[病毒样本] 37x

显示全部楼层 · 发表于 2008-5-3 11:36:04

Roboon：KIS8

显示全部楼层 · 发表于 2008-5-3 17:50:23

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Undef.ia
病毒： RootKit.Win32.HideFile.g
病毒： Trojan.PSW.Win32.GameOL.nga
病毒： Trojan.PSW.Win32.GameOL.nfp
病毒： Trojan.PSW.Win32.GameOL.nhx
病毒： Trojan.PSW.Win32.GameOL.nei
病毒： RootKit.Win32.Mnless.jz
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GameOL.nft
病毒： Trojan.PSW.Win32.GameOL.nfx

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.50

显示全部楼层 · 发表于 2008-5-3 19:38:44

日期： 3.5.2008 时间：19:45:39
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\zh\桌面\Virus\
C:\Documents and Settings\zh\桌面\Virus\014s.exe - 可能是 Win32/TrojanDownloader.Small.OBJ 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\1.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\10.exe - Win32/PSW.OnLineGames.NML 木马的变种
C:\Documents and Settings\zh\桌面\Virus\11.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\12.exe - Win32/PSW.OnLineGames.NML 木马的变种
C:\Documents and Settings\zh\桌面\Virus\13.exe - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\14.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\15.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\16.exe - Win32/PSW.OnLineGames.NML 木马的变种
C:\Documents and Settings\zh\桌面\Virus\17.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\18.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\19.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\2.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\20.exe - Win32/PSW.OnLineGames.NML 木马的变种
C:\Documents and Settings\zh\桌面\Virus\21.exe - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\22.exe - Win32/PSW.OnLineGames.XZN 木马的变种
C:\Documents and Settings\zh\桌面\Virus\23.exe - Win32/PSW.OnLineGames.XZN 木马的变种
C:\Documents and Settings\zh\桌面\Virus\3.exe - Win32/PSW.OnLineGames.OAF 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\4.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\5.exe - 可能是 Win32/Genetik 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\6.exe - Win32/PSW.OnLineGames.MUG 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\614.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\7.exe - Win32/PSW.OnLineGames.ZJK 木马的变种
C:\Documents and Settings\zh\桌面\Virus\8.exe - Win32/PSW.OnLineGames.MUG 木马的变种
C:\Documents and Settings\zh\桌面\Virus\9.exe - Win32/PSW.OnLineGames.NML 木马的变种
C:\Documents and Settings\zh\桌面\Virus\a014.exe - Win32/TrojanDownloader.Small.OCA 木马的变种
C:\Documents and Settings\zh\桌面\Virus\abf.exe - Win32/TrojanDownloader.Small.OCA 木马的变种
C:\Documents and Settings\zh\桌面\Virus\alz.exe - Win32/TrojanDownloader.Small.OCA 木马的变种
C:\Documents and Settings\zh\桌面\Virus\anrl.exe - Win32/TrojanDownloader.Small.OCA 木马的变种
C:\Documents and Settings\zh\桌面\Virus\arl.exe - Win32/TrojanDownloader.Small.OCA 木马的变种
C:\Documents and Settings\zh\桌面\Virus\bf.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\lz.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\ogame.exe - 可能是 Win32/TrojanDownloader.Small.OBJ 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\pps.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\rl.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
C:\Documents and Settings\zh\桌面\Virus\rll.exe - 可能是 Win32/TrojanDownloader.Small.OBJ 木马的一个变种
C:\Documents and Settings\zh\桌面\Virus\xl.exe - Win32/TrojanDownloader.Small.NZS 木马 - 已隔离 - 已删除
已扫描的文件数目：37
已发现的病毒数目：37
已清除病毒的文件数目：37

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Undef.ia
病毒： RootKit.Win32.HideFile.g
病毒： Trojan.PSW.Win32.GameOL.nga
病毒： Trojan.PSW.Win32.GameOL.nfp
病毒： Trojan.PSW.Win32.GameOL.nhx
病毒： Trojan.PSW.Win32.GameOL.nei
病毒： RootKit.Win32.Mnless.jz
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GameOL.nft
病毒： Trojan.PSW.Win32.GameOL.nfx

