>ticisms.dll - Win32/PSW.OnLineGames.NVW 木马的变种
C:\Documents and Settings\Nerazzurri\桌面\样本.rar >>RAR >>WINSvr64.dll - Win32/PSW.OnLineGames.NVW 木马的变种
已扫描的文件数目：55
已发现的病毒数目：55
完成时间： 15:07:19 总扫描时间：9 秒 (00:00:09)
回复

举报

qwer9909
发表于 2008-5-1 15:56:50 | 显示全部楼层

蜘蛛44个

样本.rar\yuiabct.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\MsIMMs32.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4817;;
样本.rar\tciocp32.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4660;;
样本.rar\608769WL.DLL;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wow.origin;;
样本.rar\bincdwsa.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9726;;
样本.rar\dndsioc.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\fiosectc.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\fmbiost.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9729;;
样本.rar\fmsiocps.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4809;;
样本.rar\fmsjhif.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9731;;
样本.rar\issms32.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\msosfmsq00.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9711;;
样本.rar\msosmnsf00.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\msosptfs00.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\Nt_Sys32.Sys;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Lineage.origin;;
样本.rar\ptshell.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\sfnqpewv.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4882;;
样本.rar\soc02.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4810;;
样本.rar\soc03.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\soc04.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9729;;
样本.rar\soc05.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\soc06.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9726;;
样本.rar\soc07.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4817;;
样本.rar\soc08.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.4883;;
soc09.exe\data002;C:\Documents and Settings\Administrator\桌面\样本.rar\soc09.exe;Trojan.PWS.Wsgame.4674;;
soc09.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;发现压缩文件中有被感染的对象;;
样本.rar\soc10.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;可能 MULDROP.Trojan;;
soc11.exe\data001;C:\Documents and Settings\Administrator\桌面\样本.rar\soc11.exe;Trojan.PWS.Gamania.9711;;
soc11.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;发现压缩文件中有被感染的对象;;
样本.rar\soc12.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\soc13.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;可能 MULDROP.Trojan;;
样本.rar\soc14.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9731;;
样本.rar\soc15.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;可能 MULDROP.Trojan;;
样本.rar\soc16.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\soc17.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9732;;
样本.rar\soc18.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
soc19.exe\data001;C:\Documents and Settings\Administrator\桌面\样本.rar\soc19.exe;Trojan.PWS.Wsgame.origin;;
soc19.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;发现压缩文件中有被感染的对象;;
样本.rar\soc20.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9729;;
样本.rar\soc21.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Gamania.9734;;
样本.rar\soc22.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;可能 MULDROP.Trojan;;
样本.rar\soc24.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;可能 MULDROP.Trojan;;
soc25.exe\data001;C:\Documents and Settings\Administrator\桌面\样本.rar\soc25.exe;Trojan.PWS.Wsgame.origin;;
soc25.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;发现压缩文件中有被感染的对象;;
样本.rar\soc27.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wow.origin;;
样本.rar\soc28.exe;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Lineage.origin;;
样本.rar\ticisms.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar\WINSvr64.dll;C:\Documents and Settings\Administrator\桌面\样本.rar;Trojan.PWS.Wsgame.origin;;
样本.rar;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;
回复

举报

wangjay1980
发表于 2008-5-1 16:34:55 | 显示全部楼层
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

回复

举报

qigang
发表于 2008-5-1 18:54:07 | 显示全部楼层

114/24

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.nei
病毒： Trojan.PSW.Win32.SO2Game.x
病毒： Trojan.PSW.Win32.GameOL.nav
病毒： Trojan.PSW.Win32.GameOL.ndy
病毒： Trojan.PSW.Win32.GameOL.ncl
病毒： Trojan.PSW.Win32.QQSG.dr
病毒： RootKit.Win32.HideFile.g
病毒： Trojan.PSW.Win32.GameOL.ndt
病毒： Trojan.PSW.Win32.GameOL.nbr
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.Shanda.bi
病毒： Trojan.PSW.Win32.GameOL.nga
病毒： Trojan.PSW.Win32.Shanda.bi

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.30
回复

举报

mofunzone
发表于 2008-5-1 22:47:29 | 显示全部楼层
清空

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本'
C:\Documents and Settings\Administrator\My Documents\样本\
  608769WL.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  bincdwsa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.46
      [NOTE]      The file was deleted!
  dbhlp32.dlL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  dionpis.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  dndsioc.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  fiosectc.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  fmbiost.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  fmsbbqi.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  fmsiocps.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.43
      [NOTE]      The file was deleted!
  fmsjhif.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  huifitc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.59
      [NOTE]      The file was deleted!
  issms32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  mfchlp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.58
      [NOTE]      The file was deleted!
  MsIMMs32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  msosdohs00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xxf.1
      [NOTE]      The file was deleted!
  msosmhfp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtn
      [NOTE]      The file was deleted!
  msosmnsf00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosping00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ydw
      [NOTE]      The file was deleted!
  msosptfs00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  Nt_Sys32.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4878d860.qua'!
  ptshell.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  sfnqpewv.dll
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
      [NOTE]      The file was deleted!
  soc01.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtn
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aji
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc02.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abie
      [NOTE]      The file was deleted!
  soc03.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc04.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc05.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc06.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtp
      [NOTE]      The file was deleted!
  soc07.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc08.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
      [NOTE]      The file was deleted!
  soc09.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ait.1
            [WARNING]   Infected files in archives cannot be repaired!
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '487cd85b.qua'!
  soc10.exe
      [DETECTION] Is the Trojan horse TR/PSW.16789
      [NOTE]      The file was deleted!
  soc11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xxf.1
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aji
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc12.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc16.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '49fabe04.qua'!
  soc18.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  soc19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  soc20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc21.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc22.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc23.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ydw
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajp
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  soc24.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc25.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  soc26.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc27.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  soc28.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
  tciocp32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  ticisms.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  WINSvr64.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  yuiabct.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月1日  07:47
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     55 Files were scanned
     53 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
     52 files were deleted
      0 files were repaired
      3 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      7 Warnings
     55 Notes
回复

举报

12
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-15 18:59 , Processed in 0.091517 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表