[病毒样本] 18x

显示全部楼层 · 发表于 2008-10-25 21:03:30

来源 http://bbs.kafan.cn/thread-355081-1-1.html
貌似比较新..

G:\Security\Scan\01.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)
G:\Security\Scan\02.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)
G:\Security\Scan\07.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)
G:\Security\Scan\07.exe\[Embedded#2814] [L] Win32:Spyware-gen [Trj] (0)
G:\Security\Scan\11.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)
G:\Security\Scan\11.exe\[Embedded#2850] [L] Win32:Spyware-gen [Trj] (0)
G:\Security\Scan\12.exe [L] Win32:Trojan-gen {Other} (0)
G:\Security\Scan\13.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)
G:\Security\Scan\13.exe\[Embedded#282c] [L] Win32:Spyware-gen [Trj] (0)
G:\Security\Scan\14.exe\[Upack]\[Embedded#6060] [L] Win32:Rootkit-gen [Rtk] (0)

avast!=7

显示全部楼层 · 发表于 2008-10-25 21:05:05

kaspersky kill all

显示全部楼层 · 发表于 2008-10-25 21:07:36

对象: 01.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)
对象: 02.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)
对象: 07.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)
对象: 11.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)
对象: 12.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.Generic.833942 (BD 引擎)
对象: 13.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)
对象: 14.exe
路径: E:\Scan
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AABO (BD 引擎)

显示全部楼层 · 发表于 2008-10-25 21:13:17

Scan Stats:
  Scan Time: 3 seconds
  Scan Options:
  Scan Targets: D:\Virus\Scan\Scan.zip
  Counts:
Total items scanned: 19
- Files & Directories: 19
- Registry Entries: 0
- Processes & Start-up Items: 0
- Network & Browser Items: 0
- Other: 0
- Trusted Files: 0
- Skipped Files: 0

Total security risks detected: 18
Total items resolved: 18
Total items that require attention: 0

显示全部楼层 · 发表于 2008-10-25 21:13:35

kv 18个貌似成绩还不错哦

显示全部楼层 · 发表于 2008-10-25 21:14:37

mcafee8.7拒绝下载

显示全部楼层 · 发表于 2008-10-25 21:17:30

2008-10-25 21:18:24 Real-time file system protection file G:\v\Scan\18.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:24 Real-time file system protection file G:\v\Scan\17.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:23 Real-time file system protection file G:\v\Scan\16.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:23 Real-time file system protection file G:\v\Scan\15.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:22 Real-time file system protection file G:\v\Scan\14.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:22 Real-time file system protection file G:\v\Scan\13.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:22 Real-time file system protection file G:\v\Scan\11.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:21 Real-time file system protection file G:\v\Scan\10.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:21 Real-time file system protection file G:\v\Scan\09.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:20 Real-time file system protection file G:\v\Scan\08.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:20 Real-time file system protection file G:\v\Scan\07.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:20 Real-time file system protection file G:\v\Scan\06.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:19 Real-time file system protection file G:\v\Scan\05.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:19 Real-time file system protection file G:\v\Scan\04.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:19 Real-time file system protection file G:\v\Scan\03.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:18 Real-time file system protection file G:\v\Scan\02.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-10-25 21:18:18 Real-time file system protection file G:\v\Scan\01.exe a variant of Win32/PSW.OnLineGames.NRD trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

显示全部楼层 · 发表于 2008-10-25 21:37:22

显示全部楼层 · 发表于 2008-10-25 21:46:31

金山清空

显示全部楼层 · 发表于 2008-10-25 21:49:53

Start of the scan: 2008年10月25日星期六  21:49

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Scan'
C:\Documents and Settings\Administrator\桌面\Scan\Scan\01.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49312418.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\02.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49312419.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\03.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241a.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\04.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241b.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\05.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241c.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\06.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241d.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\07.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241e.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\08.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '4931241f.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\09.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49312420.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\10.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49312417.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\11.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05f9.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\12.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Thief.Wow.cgw Trojan
[NOTE]    A backup was created as '48ba05fb.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\13.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05fc.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\14.exe
[0] Archive type: OVL
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.Magania.ahzn Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05fd.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\15.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05fe.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\16.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05ff.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\17.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05c0.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\Scan\Scan\18.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48ba05c1.qua'  ( QUARANTINE )
[NOTE]    The file was successfully wiped!
[NOTE]    The file was deleted!

End of the scan: 2008年10月25日星期六  21:49
Used time: 00:05 Minute(s)

The scan has been done completely.

   2 Scanning directories
   18 Files were scanned
   24 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   18 files were deleted
   0 files were repaired
   18 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -6 Files not concerned
   0 Archives were scanned
   0 Warnings
   18 Notes

[病毒样本] 18x

本帖子中包含更多资源

光了

本帖子中包含更多资源

本帖子中包含更多资源

pass one

本帖子中包含更多资源