发飙完了,不刷了

显示全部楼层 · 发表于 2008-6-8 09:53:35

[DOWN]
1=http://www.tweyhdf48654.cn/1.exe
2=http://www.tweyhdf48654.cn/2.exe
3=http://www.tweyhdf48654.cn/3.exe
4=http://www.tweyhdf48654.cn/4.exe
5=http://www.tweyhdf48654.cn/5.exe
6=http://www.tweyhdf48654.cn/6.exe
7=http://www.tweyhdf48654.cn/7.exe
8=http://www.tweyhdf48654.cn/8.exe
9=http://www.tweyhdf48654.cn/9.exe
10=http://www.tweyhdf48654.cn/10.exe
11=http://www.tweyhdf48654.cn/11.exe
12=http://www.tweyhdf48654.cn/12.exe
13=http://www.tweyhdf48654.cn/13.exe
14=http://www.tweyhdf48654.cn/14.exe
15=http://www.tweyhdf48654.cn/15.exe
16=http://www.tweyhdf48654.cn/16.exe
17=http://www.tweyhdf48654.cn/17.exe
18=http://www.tweyhdf48654.cn/18.exe
19=http://www.tweyhdf48654.cn/19.exe
20=http://www.tweyhdf48654.cn/20.exe
21=http://www.tweyhdf48654.cn/21.exe
22=http://www.tweyhdf48654.cn/22.exe
23=http://www.tweyhdf48654.cn/23.exe
24=http://www.tweyhdf48654.cn/24.exe
25=http://www.tweyhdf48654.cn/25.exe
26=http://www.tweyhdf48654.cn/26.exe

显示全部楼层 · 发表于 2008-6-8 10:00:15

扫描系统区域...
扫描所选择的目录和文件...
对象: 25.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.11C6A90D (BD 引擎)
对象: 1.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.PWS.Games.3.91BAE33F (BD 引擎)
对象: 2.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.41F14DD8 (BD 引擎)
对象: 3.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 4.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.3EE2356C (BD 引擎)
对象: 6.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.27320494 (BD 引擎)
对象: 7.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.B5BD9759 (BD 引擎)
对象: 8.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.6AC1050D (BD 引擎)
对象: 9.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.204ED434 (BD 引擎)
对象: 10.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.2C15BD0F (BD 引擎)
对象: 11.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.DC9ADBCB (BD 引擎)
对象: 12.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Trojan.PWS.OnlineGames.YYA (BD 引擎)
对象: 13.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.F2506C49 (BD 引擎)
对象: 14.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.A091A273 (BD 引擎)
对象: 15.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.B465BF8E (BD 引擎)
对象: 16.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Trojan.PWS.OnlineGames.YYA (BD 引擎)
对象: 17.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.50A2122E (BD 引擎)
对象: 18.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.C6D6ED4A (BD 引擎)
对象: 19.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.DBA1AA60 (BD 引擎)
对象: 20.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.PWStealer.C49D8D18 (BD 引擎)
对象: 21.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.09ABB445 (BD 引擎)
对象: 22.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.B4B26BAA (BD 引擎)
对象: 23.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Dropped:Trojan.PWS.OnlineGames.OPB (BD 引擎)
对象: 24.exe
      路径: E:\下载
      Status: 已发现病毒
      病毒: Generic.Malware.SBdldg.CF1D87D7 (BD 引擎)
挂了一个

[ 本帖最后由电影结束了于 2008-6-8 10:01 编辑 ]

显示全部楼层 · 发表于 2008-6-8 10:01:51

伟大的downlist分析专家快3000贴啦
恭喜啊
端午节快乐啊！

显示全部楼层 · 发表于 2008-6-8 10:02:43

跟贴,哇哈哈

显示全部楼层 · 发表于 2008-6-8 10:10:01

截图纪念

显示全部楼层 · 发表于 2008-6-8 10:15:05

显示全部楼层 · 发表于 2008-6-8 10:29:53

C:\Users\Administrator\Desktop\下载1.rar » RAR » 25.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 1.exe - a variant of Win32/PSW.Agent.NGZ trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 2.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 3.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 4.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 5.exe - probably unknown NewHeur_PE virus
C:\Users\Administrator\Desktop\下载1.rar » RAR » 6.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 7.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 8.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 9.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 10.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 11.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 12.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 13.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 14.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 15.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 16.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 17.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 18.exe - Win32/PSW.OnLineGames.OAF trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 19.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 20.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 21.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 22.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 23.exe - probably a variant of Win32/PSW.WOW.WU trojan
C:\Users\Administrator\Desktop\下载1.rar » RAR » 24.exe - probably a variant of Win32/Genetik trojan

