查看: 2898|回复: 9
收起左侧

[病毒样本] 生成物

[复制链接]
电影结束了
发表于 2008-5-28 15:24:25 | 显示全部楼层 |阅读模式


MS我的电脑文件感染了。。。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Exia 该用户已被删除
发表于 2008-5-28 15:26:57 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\AV\virus'
E:\AV\virus\mfdesy.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\MMEZZPOP1073.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\orc4754l.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\sgrefg.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\spoolsv.exe
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!
E:\AV\virus\tempaq
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\tv9kx8.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\zgxfdx.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\zyzxhime.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\419b23xza.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\apcdli.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\azzxaime.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc2.ext
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc3.ext
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc5.ext
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.anu
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc12.ext
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc13.ext
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc14.ext
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc15.ext
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc19.ext
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc21.ext
      [DETECTION] Is the Trojan horse TR/Agent.5316
      [NOTE]      The file was deleted!
E:\AV\virus\cc24.ext
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\cc29.ext
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\m98ch9t.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\makensisw.exe
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!


End of the scan: 2008年5月28日  15:29
Used time: 00:32 min

The scan has been done completely.

      1 Scanning directories
     43 Files were scanned
     26 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     25 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      0 Archives were scanned
      0 Warnings
     25 Notes

204679 cc23.ext 1.28 KB CLEAN
25030418 cc30.ext 169.79 KB MALWARE
25030419 fxzxbime.sys 1.02 KB DAMAGED FILE (UNKNOWN)
25030420 vfhwca.sys 51.66 KB MALWARE


