查看: 1639|回复: 8
收起左侧

[病毒样本] 下载物*31

[复制链接]
IllusionWing
发表于 2008-7-27 14:48:48 | 显示全部楼层 |阅读模式
卡巴 31
UG (WITHOUT KPS) 25
UG (WITH KPS) 31
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhw 文件: F:\Downloads\Wallpaper2\laco31.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco1.exe//PE_Patch//UPack
检测到:木马程序 Trojan.Win32.Agent.udd 文件: F:\Downloads\Wallpaper2\laco2.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: F:\Downloads\Wallpaper2\laco3.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco4.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco5.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: F:\Downloads\Wallpaper2\laco6.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco7.exe//PE_Patch//UPack
检测到:木马程序 Trojan-PSW.Win32.OnLineGames.ryhe 文件: F:\Downloads\Wallpaper2\laco8.exe//PE_Patch//UPack
检测到:木马程序 Trojan.Win32.Delf.dox 文件: F:\Downloads\Wallpaper2\laco9.exe//UPX
检测到:木马程序 Trojan.Win32.Agent.sav 文件: F:\Downloads\Wallpaper2\laco10.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco11.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco12.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: F:\Downloads\Wallpaper2\laco13.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco14.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco15.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco16.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: F:\Downloads\Wallpaper2\laco17.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhw 文件: F:\Downloads\Wallpaper2\laco18.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco19.exe//PE_Patch//UPack
检测到:木马程序 Trojan-PSW.Win32.OnLineGames.ryhe 文件: F:\Downloads\Wallpaper2\laco20.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco21.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: F:\Downloads\Wallpaper2\laco22.exe//PE_Patch.UPX//UPX
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco23.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco24.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: F:\Downloads\Wallpaper2\laco25.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sazg 文件: F:\Downloads\Wallpaper2\laco26.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.skmc 文件: F:\Downloads\Wallpaper2\laco27.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.sjtz 文件: F:\Downloads\Wallpaper2\laco28.exe//#
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: F:\Downloads\Wallpaper2\laco29.exe//PE_Patch//UPack
检测到:木马程序 Trojan-GameThief.Win32.OnLineGames.shhw 文件: F:\Downloads\Wallpaper2\laco30.exe//PE_Patch.UPX//UPX

[ 本帖最后由 gankeyu 于 2008-7-27 14:50 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2008-7-27 14:50:00 | 显示全部楼层

31


C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco1.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco10.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco11.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco12.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco13.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco14.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco15.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco16.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco17.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco18.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco19.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco2.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco20.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco21.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco22.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco23.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco24.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco25.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco27.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco28.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco29.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco3.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco30.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco31.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco4.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco5.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco6.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco7.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco8.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Users\Administrator\Desktop\Wallpaper2.rar » RAR » laco9.exe - probably unknown NewHeur_PE virus
dadingdading
发表于 2008-7-27 14:52:16 | 显示全部楼层
kv   30 个  
醉一生爱妍
发表于 2008-7-27 14:52:16 | 显示全部楼层
UGuard 完成了在 C:\Documents and Settings\Administrator\桌面\Wallpaper2 上的扫描。
================
'SL.Trojan.23558' 在 'laco1.exe' 中被检测到。
'SL.Trojan.2867' 在 'laco10.exe' 中被检测到。
'SL.Trojan.24566' 在 'laco11.exe' 中被检测到。
'SL.Trojan.12569' 在 'laco12.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco13.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco14.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco15.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco16.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco17.exe' 中被检测到。
'SL.Trojan.3516' 在 'laco18.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco19.exe' 中被检测到。
'SL.Trojan.15574' 在 'laco2.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco20.exe' 中被检测到。
'SL.Trojan.14220' 在 'laco21.exe' 中被检测到。
'SL.Trojan.14220' 在 'laco22.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco23.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco24.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco25.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco26.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco27.exe' 中被检测到。
'SL.Trojan.7063' 在 'laco28.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco29.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco3.exe' 中被检测到。
'SL.Trojan.8121' 在 'laco30.exe' 中被检测到。
'SL.Trojan.652' 在 'laco31.exe' 中被检测到。
'SL.Trojan.28295' 在 'laco4.exe' 中被检测到。
'SL.Trojan.8860' 在 'laco5.exe' 中被检测到。
'SL.Trojan.20319' 在 'laco6.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco7.exe' 中被检测到。
'SL.Trojan.23558' 在 'laco8.exe' 中被检测到。
================
扫描文件数: 31
本次扫描发现了 30 个已知威胁,请及时处理。
实际文件数: 31
扫描时间: 0-00-00 00:00:01:0453
威胁比率: 96.77%
残缺的唯美
发表于 2008-7-27 14:52:29 | 显示全部楼层
Date and Time,Risk,Action,Filename,Risk Type,Original Location,Computer,User,Status,Current Location,Primary Action,Secondary Action,Logged By,Action Description
2008/7/27 14:51:26,Multiple Risks,Quarantined,Wallpaper2.rar,Compressed file,d:\Users\ekincheng\Desktop\,EKINCHENG-PC,ekincheng,Still contains 31 infected items,Quarantine,Quarantine,Leave alone (log only),Manual scan,The file was quarantined successfully.
2008/7/27 14:51:26,Trojan Horse,Quarantined,laco9.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco8.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco7.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco6.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco5.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco4.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco31.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco30.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:25,Infostealer.Gampass,Quarantined,laco3.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco29.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco28.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco27.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco26.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco25.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco24.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco23.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco22.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco21.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:24,Infostealer.Gampass,Quarantined,laco20.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco2.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco19.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco18.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco17.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco16.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco15.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco14.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco13.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco12.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco11.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco10.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
2008/7/27 14:51:23,Infostealer.Gampass,Quarantined,laco1.exe,File; Compressed file,d:\Users\ekincheng\Desktop\Wallpaper2.rar,EKINCHENG-PC,ekincheng,Infected,Quarantine,Clean security risk,Quarantine,Manual scan,The file was quarantined successfully.
电影结束了
发表于 2008-7-27 14:58:19 | 显示全部楼层
扫描系统区域...
扫描所选择的目录和文件...
对象: laco1.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco10.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan.Win32.Agent.sav (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco11.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.YER (BD 引擎)
对象: laco12.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco13.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sjxn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco14.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco15.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco16.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco17.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sjxn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco18.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhw (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco19.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco2.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan.Win32.Agent.udd (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco20.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.ryhe (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco21.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco22.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco23.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco24.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco25.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sjxn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco26.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sazg (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco27.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.skmc (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco29.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco3.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sjxn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco30.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhw (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco31.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhw (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco4.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco5.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.shhv (KAV 引擎), Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: laco6.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.sjxn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco7.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco8.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.ryhe (KAV 引擎), Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: laco9.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan.Win32.Delf.dox (KAV 引擎), BehavesLike:Trojan.UserStartup (BD 引擎)
对象: laco28.exe
        在压缩档案里: F:\virus\vir\Wallpaper2.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: Wallpaper2.rar
        路径: F:\virus\vir
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.siyn (9x), Trojan.Win32.Agent.sav, Trojan-GameThief.Win32.OnLineGames.shhv (6x), Trojan-GameThief.Win32.OnLineGames.sjxn (5x), Trojan-GameThief.Win32.OnLineGames.shhw (3x), Trojan.Win32.Agent.udd, Trojan-PSW.Win32.OnLineGames.ryhe (2x), Trojan-GameThief.Win32.OnLineGames.sazg, Trojan-GameThief.Win32.OnLineGames.skmc, Trojan.Win32.Delf.dox (KAV 引擎), Trojan.PWS.OnlineGames.YZL (18x), Trojan.PWS.OnlineGames.ZAY (11x), Trojan.PWS.YER, BehavesLike:Trojan.UserStartup (BD 引擎)
扫描完成: 2008-7-27 14:57
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件
testhawk
发表于 2008-7-27 14:59:16 | 显示全部楼层
果然太老就是不行啊

