补回冷冷扣我的两分

正在扫描日志
病毒库版本: 3166 (20080609)
日期: 2008-6-9  时间: 17:25:20
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\sky\桌面\muma.rar
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa24.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa1.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa2.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa4.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa5.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa7.exe - Win32/PSW.OnLineGames.ZJK 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa8.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa10.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa11.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa12.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa13.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa14.exe - Win32/PSW.OnLineGames.ZJK 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa15.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa16.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa17.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa18.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa19.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa20.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa21.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa22.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\muma.rar > RAR > aa23.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
已扫描的对象数: 24
发现的威胁数: 21
已清除对象数:0
完成时间: 17:25:30  总扫描时间: 10 秒 (00:00:10)

冷冷

原帖由 qigang 于 2008-6-9 16:41 发表
等待打包，我打的累死了。

冷冷做版主后还没散财过。打劫中。。

我不是本区版主

palfan

卡巴全灭了

tanlimo

360安全卫士木马查杀历史报告

木马名称：Trojan/Win32.Rodog.lbj
路径：G:\virus\muma\aa22.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbl
路径：G:\virus\muma\aa21.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbq
路径：G:\virus\muma\aa20.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbn
路径：G:\virus\muma\aa19.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbp
路径：G:\virus\muma\aa18.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbn
路径：G:\virus\muma\aa15.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbq
路径：G:\virus\muma\aa14.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbr
路径：G:\virus\muma\aa11.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbp
路径：G:\virus\muma\aa10.exe
查杀时间 ：2008-06-09 18:07
木马名称：Infostealer/Win32
路径：G:\virus\muma\aa9.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbn
路径：G:\virus\muma\aa3.exe
查杀时间 ：2008-06-09 18:07
木马名称：Trojan/Win32.Rodog.lbp
路径：G:\virus\muma\aa1.exe
查杀时间 ：2008-06-09 18:07

查杀数12个

XANADU

黑名单

*.awerbiz.cn/*

hahacomcn

Begin scan in 'C:\Documents and Settings\haha\桌面\muma.rar'
C:\Documents and Settings\haha\桌面\muma.rar
  [0] Archive type: RAR
    --> aa24.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa2.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa3.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alae
    --> aa4.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa7.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amdt
    --> aa10.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa11.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa12.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa13.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa14.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amdt
    --> aa16.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa17.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa21.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa22.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> aa23.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      A backup was created as '48ba0672.qua'  ( QUARANTINE )


End of the scan: 2008年6月9日  18:29
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     25 Files were scanned
     26 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

电影结束了

AVK06全干。。。

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa24.exe <- Trojan.Psw.Onlinegames.Amxl : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa1.exe <- Trojan.Psw.Onlinegames.Alzp : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa1.exe<UPack>:aa1.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Alzc : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa3.exe<UPack>:aa3.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Alae : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa5.exe <- Trojan.Psw.Onlinegames.Ajoi : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa5.exe<UPack>:aa5.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Ajoj : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa7.exe<UPack>:aa7.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Amdt : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa12.exe <- Trojan.Psw.Onlinegames.Amxl : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa14.exe <- Trojan.Psw.Onlinegames.Amey : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa14.exe<UPack>:aa14.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Amfa : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa14.exe<UPack>:aa14.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Amdt : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa15.exe <- Trojan.Psw.Onlinegames.Akkg : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa15.exe<UPack>:aa15.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Akkd : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa18.exe <- Trojan.Psw.Onlinegames.Ajpd : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa18.exe<UPack>:aa18.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aind : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa19.exe <- Trojan.Psw.Onlinegames.Ajod : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa19.exe<UPack>:aa19.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Affc : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa20.exe <- Trojan.Psw.Onlinegames.Amrj : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa20.exe<UPack>:aa20.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Almo : No action
C:\Documents and Settings\All Users\Documents\Test\muma.rar<RAR>:aa22.exe <- Trojan.Psw.Onlinegames.Ajxt : No action



Scanned objects : 65

Infected objects : 20

allinwonderi

[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa24.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa1.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa2.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa3.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa4.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa5.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa6.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa7.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa8.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa9.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa10.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa11.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa12.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa13.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa14.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa15.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa16.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa17.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa18.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa19.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa20.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa21.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa22.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\muma.rar->aa23.exe->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-6-9, 20:24:26
Duration:        0:00:29

Scan result:

Scanned files:                 6
Infected objects:         24
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------