用户来源：互联网

软件版本：20.42.50
22个

显示全部楼层 · 发表于 2008-5-3 19:43:34

Virus.zip\Virus/014s.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;可能 MULDROP.Trojan;;
Virus.zip\Virus/1.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4864;;
Virus.zip\Virus/10.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9810;;
Virus.zip\Virus/11.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9748;;
Virus.zip\Virus/12.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9793;;
Virus.zip\Virus/13.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9813;;
Virus.zip\Virus/14.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9748;;
Virus.zip\Virus/15.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4902;;
Virus.zip\Virus/16.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9810;;
Virus.zip\Virus/17.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9726;;
Virus.zip\Virus/18.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4902;;
Virus.zip\Virus/19.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9748;;
Virus.zip\Virus/2.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9748;;
Virus.zip\Virus/20.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9793;;
Virus.zip\Virus/21.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9807;;
Virus.zip\Virus/22.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;可能 DLOADER.Trojan;;
Virus.zip\Virus/23.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;可能 DLOADER.Trojan;;
Virus.zip\Virus/3.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59580;;
Virus.zip\Virus/4.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4902;;
Virus.zip\Virus/5.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9814;;
Virus.zip\Virus/6.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9748;;
Virus.zip\Virus/614.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip\Virus/7.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4418;;
Virus.zip\Virus/8.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Wsgame.4902;;
Virus.zip\Virus/9.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.PWS.Gamania.9750;;
Virus.zip\Virus/a014.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59699;;
Virus.zip\Virus/abf.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59699;;
Virus.zip\Virus/alz.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59699;;
Virus.zip\Virus/anrl.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59699;;
Virus.zip\Virus/arl.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.59699;;
Virus.zip\Virus/bf.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip\Virus/lz.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip\Virus/ogame.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;可能 MULDROP.Trojan;;
Virus.zip\Virus/pps.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip\Virus/rl.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip\Virus/rll.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;可能 MULDROP.Trojan;;
Virus.zip\Virus/xl.exe;C:\Documents and Settings\Administrator\桌面\Virus.zip;Trojan.DownLoader.45214;;
Virus.zip;C:\Documents and Settings\Administrator\桌面;发现压缩文件中有被感染的对象;;

显示全部楼层 · 发表于 2008-5-3 20:04:55

Trend Micro 已知20个启发6个

显示全部楼层 · 发表于 2008-5-4 15:52:45

37隻
卡巴防毒v3.5瑞士版

显示全部楼层 · 发表于 2008-5-4 16:05:38

红三通吃

Begin scan in 'D:\Downloads\样本\Virus'
D:\Downloads\样本\Virus\Virus\014s.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '48516e46.qua'!
D:\Downloads\样本\Virus\Virus\1.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.11389
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aju
   [NOTE]    The file was moved to '48826e43.qua'!
D:\Downloads\样本\Virus\Virus\10.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was moved to '484b6e45.qua'!
D:\Downloads\样本\Virus\Virus\11.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abzd.17
   [NOTE]    The file was moved to '484b6e46.qua'!
D:\Downloads\样本\Virus\Virus\12.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was moved to '484b6e48.qua'!
D:\Downloads\样本\Virus\Virus\13.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was moved to '484b6e49.qua'!
D:\Downloads\样本\Virus\Virus\14.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abzd.25
   [NOTE]    The file was moved to '484b6e4a.qua'!
D:\Downloads\样本\Virus\Virus\15.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [NOTE]    The file was moved to '484b6e4b.qua'!
D:\Downloads\样本\Virus\Virus\16.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was moved to '484b6e4c.qua'!
D:\Downloads\样本\Virus\Virus\17.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtp
   [NOTE]    The file was moved to '484b6e4d.qua'!
D:\Downloads\样本\Virus\Virus\18.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '484b6e4e.qua'!
D:\Downloads\样本\Virus\Virus\19.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '484b6e4f.qua'!
D:\Downloads\样本\Virus\Virus\2.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abzd.2
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [NOTE]    The file was moved to '48826e44.qua'!
D:\Downloads\样本\Virus\Virus\20.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was moved to '49e2ab87.qua'!
D:\Downloads\样本\Virus\Virus\21.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was moved to '484b6e47.qua'!
D:\Downloads\样本\Virus\Virus\22.exe
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was moved to '49e2ab8a.qua'!
D:\Downloads\样本\Virus\Virus\23.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was moved to '49e25cfb.qua'!
D:\Downloads\样本\Virus\Virus\3.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was moved to '48826e45.qua'!
D:\Downloads\样本\Virus\Virus\4.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '492bab86.qua'!
D:\Downloads\样本\Virus\Virus\5.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was moved to '48826e47.qua'!
D:\Downloads\样本\Virus\Virus\6.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abzd.12
   [NOTE]    The file was moved to '492bab88.qua'!
D:\Downloads\样本\Virus\Virus\614.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '48516e48.qua'!
D:\Downloads\样本\Virus\Virus\7.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abup
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '48826e49.qua'!
D:\Downloads\样本\Virus\Virus\8.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '492bab8a.qua'!
D:\Downloads\样本\Virus\Virus\9.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was moved to '48826e4b.qua'!
D:\Downloads\样本\Virus\Virus\a014.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '484e6e47.qua'!
D:\Downloads\样本\Virus\Virus\abf.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '48836e79.qua'!
D:\Downloads\样本\Virus\Virus\alz.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '48976e83.qua'!
D:\Downloads\样本\Virus\Virus\anrl.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '488f6e86.qua'!
D:\Downloads\样本\Virus\Virus\arl.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was moved to '48896e8a.qua'!
D:\Downloads\样本\Virus\Virus\bf.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '484b6e7e.qua'!
D:\Downloads\样本\Virus\Virus\lz.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '484b6e92.qua'!
D:\Downloads\样本\Virus\Virus\ogame.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '487e6e7f.qua'!
D:\Downloads\样本\Virus\Virus\pps.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '48906e88.qua'!
D:\Downloads\样本\Virus\Virus\rl.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '484b6e84.qua'!
D:\Downloads\样本\Virus\Virus\rll.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was moved to '48896e84.qua'!
D:\Downloads\样本\Virus\Virus\xl.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
   [NOTE]    The file was moved to '49e2ab45.qua'!

