[病毒样本] 12

显示全部楼层 · 发表于 2008-6-3 14:48:25

信息 2008-06-03  14:48:13 您此次查毒清除了8个病毒
信息 2008-06-03  14:48:13 您此次查毒共查出8个病毒以及危险代码
信息 2008-06-03  14:48:13 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件24个
信息 2008-06-03  14:48:13 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-06-03  14:48:13 D:\Desktop\explorer.rar\winsys.exe3 Win32.Troj.Agent.45056 清除成功
病毒 2008-06-03  14:48:13 D:\Desktop\explorer.rar\SysZxacC.dll Win32.PSWTroj.OnLineGames.110592 清除成功
病毒 2008-06-03  14:48:12 D:\Desktop\explorer.rar\SysWoWCt.dll Win32.PSWTroj.OnLineGames.118784 清除成功
病毒 2008-06-03  14:48:12 D:\Desktop\explorer.rar\SysWmWacz.dll Win32.PSWTroj.Agent.110592 清除成功
病毒 2008-06-03  14:48:12 D:\Desktop\explorer.rar\SysDaJHv.dll Win32.Troj.Daojian.a.110592 清除成功
病毒 2008-06-03  14:48:12 D:\Desktop\explorer.rar\midimapwd.dll Win32.PSWTroj.Nilage.21504 清除成功
病毒 2008-06-03  14:48:11 D:\Desktop\explorer.rar\midimaptl.dll Win32.Troj.MapwdT.fc.20628 清除成功
病毒 2008-06-03  14:48:11 D:\Desktop\explorer.rar\explorer.exe3 Win32.Troj.GuiseExpT.ea.65536 清除成功

显示全部楼层 · 发表于 2008-6-3 20:14:46

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Mnless.drt
病毒： Trojan.PSW.Win32.GameOL.nve
病毒： Trojan.PSW.Win32.GamesOnline.wb
病毒： Trojan.PSW.Win32.SunOnline.oq
病毒： Trojan.PSW.Win32.SunOnline.op
病毒： Trojan.PSW.Win32.GamesOnline.wc
病毒： Trojan.Win32.Undef.hef
病毒： RootKit.Win32.Undef.il

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.12

显示全部楼层 · 发表于 2008-6-3 21:07:15

TIS2008 4/12
"21:05" "手动扫描" "文件" "Cryp_Upack" "C:\Documents and Settings\sky\桌面\explorer\SysDaJHv.dll" "隔离成功" ""
"21:05" "手动扫描" "文件" "Cryp_Upack" "C:\Documents and Settings\sky\桌面\explorer\SysWmWacz.dll" "隔离成功" ""
"21:05" "手动扫描" "文件" "Cryp_Upack" "C:\Documents and Settings\sky\桌面\explorer\SysWoWCt.dll" "隔离成功" ""
"21:05" "手动扫描" "文件" "Cryp_Upack" "C:\Documents and Settings\sky\桌面\explorer\SysZxacC.dll" "隔离成功" ""

eav    5/12

正在扫描日志
病毒库版本: 3154 (20080603)
日期: 2008-6-3  时间: 21:05:19
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\sky\桌面\explorer
C:\Documents and Settings\sky\桌面\explorer\explorer.exe3 - 可能是 Win32/TrojanDownloader.Agent.NWV 特洛伊木马的变种
C:\Documents and Settings\sky\桌面\explorer\SysDaJHv.dll - Win32/PSW.OnLineGames.GJV 特洛伊木马
C:\Documents and Settings\sky\桌面\explorer\SysWmWacz.dll - Win32/PSW.OnLineGames.GJV 特洛伊木马的变种
C:\Documents and Settings\sky\桌面\explorer\SysWoWCt.dll - Win32/PSW.OnLineGames.GJV 特洛伊木马
C:\Documents and Settings\sky\桌面\explorer\SysZxacC.dll - Win32/PSW.OnLineGames.GJV 特洛伊木马的变种
已扫描的对象数: 12
发现的威胁数: 5
已清除对象数:0
完成时间: 21:05:21  总扫描时间: 2 秒 (00:00:02)

显示全部楼层 · 发表于 2008-6-3 21:11:33

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\explorer.rar<RAR>:explorer.exe3 <- Trojan.Downloader.Agent.Qtx : No action
C:\Documents and Settings\All Users\Documents\Test\explorer.rar<RAR>:midimaptl.dll <- Trojan.Psw.Onlinegames.Alae : No action
C:\Documents and Settings\All Users\Documents\Test\explorer.rar<RAR>:SysDaJHv.dll <- Trojan.Psw.Onlinegames.Akcs : No action
C:\Documents and Settings\All Users\Documents\Test\explorer.rar<RAR>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\explorer.rar<RAR>:SysWoWCt.dll<UPack>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action

Scanned objects : 19

Infected objects : 5

显示全部楼层 · 发表于 2008-6-3 21:11:56

[Found possible virus] <W32/Threat-SysVenFakU-based!Maximus (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->explorer.exe3
[Found security risk] <W32/OnlineGames.B.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->midimaptl.dll
[Found security risk] <W32/OnlineGames.B.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->midimapwd.dll
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->SysDaJHv.dll->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->SysWmWacz.dll->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->SysWoWCt.dll->(UPack)
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\explorer.rar->SysZxacC.dll->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-3, 21:11:47
Duration: 0:00:03

Scan result:

Scanned files:    6
Infected objects:    7
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

[病毒样本] 12

18/8

ArcaVir2008

F-Prot 4.4.4

浏览过的版块