[病毒样本] 29

显示全部楼层 · 发表于 2008-6-5 20:30:49

to pc security labs

显示全部楼层 · 发表于 2008-6-5 20:31:39

Starting the file scan:

Begin scan in 'C:\Documents and Settings\kato9096\桌面\99585'
C:\Documents and Settings\kato9096\桌面\99585\99585\da1.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da10.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da11.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da12.exe3
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da13.exe3
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alna
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da14.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da15.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da16.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da17.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da18.exe2
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da19.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da2.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da20.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da21.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da22.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da23.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da24.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.134
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da25.exe2
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da26.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da27.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da28.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da29.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da3.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da4.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da5.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da6.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da7.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da8.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
C:\Documents and Settings\kato9096\桌面\99585\99585\da9.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!

End of the scan: Thursday,5 June 2008  20:31
Used time: 00:11 min

The scan has been done completely.

   2 Scanning directories
   29 Files were scanned
   32 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   29 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -3 Files not concerned
   0 Archives were scanned
   0 Warnings
   29 Notes

沒有不报

显示全部楼层 · 发表于 2008-6-5 20:32:19

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ambs 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da1.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ambh 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da10.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ammu 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da11.exe3//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alvs 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da12.exe3//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alna 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da13.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alqk 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da14.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akzo 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da15.exe2//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alvs 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da16.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ambu 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da17.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.cci 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da18.exe2//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akyb 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da19.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajoo 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da2.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amqs 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da20.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amqt 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da21.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amal 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da22.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ambs 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da23.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajhl 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da24.exe2//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amal 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da26.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amqt 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da27.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.amal 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da28.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajqf 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da29.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akwe 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da3.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.alzp 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da4.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Agent.aof 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da6.exe2//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajoi 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da7.exe2//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajpx 檔案: C:\Documents and Settings\kato9096\桌面\99585.rar/99585\da8.exe2//UPack

26,已上报卡巴

显示全部楼层 · 发表于 2008-6-5 20:33:25

Starting the file scan:

Begin scan in 'E:\99585'
E:\99585\da1.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da10.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da11.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\99585\da12.exe3
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\99585\da13.exe3
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alna
   [NOTE]    The file was deleted!
E:\99585\da14.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da15.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
E:\99585\da16.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\99585\da17.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da18.exe2
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
E:\99585\da19.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da2.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da20.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da21.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
E:\99585\da22.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\99585\da23.exe2
  [0] Archive type: OVL
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amax
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da24.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.134
   [NOTE]    The file was deleted!
E:\99585\da25.exe2
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
E:\99585\da26.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\99585\da27.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
E:\99585\da28.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!
E:\99585\da29.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da3.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da4.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da5.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!
E:\99585\da6.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\99585\da7.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da8.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
E:\99585\da9.exe2
   [DETECTION] Is the Trojan horse TR/Agent.7680
   [NOTE]    The file was deleted!

End of the scan: 2008年6月5日  20:35
Used time: 00:33 min

The scan has been done completely.

   1 Scanning directories
   29 Files were scanned
   32 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   29 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -3 Files not concerned
   0 Archives were scanned
   0 Warnings
   29 Notes

显示全部楼层 · 发表于 2008-6-5 20:33:35

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da1.exe2->exefile->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da10.exe2->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da12.exe3->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da14.exe2->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da16.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da17.exe2->exefile->(UPack)
[Found security risk] <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da18.exe2->(UPX)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da19.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da2.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da20.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-KPP!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da21.exe2->(embedded)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da22.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da23.exe2->exefile->(UPack)
[Found security risk] <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da24.exe2->(embedded)
[Found security risk] <W32/Injector.A.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da25.exe2->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da26.exe2->(UPack)
[Found possible security risk] <W32/Heuristic-KPP!Eldorado (not disinfectable)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da27.exe2->(embedded)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da28.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da29.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da3.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da4.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da7.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\99585.rar->99585\da8.exe2->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-5, 20:33:11
Duration: 0:00:15

Scan result:

Scanned files:    6
Infected objects:    23
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-5 20:37:02

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.RESSDT.bg
病毒： RootKit.Win32.RESSDT.bg
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nxl
病毒： Trojan.PSW.Win32.GamesOnline.aey
病毒： Trojan.PSW.Win32.GameOL.nvb
病毒： Trojan.PSW.Win32.ZhuXian.ht
病毒： Worm.Win32.PaBug.hk
病毒： Trojan.PSW.Win32.SunGame.u
病毒： Trojan.PSW.Win32.GameOL.nwc
病毒： Trojan.PSW.Win32.GameOL.nwc
病毒： Trojan.PSW.Win32.GameOL.nxa

