发一包病毒样本

qpqp4

扫描路径] C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar
>>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\cmdsame.exe 已被病毒感染 ：  Trojan.PWS.Gamania.16325
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\sh17027.exe 已被病毒感染 ：  Trojan.Spambot.3991
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\E.tmp 已被病毒感染 ：  Trojan.PWS.Gamania.16319
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\14.tmp 已被病毒感染 ：  Trojan.PWS.Wsgame.8563
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\16.tmp 已被病毒感染 ：  Trojan.PWS.Wsgame.origin
>>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\34A25F04.dll 已被病毒感染 ：  Trojan.PWS.Wsgame.9015
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\6.tmp 已被病毒感染 ：  Trojan.PWS.Wsgame.8953
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\8.tmp 已被病毒感染 ：  Trojan.PWS.Shitao
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\A.tmp 已被病毒感染 ：  Trojan.PWS.Wsgame.8554
>C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar\新建文件夹\C.tmp 已被病毒感染 ：  Trojan.PWS.Brauz.5
C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar - 发现压缩文件中有被感染的对象
C:\Documents and Settings\Administrator.XPSTONE-PC1\桌面\新建文件夹.rar:Zone.Identifier - 确定

神武军师

费尔发现10个

飘渺虚无

我开了BD的http监控

[size=1.5em]BitDefender 2009
This web page has been blocked by BitDefender Antivirus Real-time Protection!
The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

zder

2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\cmdsame.exe" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\sh17027.exe\[Embedded_I#0800]" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\E.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\14.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\16.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\34A25F04.dll\[Upack]" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\6.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\8.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\A.tmp" file.  
2008-11-26 16:28:39        CrowZ        2648        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\Tmp\新建文件夹.rar\新建文件夹\C.tmp" file.  


-.-小A

BING126

McAfee  全灭。。

14.tmp              ws-mmorpg.gen             
16.tmp              pws-onlinegames.co         
34a25f04.dll       pws-onlinegames.s          
6.tmp                pws-onlinegames.co         
8.tmp                pws-onlinegames.o          
a.tmp                pws-mmorpg.gen             
c.tmp                pws-onlinegames.co       
cmdsame.exe     generic pws.y             
e.tmp                pws-onlinegames.co        
sh17027.exe       generic dropper     

laolaoliu

gtljixie

小A不让下，关了监控下载了全部干掉了