[ 本帖最后由 Exia 于 2008-5-28 19:51 编辑 ]
挪威的冬天
发表于 2008-5-28 15:29:24 | 显示全部楼层
信息        2008-05-28  15:29:09        您此次查毒隔离了14个文件                       
信息        2008-05-28  15:29:09        您此次查毒共查出14个病毒以及危险代码                       
信息        2008-05-28  15:29:09        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件70个                       
信息        2008-05-28  15:29:09        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\zyzxhime.dll        Win32.Troj.OnlineGamesT.xx.91648        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\zgxfdx.dll        Win32.PSWTroj.OnLineGames.225792        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\spoolsv.exe        Win32.WYCao.af.14064        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\orc4754l.dll        Win32.Troj.BhoT.xt.163840        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\MMEZZPOP1073.dll        Win32.Troj.AgentT.dl.86128        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\makensisw.exe        Win32.WYCao.af.14064        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\cc5.ext        Win32.Troj.OnlineGameT.zp.57344        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\cc3.ext        Win32.Troj.OnlineGameT.pq.57344        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\cc2.ext        Win32.Troj.OnlineGameT.pq.57344        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\cc15.ext        Win32.Troj.OnlineGameT.pq.57344        隔离成功       
病毒        2008-05-28  15:29:09        D:\Desktop\virus\cc12.ext        Win32.Troj.OnlineGameT.xx.102475        隔离成功       
病毒        2008-05-28  15:29:08        D:\Desktop\virus\azzxaime.exe        Win32.Troj.OnlineGamesT.ny.102456        隔离成功       
病毒        2008-05-28  15:29:08        D:\Desktop\virus\apcdli.sys        Win32.Troj.CinmusT.dm.198212        隔离成功       
病毒        2008-05-28  15:29:08        D:\Desktop\virus\419b23xza.dll        Win32.Troj.BhoT.xt.163840        隔离成功
mofunzone
发表于 2008-5-28 15:30:35 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus'
C:\Documents and Settings\morgan\My Documents\virus\
  419b23xza.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  apcdli.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  azzxaime.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  cc1.ext
  cc10.ext
  cc11.ext
  cc12.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc13.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc14.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc15.ext
    [0] Archive type: OVL
      --> Object
        [1] Archive type: Runtime Packed
        --> Object
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  cc16.ext
  cc17.ext
  cc18.ext
  cc19.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc2.ext
    [0] Archive type: OVL
      --> Object
        [1] Archive type: Runtime Packed
        --> Object
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  cc20.ext
  cc21.ext
      [DETECTION] Is the Trojan horse TR/Agent.5316
      [NOTE]      The file was deleted!
  cc22.ext
  cc23.ext
  cc24.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc29.ext
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  cc3.ext
    [0] Archive type: OVL
      --> Object
        [1] Archive type: Runtime Packed
        --> Object
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  cc30.ext
  cc4.ext
  cc5.ext
    [0] Archive type: OVL
      --> Object
        [1] Archive type: Runtime Packed
        --> Object
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.anu
            [WARNING]   Infected files in archives cannot be repaired!
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  cc6.ext
  cc7.ext
  cc8.ext
  cc9.ext
  fxzxbime.sys
  ju2rl0159.sys
  m98ch9t.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  makensisw.exe
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!
  mfdesy.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
  MMEZZPOP1073.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  orc4754l.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  sgrefg.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
  spoolsv.exe
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!
  tempaq
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  tv9kx8.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [NOTE]      The file was deleted!
  vfhwca.sys
  zgxfdx.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
  zyzxhime.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月28日  00:30
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     43 Files were scanned
     26 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     25 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      0 Archives were scanned
      1 Warnings
     25 Notes
yunhan123
发表于 2008-5-28 15:31:56 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\419b23xza.dll - Win32/BHO.NDW 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\apcdli.sys - Win32/Adware.Cinmus 应用程序 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\azzxaime.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc12.ext - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc13.ext - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc14.ext - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc15.ext - Win32/PSW.OnLineGames.XZN 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc19.ext - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc2.ext - Win32/PSW.OnLineGames.XZN 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc29.ext - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc3.ext - Win32/PSW.OnLineGames.XZN 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc30.ext > NSIS > 27.sys - Win32/Adware.Cinmus 应用程序 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\cc5.ext - Win32/PSW.OnLineGames.XZN 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\ju2rl0159.sys - 可能是 Win32/Rootkit.Agent.NBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\m98ch9t.sys - Win32/Rootkit.Agent.NFB 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\makensisw.exe - Win32/AutoRun.NAD 病毒
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\mfdesy.dll - Win32/PSW.OnLineGames.NOA 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\MMEZZPOP1073.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\orc4754l.dll - Win32/BHO.NDW 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\sgrefg.dll - Win32/PSW.OnLineGames.NOA 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\spoolsv.exe - Win32/AutoRun.NAD 病毒
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\tv9kx8.sys - Win32/Rootkit.Agent.NFB 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\vfhwca.sys - 可能是 Win32/Rootkit.Agent.NBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\zgxfdx.dll - Win32/PSW.OnLineGames.NOA 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > virus\zyzxhime.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
已扫描的对象数: 47
发现的威胁数: 25
啊弥陀佛
发表于 2008-5-28 17:33:31 | 显示全部楼层
木马名称:Trojan-PSW.Win32.OL-Game.znb
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\ZYZXHIME.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Genetik.ijw
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\AZZXAIME.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\HCV32.SYS
2) C:\WINDOWS\SYSTEM32\MMMHXGGD1059.EXE
3) C:\WINDOWS\SYSTEM32\MMMHXGGD1059.DLL
是否删除木马程序及其衍生物?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC3.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MMSHYLQE1078.EXE
2) C:\WINDOWS\SYSTEM32\MMSHYLQE1078.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC5.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\HBV32.SYS
2) C:\WINDOWS\SYSTEM32\MMKAFNFW1086.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC12.EXE
是可疑程序!
试图删除关键系统文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC15.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MMEZZPOP1073.EXE
2) C:\WINDOWS\SYSTEM32\MMEZZPOP1073.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC14.EXE
是可疑程序!
试图删除关键系统文件!
是否阻止该进程继续运行?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC19.EXE
是可疑程序!
试图删除关键系统文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\CC13.EXE
是可疑程序!
试图删除关键系统文件!
是否阻止该进程继续运行?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS[1]\MMEZZPOP1073.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
allinwonderi
发表于 2008-5-28 20:09:26 | 显示全部楼层

