查看: 3506|回复: 10
收起左侧

[病毒样本] 55/19

[复制链接]
qigang
发表于 2008-6-9 19:22:41 | 显示全部楼层 |阅读模式
瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.GameOL.nxy
病毒: RootKit.Win32.RESSDT.bf  
病毒: Trojan.PSW.Win32.GameOL.nxf
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.SunGame.u
病毒: Trojan.PSW.Win32.GameOL.nvc
病毒: Trojan.PSW.Win32.GameOL.nrv
病毒: Trojan.Win32.Mnless.drt  
病毒: Trojan.PSW.Win32.GamesOnline.afv
病毒: Trojan.PSW.Win32.SunOnline.ot

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.48

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Joker
发表于 2008-6-9 19:24:04 | 显示全部楼层
清空
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus(2)'
C:\Documents and Settings\Administrator\桌面\virus(2)\aa1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '487e1316.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487e1317.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa11.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487e1318.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '49c8fd81.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487e1319.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa14.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amdt
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was moved to '487e131a.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa15.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '49c8fd83.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487e131b.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa17.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487e131c.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa18.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '49c8fd85.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '487e131d.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487f131e.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa20.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '49c9fd87.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa21.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487f131f.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487f1320.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '487f1321.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa24.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '49c9fdba.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa3.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alae
      [NOTE]      The file was moved to '48801322.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa4.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was moved to '48811323.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '48821323.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was moved to '48831324.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa7.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amdt
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was moved to '48841325.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was moved to '48851325.qua'!
C:\Documents and Settings\Administrator\桌面\virus(2)\aa9.exe
      [DETECTION] Is the Trojan horse TR/PWS.Lmir.UMK
      [NOTE]      The file was moved to '48861326.qua'!
电影结束了
发表于 2008-6-9 19:26:08 | 显示全部楼层
占位。。。
aerbeisi
发表于 2008-6-9 19:26:14 | 显示全部楼层
共24个 NOD32 21个
tanlimo
发表于 2008-6-9 19:28:59 | 显示全部楼层
查杀12个

360安全卫士木马查杀历史报告

木马名称:Infostealer/Win32
路径:G:\virus\virus\aa9.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbn
路径:G:\virus\virus\aa3.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbj
路径:G:\virus\virus\aa22.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbl
路径:G:\virus\virus\aa21.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbq
路径:G:\virus\virus\aa20.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbn
路径:G:\virus\virus\aa19.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbp
路径:G:\virus\virus\aa18.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbn
路径:G:\virus\virus\aa15.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbq
路径:G:\virus\virus\aa14.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbr
路径:G:\virus\virus\aa11.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbp
路径:G:\virus\virus\aa1.exe
查杀时间 :2008-06-09 19:31
木马名称:Trojan/Win32.Rodog.lbp
路径:G:\virus\virus\aa10.exe
查杀时间 :2008-06-09 19:31
woai_jolin
发表于 2008-6-9 19:35:02 | 显示全部楼层
扫描开始于2008年6月9日 19:35:31
G:\v\新建文件夹\aa1.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa10.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa11.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa12.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa13.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa14.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa15.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa16.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa17.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa18.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa19.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa2.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa20.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa21.exe,查到病毒: W32/OnlineGames.760E!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa22.exe,查到病毒: W32/OnlineGames.66E5!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa23.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa24.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa3.exe,查到病毒: W32/Inject.CNG!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa4.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa5.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\aa6.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa7.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa8.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\aa9.exe,查到病毒: Suspicious, 操作: <无>
扫描结束于2008年6月9日 19:35:53
总共扫描了24个文件, 其中感染病毒文件为24个. 总共扫描了9个引导区, 感染的引导区为0个.
醉一生爱妍
发表于 2008-6-9 19:37:54 | 显示全部楼层
kis09 ...kill all..
挪威的冬天
发表于 2008-6-9 19:46:27 | 显示全部楼层
信息        2008-06-09  19:46:26        您此次查毒清除了12个病毒                       
信息        2008-06-09  19:46:26        您此次查毒共查出12个病毒以及危险代码                       
信息        2008-06-09  19:46:26        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件46个                       
信息        2008-06-09  19:46:26        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-06-09  19:46:26        D:\Desktop\virus.rar\aa9.exe        Win32.Troj.MapwdT.fc.20628        清除成功       
病毒        2008-06-09  19:46:26        D:\Desktop\virus.rar\aa8.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:26        D:\Desktop\virus.rar\aa6.exe        Win32.Troj.MapwdT.fc.20628        清除成功       
病毒        2008-06-09  19:46:25        D:\Desktop\virus.rar\aa5.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:25        D:\Desktop\virus.rar\aa3.exe        Win32.Troj.MapwdT.fc.20628        清除成功       
病毒        2008-06-09  19:46:25        D:\Desktop\virus.rar\aa22.exe        Win32.PSWTroj.GameOL.106639        清除成功       
病毒        2008-06-09  19:46:24        D:\Desktop\virus.rar\aa21.exe        Win32.Troj.OnlineGamesT.ak.110799        清除成功       
病毒        2008-06-09  19:46:24        D:\Desktop\virus.rar\aa20.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:24        D:\Desktop\virus.rar\aa19.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:24        D:\Desktop\virus.rar\aa18.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:23        D:\Desktop\virus.rar\aa15.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-09  19:46:22        D:\Desktop\virus.rar\aa1.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功
allinwonderi
发表于 2008-6-9 19:47:48 | 显示全部楼层

ArcaVir2008

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa1.exe <- Trojan.Psw.Onlinegames.Alzp : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa1.exe<UPack>:aa1.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Alzc : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa12.exe <- Trojan.Psw.Onlinegames.Amxl : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa14.exe <- Trojan.Psw.Onlinegames.Amey : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa14.exe<UPack>:aa14.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Amfa : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa14.exe<UPack>:aa14.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Amdt : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa15.exe <- Trojan.Psw.Onlinegames.Akkg : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa15.exe<UPack>:aa15.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Akkd : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa18.exe <- Trojan.Psw.Onlinegames.Ajpd : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa18.exe<UPack>:aa18.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aind : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa19.exe <- Trojan.Psw.Onlinegames.Ajod : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa19.exe<UPack>:aa19.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Affc : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa20.exe <- Trojan.Psw.Onlinegames.Amrj : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa20.exe<UPack>:aa20.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Almo : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa22.exe <- Trojan.Psw.Onlinegames.Ajxt : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa24.exe <- Trojan.Psw.Onlinegames.Amxl : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa3.exe<UPack>:aa3.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Alae : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa5.exe <- Trojan.Psw.Onlinegames.Ajoi : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa5.exe<UPack>:aa5.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Ajoj : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:aa7.exe<UPack>:aa7.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Amdt : No action



Scanned objects : 65

Infected objects : 20
allinwonderi
发表于 2008-6-9 19:48:46 | 显示全部楼层

F-Prot 4.4.4

[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa10.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa1.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa11.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa12.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa13.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa14.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa15.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa16.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa17.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa18.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa19.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa2.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa20.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa21.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa22.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa23.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa24.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa3.exe->(UPack)
[Found security risk]         <W32/Nilage.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa4.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa5.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa6.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa7.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa8.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->aa9.exe->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-6-9, 19:48:25
Duration:        0:00:27

Scan result:

Scanned files:                 6
Infected objects:         24
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 08:14 , Processed in 0.128801 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表