33x - [金山江民卡巴打了很多酱油]

嘁。不稀罕~

。。。ESET的粉丝看不看回帖，一个成绩是要贴几遍才罢休？！

tanlimo

3楼是4.0我用的是3.0，不算重复。

qwer9909

*** Possible virus found ***
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/cb.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/cqsj.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/cqwz.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/dh3.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/dj.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/dxc.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/fh.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/hx2.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/hxmf.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/jr.exe -> Trojan W32/OnLineGames.CFMO ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/jxsj.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/jz.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/kdxy.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/mh.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/my.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/qq.exe -> Trojan W32/QQPass.LOZ ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/qqhuaxia.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/qqhx.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/qqsg.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/qqzyhx.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/rxcq.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/rxjh.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/services.exe -> Trojan W32/Packed_FSG.D ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/tl.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/tx2.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/wd.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/wl.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/wmgj.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/wow.exe -> Trojan W32/OnLineGames.CDDA ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/xx.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/zt.exe -> Trojan W32/Packed_Upack.A ()
*** C:\Documents and Settings\Administrator\桌面\MCLS.zip : MCLS/zx.exe -> Trojan W32/Packed_Upack.A ()

Palkia

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.rxi
病毒： Trojan.PSW.Win32.GameOL.rwm
病毒： RootKit.Win32.Undef.xr   
病毒： Trojan.PSW.Win32.QQPass.zhm
病毒： Trojan.Win32.Undef.dxs   
病毒： RootKit.Win32.Undef.ya   

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.71.52

liu5678

MCAFEE杀了32个，剩下的一个在解压的时候被规则DOWN掉了。
说是防止伪装WINDOWS进程。
然后拒绝访问。

Ceker

太行新一代木马阻击软件

http://pccn1st.go.51.net

主动防御

原帖由 will 于 2008-11-22 15:41 发表
有些安全厂商机器人会自动收集卡饭样本区的附件

哇，这么牛B，这么先进

woai_jolin

http://bbs.kafan.cn/attachment.p ... 86&t=1227403024        multiple threats        deleted - quarantined       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/cb.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/cqsj.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/cqwz.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/dh3.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/dj.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/dxc.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/fh.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/hx2.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/hxmf.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/jr.exe        probably a variant of Win32/PSW.OnLineGames.NXI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/jxsj.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/jz.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/kdxy.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/mh.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/my.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/qq.exe        Win32/PSW.Delf.NLZ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/qqhuaxia.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/qqhx.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/qqsg.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/qqzyhx.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/rxcq.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/rxjh.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/services.exe        Win32/TrojanDownloader.Agent.OMQ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/tl.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/tx2.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/wd.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/wl.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/wmgj.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/wow.exe        Win32/PSW.WOW.NFW trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/xx.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/zt.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/zx.exe        a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 86&t=1227403024 » ZIP » MCLS/Nskhelper2.sys        Win32/TrojanDownloader.Agent.OMQ trojan        was a part of the deleted object

hellobaby

蜘蛛漏掉一个：Nskhelper2.sys

fireworld

病毒处理 跟不上吧