End of the scan: 2008年5月4日  16:04
Used time: 00:05 min

The scan has been done completely.

   2 Scanning directories
   37 Files were scanned
   41 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   37 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -4 Files not concerned
   0 Archives were scanned
   0 Warnings
   37 Notes

显示全部楼层 · 发表于 2008-5-4 21:49:37

重复报壳
[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:014s.exe<UPack>:014s.exe <- Downloader.Agent.Mtz : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:1.exe <- Trojan.Psw.Onlinegames.Aceg : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:1.exe<FSG>:1.exe<DLLRES>:res1.exe <- Trojan.Rootkit.Agent.Aju : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:10.exe <- Trojan.Psw.Onlinegames.Acmz : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:11.exe<UPX>:11.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzc : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:11.exe<UPX>:11.exe<DLLRES>:res0.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzd : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:12.exe <- Trojan.Agent.Kuw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:14.exe <- Trojan.Psw.Onlinegames.Abzb : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:14.exe<UPX>:14.exe<DLLRES>:res0.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzd : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:17.exe<FSG>:17.exe <- Trojan.Psw.Onlinegames.Abtp : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:17.exe<FSG>:17.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Xzy : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:19.exe<UPX>:19.exe<DLLRES>:res0.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzd : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:2.exe <- Trojan.Psw.Onlinegames.Abzb : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:2.exe<UPX>:2.exe<DLLRES>:res0.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzd : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:20.exe <- Trojan.Agent.Kuw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:6.exe <- Trojan.Psw.Onlinegames.Abzb : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:6.exe<UPX>:6.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:6.exe<UPX>:6.exe<DLLRES>:res0.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Abzd : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:614.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:614.exe<UPack>:614.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:614.exe<UPack>:614.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:614.exe<UPack>:614.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:7.exe <- Trojan.Psw.Onlinegames.Abuo : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:7.exe<UPack>:7.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Abup : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:9.exe <- Trojan.Agent.Kqv : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:a014.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:abf.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:alz.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:anrl.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:arl.exe <- Trojan.Downloader.Small.Ixw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:bf.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:bf.exe<UPack>:bf.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:bf.exe<UPack>:bf.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:bf.exe<UPack>:bf.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:lz.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:lz.exe<UPack>:lz.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:lz.exe<UPack>:lz.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:lz.exe<UPack>:lz.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:ogame.exe<UPack>:ogame.exe <- Downloader.Agent.Mtz : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:pps.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:pps.exe<UPack>:pps.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:pps.exe<UPack>:pps.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:pps.exe<UPack>:pps.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:rl.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:rl.exe<UPack>:rl.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:rl.exe<UPack>:rl.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:rl.exe<UPack>:rl.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:rll.exe<UPack>:rll.exe <- Downloader.Agent.Mtz : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:xl.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:xl.exe<UPack>:xl.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:xl.exe<UPack>:xl.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ppu : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.zip<ZIP>:xl.exe<UPack>:xl.exe<DLLRES>:res1.exe <- Downloader.Small.Hzk : No action

