20080717test

jxlpn

taihuxian

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         http://bbs.kafan.cn/attachment.p ... ef&t=1216292875
Information:         Is the Trojan horse TR/Spy.Gen


Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.1.9, VDF 7.0.5.130

sam.to

已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.fgn        檔案: C:\Documents and Settings\kato9096\桌面\10.rar/00143817_Zephpwwp.dll
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sdis        檔案: C:\Documents and Settings\kato9096\桌面\10.rar/00143566_Wulinlw.dll//UPX


上报5个给卡巴

woai_jolin

2008-7-17 19:13:52        Kernel        File  'G:\v\10.rar' was sent to ESET for analysis.

Kitman

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\10'
C:\Documents and Settings\Administrator\桌面\10\00143566_Wulinlw.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48b02afb.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\10\00143817_Zephpwwp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '49194d14.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\10\00143981_Apsgejba.dll
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      A backup was created as '48b02afd.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\10\00143987_Kxmfkqgoca.dll
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [NOTE]      A backup was created as '49194d16.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\10\00144451_Svchost.exe
      [DETECTION] Is the Trojan horse TR/Patched.UT
      [NOTE]      A backup was created as '48b02aff.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!


End of the scan: 2008年7月17日  19:19
Used time: 00:03 min

The scan has been done completely.

      1 Scanning directories
      7 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      5 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

Filename	Result
00143854_Keywatch.dll	MALWARE

The file '00143854_Keywatch.dll' has been determined to be 'MALWARE'.
Our analysts named the threat ADSPY/Bho.das.The term "ADSPY/" denotes adware or spyware. This type of malware isable to change browser settings for example by manipulating registrysettings or byusing of NTFS-streams. Very often IEexploits are used to manipulate thebrowserhelp.dll.Detection will be added to our virus definition file (VDF) with one of the next updates.

Filename	Result
0014678E_Vaxruiez.dll	MALWARE

The file '0014678E_Vaxruiez.dll' has been determined to be 'MALWARE'.
Our analysts named the threat RKit/HideProc.M.The term ?RKIT/? denotes a piece of software that uses cloakingtechniques to hide itself from view. Therefore it has to be categorizedas potentially malicious.Detection will be added to our virus definition file (VDF) with one of the next updates.

[ 本帖最后由 Kitman 于 2008-7-17 23:35 编辑 ]

电影结束了

对象: 00143566_Wulinlw.dll
        路径: F:\virus\vir
        Status: 病毒文件已删除
        病毒: Trojan-GameThief.Win32.OnLineGames.sdis (KAV 引擎)
对象: 00143817_Zephpwwp.dll
        路径: F:\virus\vir
        Status: 病毒文件已删除
        病毒: Backdoor.Win32.PcClient.fgn (KAV 引擎)
对象: 00143987_Kxmfkqgoca.dll
        路径: F:\virus\vir
        Status: 病毒文件已删除
        病毒: Trojan.Generic.339272 (BD 引擎)

阴天不下雨

瑞星病毒查杀结果报告
清除病毒种类列表：
病毒： Backdoor.Win32.PcClient.elc
病毒： Trojan.DL.Win32.Mnless.and
病毒： Trojan.PSW.Win32.GameOL.okv
病毒： AdWare.Win32.Agent.bwi   
病毒： Trojan.Win32.Loader.b   
病毒： RootKit.Win32.Agent.bdn  
病毒： Trojan.PSW.Win32.GameOL.ogn
软件版本：20.53.31

平淡

C:\Documents and Settings\Administrator\桌面\10.rar>>00143566_Wulinlw.dll        TrojanPSW.GamePass.Gen.ewit.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\10.rar>>00143981_Apsgejba.dll>>emb-1.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\10.rar>>00143987_Kxmfkqgoca.dll        TrojanDownloader.Agent.yip.zenb.dll        木马        还未处理

barbara

avast! delete 了4个

ssy275

3