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Palkia
发表于 2008-7-27 15:00:04 | 显示全部楼层

31

C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco1.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco10.exe        Trojan.Agent.sav.zgcj        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco11.exe        Trojan.Cap87205.rheq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco12.exe        Trojan.Cap872416.yxsd        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco13.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco14.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco15.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco16.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco17.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco18.exe        Trojan.Cap872423.tkdj        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco19.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco2.exe        Trojan.Cap871823.lvqi        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco20.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco21.exe        Trojan.Cap872416.tzbh        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco22.exe        Trojan.Cap872416.tzbh        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco23.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco24.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco25.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco26.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco27.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco28.exe        Trojan.Cap872416.yquv        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco29.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco3.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco30.exe        Trojan.Cap872416.yfvi        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco31.exe        Trojan.Cap872121.yrqy        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco4.exe        Trojan.Cap872216.zlcb        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco5.exe        Trojan.Cap872023.psvk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco6.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco7.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco8.exe        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Wallpaper2.rar>>laco9.exe        Trojan.Cap87242.zivu        木马        还未处理
Kitman
发表于 2008-7-27 15:51:25 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\Administrator\桌面\Wallpaper2'
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef294e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco10.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944baaf.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco11.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Agent.ugd.7 Trojan
    [NOTE]      A backup was created as '48ef2950.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco12.exe
      [DETECTION] Is the TR/PSW.OnLineGa.aqq Trojan
    [NOTE]      A backup was created as '4944bab1.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco13.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2952.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco14.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef294f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco15.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco16.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2951.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco17.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab2.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco18.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2953.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco19.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab4.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco2.exe
      [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
    [NOTE]      A backup was created as '48ef2955.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco20.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco21.exe
      [DETECTION] Is the TR/Spy.Agent.dhh Trojan
    [NOTE]      A backup was created as '48ef2954.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco22.exe
      [DETECTION] Is the TR/Spy.Agent.dhh Trojan
    [NOTE]      A backup was created as '4944bab5.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco23.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2956.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco24.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco25.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2958.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco26.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco27.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2957.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco28.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab8.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco29.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef2959.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco3.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944baba.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco30.exe
      [DETECTION] Is the TR/PSW.Online.tdz Trojan
    [NOTE]      A backup was created as '48ef295b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco31.exe
      [DETECTION] Is the TR/PSW.Online.tdy Trojan
    [NOTE]      A backup was created as '4944babc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco4.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Agent.vro.3 Trojan
    [NOTE]      A backup was created as '48ef295d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco5.exe
      [DETECTION] Is the TR/PSW.Online.bin Trojan
    [NOTE]      A backup was created as '4944babe.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco6.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944bab9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco7.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef295a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco8.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944babb.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\Wallpaper2\laco9.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48ef295c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年7月27日  15:51
Used time: 00:06 Minute(s)

The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
     31 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     31 files were deleted
      0 files were repaired
     31 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     31 Notes
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-8 07:52 , Processed in 0.130987 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表