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.32

显示全部楼层 · 发表于 2008-6-5 20:38:27

D:\download\99585.rar>>99585\da1.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da10.exe2 Trojan.Cap86319.meil 木马还未处理
D:\download\99585.rar>>99585\da11.exe3 Trojan.Cap86410.wepc 木马还未处理
D:\download\99585.rar>>99585\da12.exe3 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da13.exe3 Trojan.Cap8614.trir 木马还未处理
D:\download\99585.rar>>99585\da14.exe2 Trojan.Cap8622.xlzo 木马还未处理
D:\download\99585.rar>>99585\da16.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da17.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da18.exe2 Trojan.Gampass.ninp 木马还未处理
D:\download\99585.rar>>99585\da19.exe2 Trojan.Cap852916.jdlv 木马还未处理
D:\download\99585.rar>>99585\da2.exe2 TrojanPSW.QQGame.bz.aiyu 木马还未处理
D:\download\99585.rar>>99585\da20.exe2 TrojanPSW.GameOL.GEN.oqoq 木马还未处理
D:\download\99585.rar>>99585\da21.exe2 TrojanPSW.OnLineGames.amqt.xces 木马还未处理
D:\download\99585.rar>>99585\da22.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da23.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da24.exe2 TrojanPSW.GamesOnline.abn.tpbs 木马还未处理
D:\download\99585.rar>>99585\da25.exe2 TrojanDownloader.Nurech.bd.bmqk 木马还未处理
D:\download\99585.rar>>99585\da26.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da27.exe2 Trojan.Undef.hec.zpob 木马还未处理
D:\download\99585.rar>>99585\da28.exe2 TrojanPSW.OnLineGames.wlu.kjdk 木马还未处理
D:\download\99585.rar>>99585\da29.exe2 TrojanPSW.OnLineGames.ajqf.sbzn 木马还未处理
D:\download\99585.rar>>99585\da3.exe2 TrojanPSW.OnLineGames.akwe.aqjq 木马还未处理
D:\download\99585.rar>>99585\da4.exe2 TrojanPSW.GameOL.GEN.rrlt 木马还未处理
D:\download\99585.rar>>99585\da6.exe2 Trojan.Cap8650.wtjd 木马还未处理
D:\download\99585.rar>>99585\da7.exe2 Trojan.Cap85250.wgjy 木马还未处理
D:\download\99585.rar>>99585\da8.exe2 TrojanPSW.OnlineGames.Gen.xcjn 木马还未处理
D:\download\99585.rar>>99585\da9.exe2 TrojanPSW.ZhuXian.ht.jqwu 木马还未处理

27

显示全部楼层 · 发表于 2008-6-5 22:20:13

eav没有不报……

显示全部楼层 · 发表于 2008-6-5 22:55:50

C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da1.exe2 - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da10.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da11.exe3 - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da12.exe3 - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da13.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da14.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da15.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da16.exe2 - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da17.exe2 - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da18.exe2 - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da19.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da2.exe2 - Win32/PSW.OnLineGames.OAF trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da20.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da21.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da22.exe2 - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da23.exe2 - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da24.exe2 - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da25.exe2 - probably unknown NewHeur_PE virus
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da26.exe2 - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da27.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da28.exe2 - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da29.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da3.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da4.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da5.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da6.exe2 - probably a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da7.exe2 - Win32/PSW.OnLineGames.OAF trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da8.exe2 - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Administrator\桌面\99585.rar » RAR » 99585\da9.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan

显示全部楼层 · 发表于 2008-6-6 09:26:26

2008-6-6 9:25:24 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT4.EXE PWS-OnlineGames.a(特洛伊)
2008-6-6 9:25:25 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA10.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:26 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT7.EXE\SOFT7.EXE\00002200.EXE\00002200.EXE PWS-LegMir.dll.gen.m(特洛伊)
2008-6-6 9:25:26 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT9.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:28 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT12.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:28 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT13.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:28 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT14.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:28 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT16.EXE PWS-Mmorpg.gen(特洛伊)
2008-6-6 9:25:29 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA11.EXE3\DA11.EXE3 PWS-Onlinegames.dr(特洛伊)
2008-6-6 9:25:32 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA13.EXE3 Generic PWS.y(特洛伊)
2008-6-6 9:25:32 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT19.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:32 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA14.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:35 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT21.EXE\SOFT21.EXE PWS-Onlinegames.dr(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA18.EXE2\DA18.EXE2\0000a4f8.EXE PWS-OnlineGames.as(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT22.EXE Downloader.gen.a(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA19.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA2.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT23.EXE\SOFT23.EXE PWS-Onlinegames.dr(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA20.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:36 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT24.EXE PWS-Mmorpg.gen(特洛伊)
2008-6-6 9:25:39 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA24.EXE2\DA24.EXE2\00003060.EXE PWS-WoW.gen.e (ED)(特洛伊)
2008-6-6 9:25:39 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT25.EXE\SOFT25.EXE\00005220.EXE Generic RootKit.a(特洛伊)
2008-6-6 9:25:40 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT26.EXE PWS-OnlineGames.a(特洛伊)
2008-6-6 9:25:43 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA29.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:43 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT27.EXE PWS-Mmorpg.gen(特洛伊)
2008-6-6 9:25:43 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA3.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:43 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT28.EXE Generic PWS.y(特洛伊)
2008-6-6 9:25:43 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA4.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:44 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA7.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:44 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFT31.EXE Generic MSVC.f(特洛伊)
2008-6-6 9:25:44 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\99585.rar\DA8.EXE2 New Malware.n(特洛伊)
2008-6-6 9:25:44 未采取操作 Administrator c:\RECYCLER\S-1-5-21-1123561945-57989841-682003330-500\Dc22.rar\SOFTD.EXE PWS-Mmorpg.gen(特洛伊)

[病毒样本] 29

本帖子中包含更多资源

F-Prot 4.4.4

76/31