显示全部楼层 · 发表于 2008-6-8 10:36:55

E:\virus\下载1.rar > RAR > 25.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 1.exe - Win32/PSW.Agent.NGZ 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 2.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 3.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 4.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 5.exe - 未查明的 NewHeur_PE 病毒
E:\virus\下载1.rar > RAR > 6.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\下载1.rar > RAR > 7.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 8.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 9.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\下载1.rar > RAR > 10.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 11.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 12.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\下载1.rar > RAR > 13.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 14.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\下载1.rar > RAR > 15.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 16.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 17.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 18.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\下载1.rar > RAR > 19.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 20.exe - Win32/PSW.QQPass.NCZ 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 21.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 22.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 23.exe - 可能是 Win32/PSW.WOW.WU 特洛伊木马的变种
E:\virus\下载1.rar > RAR > 24.exe - 可能是 Win32/Genetik 特洛伊木马的变种

显示全部楼层 · 发表于 2008-6-8 10:42:00

扫描开始于2008年6月8日 10:42:41
G:\v\新建文件夹\1.exe,查到病毒: N.H!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\10.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\11.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\12.exe,查到病毒: W32/OnLineGames.AKRY!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\13.exe,查到病毒: W32/OnlineGames.06D7!tr, 操作: 删除/隔离
G:\v\新建文件夹\14.exe,查到病毒: W32/OnlineGames.3BBA!tr, 操作: 删除/隔离
G:\v\新建文件夹\15.exe,查到病毒: W32/OnlineGames.FE62!tr, 操作: 删除/隔离
G:\v\新建文件夹\16.exe,查到病毒: W32/OnlineGames.5A65!tr, 操作: 删除/隔离
G:\v\新建文件夹\17.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\18.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\19.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\2.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\20.exe,查到病毒: W32/OnlineGames.8848!tr, 操作: 删除/隔离
G:\v\新建文件夹\21.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\22.exe,查到病毒: W32/OnLineGames.AMRJ!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\23.exe,查到病毒: W32/Agent.DPL!tr, 操作: 已修复
G:\v\新建文件夹\24.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\25.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\3.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\4.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\5.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\6.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\7.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\8.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\9.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
扫描结束于2008年6月8日 10:42:48
总共扫描了25个文件, 其中感染病毒文件为25个. 总共扫描了9个引导区, 感染的引导区为0个.

显示全部楼层 · 发表于 2008-6-8 10:48:45

Begin scan in 'C:\Documents and Settings\Administrator\桌面\21.exe'
C:\Documents and Settings\Administrator\桌面\21.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a1.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\22.exe'
C:\Documents and Settings\Administrator\桌面\22.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\23.exe'
C:\Documents and Settings\Administrator\桌面\23.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a3.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\13.exe'
C:\Documents and Settings\Administrator\桌面\13.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee8c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\4.exe'
C:\Documents and Settings\Administrator\桌面\4.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48b0489e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\5.exe'
C:\Documents and Settings\Administrator\桌面\5.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    A backup was created as '48b0489f.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\6.exe'
C:\Documents and Settings\Administrator\桌面\6.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '4934ee88.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\7.exe'
C:\Documents and Settings\Administrator\桌面\7.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48b048a1.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\8.exe'
C:\Documents and Settings\Administrator\桌面\8.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '4934ee8a.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\9.exe'
C:\Documents and Settings\Administrator\桌面\9.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48b048a3.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\14.exe'
C:\Documents and Settings\Administrator\桌面\14.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a5.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\24.exe'
C:\Documents and Settings\Administrator\桌面\24.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee8e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\25.exe'
C:\Documents and Settings\Administrator\桌面\25.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a6.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\3.exe'
C:\Documents and Settings\Administrator\桌面\3.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '4934ee8c.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\15.exe'
C:\Documents and Settings\Administrator\桌面\15.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee8f.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\16.exe'
C:\Documents and Settings\Administrator\桌面\16.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a7.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\1.exe'
C:\Documents and Settings\Administrator\桌面\1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
   [NOTE]    A backup was created as '48b048a5.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\10.exe'
C:\Documents and Settings\Administrator\桌面\10.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee8a.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\11.exe'
C:\Documents and Settings\Administrator\桌面\11.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee8b.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\17.exe'
C:\Documents and Settings\Administrator\桌面\17.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a8.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\12.exe'
C:\Documents and Settings\Administrator\桌面\12.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '49fdee80.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\18.exe'
C:\Documents and Settings\Administrator\桌面\18.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948a9.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\19.exe'
C:\Documents and Settings\Administrator\桌面\19.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '487948aa.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\2.exe'
C:\Documents and Settings\Administrator\桌面\2.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '4934ee8e.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\20.exe'
C:\Documents and Settings\Administrator\桌面\20.exe
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    A backup was created as '49fdee82.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年6月8日  10:48
Used time: 00:03 min

The scan has been done completely.

   0 Scanning directories
   25 Files were scanned
   25 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   25 files were deleted
   0 files were repaired
   25 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   25 Notes

[病毒样本] 发飙完了,不刷了

本帖子中包含更多资源

回复 3楼冷冷的帖子

本帖子中包含更多资源

本帖子中包含更多资源

all

[病毒样本] 发飙完了,不刷了

本帖子中包含更多资源

回复 3楼 冷冷 的帖子

本帖子中包含更多资源

本帖子中包含更多资源

all

回复 3楼冷冷的帖子