ArcaVir2008

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:zyzxhime.dll <- Trojan.Psw.Onlinegames.Agbp : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:azzxaime.exe<UPack>:azzxaime.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Agbp : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:cc5.ext <- Trojan.Psw.Onlinegames.Ajbr : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:cc24.ext<UPack>:cc24.ext <- Variant:Downloader.Agent.Alw : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:cc30.ext<NSIS>:27.sys <- Downloader.Agent.Nas : No action



Scanned objects : 83

Infected objects : 5
allinwonderi
发表于 2008-5-28 20:10:10 | 显示全部楼层

F-Prot 4.4.4

[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->MMEZZPOP1073.dll->(UPack)
[Found downloader]         <W32/Downloader.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->orc4754l.dll
[Found virus]         <W32/Otwycal.A (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->spoolsv.exe
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->zyzxhime.dll
[Found downloader]         <W32/Downloader.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar->419b23xza.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->azzxaime.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc2.ext->exefile->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc3.ext->exefile->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc5.ext->exefile->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc12.ext->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc13.ext->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc14.ext->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc15.ext->exefile->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc19.ext->(UPack)
[Found security risk]         <W32/OnlineGames.H.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc21.ext
[Found Trojan]         <W32/Trojan2.ASSJ (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc24.ext
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar->cc29.ext->(embedded)->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-5-28, 20:09:44
Duration:        0:00:11

Scan result:

Scanned files:                 8
Infected objects:         17
Disinfected objects:         0
Quarantined files:         0
----------------------------------------------------------------
rest1min
发表于 2008-5-28 20:18:17 | 显示全部楼层
江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.704
        病毒库日期 2008-05-28
        更新日期 2008-05-28

扫描目标 C:\Documents and Settings\Administrator\桌面\virus[1]\

开始时间 2008-05-28 20:16:59

在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc12.ext 中发现 Trojan/PSW.GamePass.adkd 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc13.ext 中发现 Trojan/PSW.OnlineGames.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc15.ext 中发现 TrojanSpy.Iespy.bw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\azzxaime.exe 中发现 Trojan/PSW.OnLineGames.ailg 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc14.ext 中发现 Trojan/PSW.OnlineGames.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc2.ext 中发现 TrojanSpy.Iespy.bw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc19.ext 中发现 Trojan/PSW.OnlineGames.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc24.ext 中发现 Trojan/Small.ens 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc3.ext 中发现 TrojanSpy.Iespy.bw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc29.ext 中发现 Trojan/PSW.OnLineGames.adxe 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\cc5.ext 中发现 TrojanSpy.Iespy.bw 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\makensisw.exe 中发现 Win32/Otwycal.e 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\MMEZZPOP1073.dll 中发现 Trojan/PSW.OnlineGames.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\spoolsv.exe 中发现 Win32/Otwycal.e 病毒, 已清除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\zyzxhime.dll 中发现 Trojan/PSW.GamePass.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\zgxfdx.dll 中发现 Trojan/PSW.OnLineGames.tyz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus[1]\apcdli.sys 中发现 Adware/Cinmus.Gen 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :43                                  病毒体 :17        
                   删除 :15                                    解毒 :2         
    扫描速度(千字节/秒) :264                               扫描时间 :00:00:10
    扫描文件速度(个/秒) :4
qigang
发表于 2008-5-28 20:57:00 | 显示全部楼层

57/20

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.GameOL.nsr
病毒: Trojan.PSW.Win32.GameOL.nsa
病毒: Win32.WYC.e              
病毒: RootKit.Win32.Mnless.qr  
病毒: Trojan.PSW.Win32.GamesOnline.abq
病毒: Trojan.PSW.Win32.SunGame.u
病毒: Trojan.PSW.Win32.GamesOnline.adg
病毒: RootKit.Win32.Undef.ib   
病毒: RootKit.Win32.Undef.ib   
病毒: Trojan.PSW.Win32.GamesOnline.aat
病毒: Trojan.PSW.Win32.GameOL.nrv
病毒: Trojan.PSW.Win32.GameOL.ntd
病毒: Dropper.Win32.Agent.gco  

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.46.22
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-15 11:06 , Processed in 0.137474 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表