virus

显示全部楼层 · 发表于 2008-5-28 15:03:40

显示全部楼层 · 发表于 2008-5-28 15:06:28

Starting the file scan:

Begin scan in 'E:\AV\virus'
E:\AV\virus\cc2.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc3.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc5.exe
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.anu
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc12.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc13.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc14.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc15.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc19.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc21.exe
   [DETECTION] Is the Trojan horse TR/Agent.5316
   [NOTE]    The file was deleted!
E:\AV\virus\cc24.exe
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\cc29.exe
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
E:\AV\virus\up.exe
   [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
   [NOTE]    The file was deleted!

End of the scan: 2008年5月28日  15:08
Used time: 00:38 min

The scan has been done completely.

   1 Scanning directories
   12 Files were scanned
   13 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   12 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   0 Archives were scanned
   0 Warnings
   12 Notes

显示全部楼层 · 发表于 2008-5-28 15:19:02

D:\firefox download\5.28\下载(2).rar > RAR > cc2.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc3.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc5.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc12.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc13.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc14.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc15.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc19.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > cc21.exe - 正常
D:\firefox download\5.28\下载(2).rar > RAR > cc24.exe - 正常
D:\firefox download\5.28\下载(2).rar > RAR > cc29.exe - 可能是 Win32/Genetik 特洛伊木马的变种
D:\firefox download\5.28\下载(2).rar > RAR > up.exe - Win32/AutoRun.NAD 病毒的变种
D:\firefox download\5.28\下载(2).rar:Zone.Identifier - 正常

显示全部楼层 · 发表于 2008-5-28 15:21:56

信息 2008-05-28  15:21:40 您此次查毒清除了6个病毒
信息 2008-05-28  15:21:40 您此次查毒共查出6个病毒以及危险代码
信息 2008-05-28  15:21:40 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件27个
信息 2008-05-28  15:21:40 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-28  15:21:40 C:\Documents and Settings\Administrator\桌面\下载.rar\up.exe Worm.AutoRuns.m.991232 清除成功
病毒 2008-05-28  15:21:38 C:\Documents and Settings\Administrator\桌面\下载.rar\cc15.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-05-28  15:21:38 C:\Documents and Settings\Administrator\桌面\下载.rar\cc12.exe Win32.Troj.OnlineGameT.xx.102475 清除成功
病毒 2008-05-28  15:21:37 C:\Documents and Settings\Administrator\桌面\下载.rar\cc5.exe Win32.Troj.OnlineGameT.zp.57344 清除成功
病毒 2008-05-28  15:21:37 C:\Documents and Settings\Administrator\桌面\下载.rar\cc3.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-05-28  15:21:37 C:\Documents and Settings\Administrator\桌面\下载.rar\cc2.exe Win32.Troj.OnlineGameT.pq.57344 清除成功

显示全部楼层 · 发表于 2008-5-28 15:22:16

信息 2008-05-28  15:21:59 您此次查毒清除了6个病毒
信息 2008-05-28  15:21:59 您此次查毒共查出6个病毒以及危险代码
信息 2008-05-28  15:21:59 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件27个
信息 2008-05-28  15:21:59 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-05-28  15:21:59 D:\Desktop\ÏÂÔØ.rar\up.exe Worm.AutoRuns.m.991232 清除成功
病毒 2008-05-28  15:21:58 D:\Desktop\ÏÂÔØ.rar\cc15.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-05-28  15:21:57 D:\Desktop\ÏÂÔØ.rar\cc12.exe Win32.Troj.OnlineGameT.xx.102475 清除成功
病毒 2008-05-28  15:21:57 D:\Desktop\ÏÂÔØ.rar\cc5.exe Win32.Troj.OnlineGameT.zp.57344 清除成功
病毒 2008-05-28  15:21:57 D:\Desktop\ÏÂÔØ.rar\cc3.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-05-28  15:21:57 D:\Desktop\ÏÂÔØ.rar\cc2.exe Win32.Troj.OnlineGameT.pq.57344 清除成功

显示全部楼层 · 发表于 2008-5-28 20:18:49

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\下载.rar<RAR>:cc5.exe <- Trojan.Psw.Onlinegames.Ajbr : No action
C:\Documents and Settings\All Users\Documents\Test\下载.rar<RAR>:cc24.exe<UPack>:cc24.exe <- Variant:Downloader.Agent.Alw : No action
C:\Documents and Settings\All Users\Documents\Test\下载.rar<RAR>:up.exe<UPack>:up.exe <- Downloader.Delf.Gzs : No action

Scanned objects : 29

Infected objects : 3

显示全部楼层 · 发表于 2008-5-28 20:19:30

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc2.exe->exefile->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc3.exe->exefile->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc5.exe->exefile->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc12.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc13.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc14.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc15.exe->exefile->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc19.exe->(UPack)
[Found security risk] <W32/OnlineGames.H.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc21.exe
[Found Trojan] <W32/Trojan2.ASSJ (exact, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc24.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->cc29.exe->(embedded)->(UPack)
[Found security risk] <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\下载.rar->up.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-5-28, 20:19:07
Duration: 0:00:12

Scan result:

Scanned files:    6
Infected objects:    12
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-28 20:30:14

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GamesOnline.adg
病毒： RootKit.Win32.Undef.ib
病毒： RootKit.Win32.Undef.ib
病毒： Trojan.PSW.Win32.GamesOnline.aat
病毒： Trojan.PSW.Win32.GameOL.nrv
病毒： Trojan.PSW.Win32.GameOL.ntd
病毒： Dropper.Win32.Agent.gco

MAC 地址：00:0C:29:DE:9A:3B

用户来源：局域网

软件版本：20.46.22

显示全部楼层 · 发表于 2008-5-28 20:36:27

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GamesOnline.adg
病毒： RootKit.Win32.Undef.ib
病毒： RootKit.Win32.Undef.ib
病毒： Trojan.PSW.Win32.GamesOnline.aat
病毒： Trojan.PSW.Win32.GameOL.nrv
病毒： Trojan.PSW.Win32.GameOL.ntd
病毒： Dropper.Win32.Agent.gco

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.46.22

[病毒样本] virus

本帖子中包含更多资源

ArcaVir2008

F-Prot 4.4.4

22/10

22/10