一个木马群

显示全部楼层 · 发表于 2008-6-5 13:52:40

继续扫

显示全部楼层 · 发表于 2008-6-5 13:55:26

显示全部楼层 · 发表于 2008-6-5 13:57:37

正在扫描日志
病毒库版本: 3159 (20080605)
日期: 08-06-05 时间: 13:57:15
已扫描的磁盘、文件夹和文件: D:\Downloads\NewFiles\Desktop.zip
D:\Downloads\NewFiles\Desktop.zip > ZIP > 0.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 1.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 2.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 3.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 4.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 5.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 6.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 7.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 8.exe - Win32/PSW.OnLineGames.XZN 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > 9.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > a.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > b.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > c.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > d.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
D:\Downloads\NewFiles\Desktop.zip > ZIP > e.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
已扫描的对象数: 15
发现的威胁数: 15
已清除对象数:0
完成时间: 13:57:25 总扫描时间: 10 秒 (00:00:10)

显示全部楼层 · 发表于 2008-6-5 13:58:04

显示全部楼层 · 发表于 2008-6-5 13:59:00

都能杀
请EQ大师发个有技术含量的样本

[ 本帖最后由 chabosh 于 2008-6-5 14:00 编辑 ]

显示全部楼层 · 发表于 2008-6-5 14:00:18

Avira

Starting the file scan:

Begin scan in 'F:\Virus\Desktop.zip'
F:\Virus\Desktop.zip
  [0] Archive type: ZIP
--> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 4.exe
      [DETECTION] Is the Trojan horse TR/Agent.7680
--> 5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 6.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> 7.exe
   [1] Archive type: OVL
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
--> 8.exe
   [1] Archive type: OVL
   --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
--> 9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> a.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> b.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> c.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> d.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> e.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-5 14:01:38

信息 2008-06-05  14:01:27 您此次查毒清除了3个病毒
信息 2008-06-05  14:01:27 您此次查毒共查出3个病毒以及危险代码
信息 2008-06-05  14:01:27 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件31个
信息 2008-06-05  14:01:27 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-06-05  14:01:26 D:\Desktop\Desktop.zip\8.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-06-05  14:01:26 D:\Desktop\Desktop.zip\7.exe Win32.Troj.OnlineGameT.pq.57344 清除成功
病毒 2008-06-05  14:01:26 D:\Desktop\Desktop.zip\4.exe Win32.PSWTroj.ZhuXian.ht.74008 清除成功

显示全部楼层 · 发表于 2008-6-5 14:57:49

诺顿全杀

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.ZhuXian.ht

用户来源：互联网

软件版本：20.47.30

显示全部楼层 · 发表于 2008-6-5 17:17:56

病毒 2008-06-05  17:18:08 C:\Documents and Settings\Administrator\桌面\Desktop.zip\8.exe Win32.Troj.OnlineGameT.pq.57344 删除成功
病毒 2008-06-05  17:18:08 C:\Documents and Settings\Administrator\桌面\Desktop.zip\7.exe Win32.Troj.OnlineGameT.pq.57344 删除成功
病毒 2008-06-05  17:18:07 C:\Documents and Settings\Administrator\桌面\Desktop.zip\4.exe Win32.PSWTroj.ZhuXian.ht.74008 删除成功

显示全部楼层 · 发表于 2008-6-5 17:25:21

原帖由 秋叶濛濛 于 2008-6-5 14:00 发表
Avira

Starting the file scan:

Begin scan in 'F:\Virus\Desktop.zip'
F:\Virus\Desktop.zip
  [0] Archive type: ZIP
--> 0.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   ...

   0 Scanning directories
   16 Files were scanned
   17 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

数量也附上啊，，不然要手动数。

[病毒样本] 一个木马群

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源