virus

显示全部楼层 · 发表于 2009-1-15 10:38:09

virus

显示全部楼层 · 发表于 2009-1-15 10:40:10

都是'TR/Spy.Gen' [trojan]

显示全部楼层 · 发表于 2009-1-15 10:41:03

无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
442466&k=2e3296a643782276d7d080e16e53548
f&t=1231987179

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-PSW.Win32.OnLineGames.aqfs

如有疑问，请联系您的技术支持
创建日期：
Thu Jan 15 10:42:26 2009
Kaspersky Lab

无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
442467&k=fd9e2553b11d300614e62b6b94bf365
b&t=1231987179

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan.Win32.Agent.wax

如有疑问，请联系您的技术支持
创建日期：
Thu Jan 15 10:42:29 2009
Kaspersky Lab

无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
442468&k=928d9b5e6d6c952bcf6bcff5858dbf2
f&t=1231987179

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-PSW.Win32.OnLineGames.arpj

如有疑问，请联系您的技术支持
创建日期：
Thu Jan 15 10:42:28 2009
Kaspersky Lab

显示全部楼层 · 发表于 2009-1-15 11:11:27

C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > winsco.exe - Win32/TrojanDownloader.Delf.NUM 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > update.exe - Win32/TrojanDownloader.Small.ODL 特洛伊木马
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > update[1].exe - Win32/Agent.NYU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > UUSeeMediaCenter.exe - Win32/TrojanDownloader.Small.WGA 特洛伊木马
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > v27.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > u33.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > Uninst.exe - Win32/Adware.Cinmus 应用程序 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > svcos[1].exe - Win32/Agent.NYU 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > t20.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > TASKMAGR.EXE - Win32/Agent.OKM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > TempFile(1).exe - Win32/VB.NQD 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > THERBREKK.EXE - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > tmp75.exe - 可能是 Win32/TrojanDownloader.Small.NZK 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\svcos[1].rar > RAR > u29.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > z12.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > 照片 .exe - Win32/AutoRun.JO 蠕虫的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > winsys.exe - 可能是 Win32/Agent 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > x22.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > XX_545.exe > CAB > 1.exe - Win32/Agent.NIT 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\XX_545.rar > RAR > y5.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > winsco.exe - Win32/TrojanDownloader.Delf.NUM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > update.exe - Win32/TrojanDownloader.Small.ODL 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > update[1].exe - Win32/Agent.NYU 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > UUSeeMediaCenter.exe - Win32/TrojanDownloader.Small.WGA 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\update.rar > RAR > v27.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马的变种 - 是已删除对象的一部分

显示全部楼层 · 发表于 2009-1-15 11:14:38

avast!

显示全部楼层 · 发表于 2009-1-15 11:21:04

原来是木马病毒。

显示全部楼层 · 发表于 2009-1-15 11:51:10

update，费尔不报，微点没反应

显示全部楼层 · 发表于 2009-1-15 17:09:35

Start of the scan: 2009年1月15日  17:04
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\svcos[1].exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '49d1fc80.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\t20.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '499efc3d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\TASKMAGR.EXE
[DETECTION] Is the TR/StartPage.cyk Trojan
[NOTE]    A backup was created as '49c1fc4c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\TempFile(1).exe
[DETECTION] Is the TR/Drop.VB.fhy Trojan
[NOTE]    A backup was created as '49dbfc70.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\THERBREKK.EXE
   [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
[NOTE]    A backup was created as '49b3fc53.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\tmp75.exe
[DETECTION] Is the TR/Inject.HN.1 Trojan
[NOTE]    A backup was created as '49defc79.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\u29.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49a7fc3e.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\u33.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49a1fc3f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\update.exe
   [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    A backup was created as '49d2fc7d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\update[1].exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48ba09d6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\userinit.exe
[DETECTION] Is the TR/Agent.DGH Trojan
[NOTE]    A backup was created as '49d3fc80.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\UUSeeMediaCenter.exe
[DETECTION] Is the TR/Dldr.Agent.rqj Trojan
[NOTE]    A backup was created as '49c1fc62.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\v27.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '49a5fc40.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\winsco.exe
[DETECTION] Is the TR/Crypt.FKM.Gen Trojan
[NOTE]    A backup was created as '49dcfc77.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\winsys.exe
[DETECTION] Is the TR/Agent.swz Trojan
[NOTE]    A backup was created as '48b409d0.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\x22.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '49a0fc41.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\XX_545.exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '49cdfc67.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\y5.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '499cfc44.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\z12.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    A backup was created as '48c809ea.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\***\桌面\文件\照片                                     .exe
[DETECTION] Is the TR/Crypt.CFI.Gen Trojan
[NOTE]    A backup was created as '498f6e57.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2009年1月15日  17:04
Used time: 00:10 Minute(s)

The scan has been done completely.

   1 Scanning directories
   22 Files were scanned
   20 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   20 files were deleted
   0 files were repaired
   20 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   0 Warnings
   20 Notes-----------------------------------------------------红伞S版(库V7.01.01.118)杀。

------------------------------------------------------------------------------------------------------------------
剩1个to Avira。
回复：
File ID Filename Size (Byte) Result
3793948 Uninst.exe 32.28 KB CLEAN

干净。

显示全部楼层 · 发表于 2009-1-15 23:09:34

Miss 2,To KL

显示全部楼层 · 发表于 2009-1-16 09:38:58

啓發

[病毒样本] virus

本帖子中包含更多资源

本帖子中包含更多资源

回复 2楼 saga3721 的帖子

浏览过的版块