Scanned objects : 119

Infected objects : 52

显示全部楼层 · 发表于 2008-5-4 21:50:45

[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/014s.exe->(UPack)
[Found password stealer] <W32/Pws.AGUX (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/1.exe
[Found password stealer] <W32/Pws.AGVN (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/10.exe
[Found password stealer] <W32/Pws.AGVC (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/12.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/13.exe->(UPack)
[Found password stealer] <W32/Pws.AGVG (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/14.exe->(UPX)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/16.exe->(UPack)
[Found password stealer] <W32/Pws.AGVI (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/17.exe
[Found password stealer] <W32/Pws.AGUY (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/2.exe->(UPX)
[Found password stealer] <W32/Pws.AGVH (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/20.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/21.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/22.exe->exefile->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/23.exe->exefile->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/3.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/5.exe->(UPack)
[Found password stealer] <W32/Pws.AGVQ (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/6.exe->(UPX)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/614.exe->(UPack)
[Found password stealer] <W32/Pws.AGVL (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/7.exe
[Found password stealer] <W32/Pws.AGVK (exact, damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/9.exe
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/a014.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/abf.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/alz.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/anrl.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/arl.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/bf.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/lz.exe->(UPack)
[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/ogame.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/pps.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/rl.exe->(UPack)
[Found possible security risk] <W32/Heuristic-224!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/rll.exe->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\Virus.zip->Virus/xl.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-5-4, 21:50:29
Duration: 0:00:09

Scan result:

Scanned files:    6
Infected objects:    31
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

To Frisk

显示全部楼层 · 发表于 2008-5-4 21:55:56

信息 2008-05-04  21:54:36 您此次查毒清除了34个病毒
信息 2008-05-04  21:54:36 您此次查毒共查出34个病毒以及危险代码
病毒 2008-05-04  21:54:36 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\xl.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:36 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\rll.exe Win32.Troj.GuiseExpT.ea.131072 清除成功
病毒 2008-05-04  21:54:36 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\rl.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:36 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\pps.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:35 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\ogame.exe Win32.Troj.GuiseExpT.ea.131072 清除成功
病毒 2008-05-04  21:54:35 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\lz.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:35 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\bf.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:35 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\arl.exe Win32.TrojDownloader.Small.90112 清除成功
病毒 2008-05-04  21:54:35 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\anrl.exe Win32.TrojDownloader.Small.90112 清除成功
病毒 2008-05-04  21:54:34 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\alz.exe Win32.TrojDownloader.Small.90112 清除成功
病毒 2008-05-04  21:54:34 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\abf.exe Win32.TrojDownloader.Small.90112 清除成功
病毒 2008-05-04  21:54:34 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\a014.exe Win32.TrojDownloader.Small.90112 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\9.exe Win32.Troj.OnlineGameT.wi.106496 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\8.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\7.exe Win32.Troj.OnlineGames.zj.106496 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\614.exe Win32.PSWTroj.OnLineGames.98304 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\6.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\5.exe Win32.PSWTroj.OnLineGames.106496 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\4.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\3.exe Win32.PSWTroj.OnLineGames.102400 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\23.exe Win32.Troj.OnlineGameT.zp.57344 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\22.exe Win32.Troj.OnlineGameT.zp.57344 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\21.exe Win32.Troj.OnlineGamesT.ny.102456 清除成功
病毒 2008-05-04  21:54:33 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\20.exe Win32.Troj.OnlineGameT.wi.106496 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\2.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\19.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\18.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\17.exe Win32.Troj.GameOnlineT.nf.69897 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\15.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\14.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\13.exe Win32.Troj.OnlineGamesT.lg.106684 清除成功
病毒 2008-05-04  21:54:32 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\12.exe Win32.Troj.OnlineGameT.wi.106496 清除成功
病毒 2008-05-04  21:54:31 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\11.exe Win32.Troj.OnlineGamesT.zy.32923 清除成功
病毒 2008-05-04  21:54:31 C:\Documents and Settings\Administrator\桌面\Virus.zip\Virus\014s.exe Win32.Troj.GuiseExpT.ea.131072 清除成功

[病毒样本] 37x

98/22

蜘蛛全灭

ArcaVir2008

F-Prot 6.0.9.0