刚收集的几个

显示全部楼层 · 发表于 2008-6-30 15:14:39

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Temp.rar'
C:\Documents and Settings\Administrator\桌面\Temp.rar
  [0] Archive type: RAR
  --> arps.exe
   [DETECTION] Is the Trojan horse TR/Spy.XWG.1
--> cc16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
--> cc17.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    The file was deleted!

End of the scan: 星期一 2008年6月30日  15:14
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   18 Files were scanned
   7 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   11 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-6-30 19:11:22

费尔7个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Dropper.Win32.Agent.gdv
病毒： Trojan.DL.Win32.Undef.uo
病毒： Trojan.PSW.Win32.GameOL.odw
病毒： Trojan.PSW.Win32.GameOL.oky
病毒： Trojan.PSW.Win32.GameOL.ojm
病毒： Trojan.PSW.Win32.Agent.bld
病毒： Trojan.PSW.Win32.Agent.blb

用户来源：互联网

软件版本：20.51.02

显示全部楼层 · 发表于 2008-6-30 20:53:38

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Dropper.Win32.Agent.gdv
病毒： Trojan.DL.Win32.Undef.uo
病毒： Trojan.PSW.Win32.GameOL.odw
病毒： Trojan.PSW.Win32.GameOL.oky
病毒： Trojan.PSW.Win32.GameOL.ojm
病毒： Trojan.PSW.Win32.Agent.bld
病毒： Trojan.PSW.Win32.Agent.blb

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.51.02

显示全部楼层 · 发表于 2008-6-30 20:55:31

Scan Log
Version of virus signature database: 3226 (20080630)
Date: 2008-6-30 Time: 20:55:41
Scanned disks, folders and files: G:\v\Temp.rar
G:\v\Temp.rar » RAR » 14.tmp.bat - is OK
G:\v\Temp.rar » RAR » 15.tmp.bat - is OK
G:\v\Temp.rar » RAR » 16.tmp.bat - is OK
G:\v\Temp.rar » RAR » A.tmp.bat - is OK
G:\v\Temp.rar » RAR » arps.exe - Win32/Agent.NLI trojan
G:\v\Temp.rar » RAR » B.tmp.bat - is OK
G:\v\Temp.rar » RAR » c8.jpg.exe » UPX v12_m2 - is OK
G:\v\Temp.rar » RAR » cc15.exe - a variant of Win32/PSW.OnLineGames.OAF trojan
G:\v\Temp.rar » RAR » cc16.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\Temp.rar » RAR » cc17.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\Temp.rar » RAR » ck3.jpg.exe » UPX v12_m2 - is OK
G:\v\Temp.rar » RAR » F.tmp.bat - is OK
G:\v\Temp.rar » RAR » hpuninstaller.exe - is OK
G:\v\Temp.rar » RAR » sa.jpg.exe » UPX v12_m2 - is OK
G:\v\Temp.rar » RAR » 1A.tmp.bat - is OK
G:\v\Temp.rar » RAR » 1D.tmp.bat - is OK
G:\v\Temp.rar » RAR » 11.tmp.bat - is OK
G:\v\Temp.rar:Zone.Identifier - is OK
Number of scanned objects: 18
Number of threats found: 4
Number of cleaned objects: 0
Time of completion: 20:55:42 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2008-6-30 20:57:28

显示全部楼层 · 发表于 2008-6-30 20:57:59

30:06:2008 20:57:51 SEARCHTASK "USER_DEFINED" started...
scan item: G:\v\Temp.rar
File scanned: G:\v\Temp.rar - SIGNATURE FOUND "Virus.Trojan.Win32.Agent.qnv"
30:06:2008 20:57:51 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2008-6-30 23:40:15

Hello,

cc15.exe_ - Trojan-GameThief.Win32.OnLineGames.rzoq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

hpuninstaller.exe_

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: Temp.rar

显示全部楼层 · 发表于 2008-7-1 02:53:17

显示全部楼层 · 发表于 2008-7-1 10:40:55

已删除：木马程序 Backdoor.Win32.SdBot.eqb 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/arps.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Spy.Win32.Delf.cuy 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/c8.jpg.exe//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.rzoq 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/cc15.exe//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.rxvq 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/cc16.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.arun 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/cc17.exe//PE_Patch//UPack
已删除：木马程序 Trojan-Spy.Win32.Delf.cva 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/ck3.jpg.exe//UPX
已删除：木马程序 Trojan-Spy.Win32.Delf.cuz 文件: C:\Documents and Settings\zhb\桌面\Temp.rar/sa.jpg.exe//UPX

卡巴斯基7.0.1.325，数据库是7月1日4：59分

显示全部楼层 · 发表于 2008-7-1 12:28:01

arps.exe : TR/Spy.XWG.1

其他的没哟报警

[病毒样本] 刚收集的几个

26/7

今天更新了4个

本帖子中包含更多资源

本帖子中包含更多资源