低质量x29

显示全部楼层 · 发表于 2009-2-4 11:05:40

原帖由 fatezero 于 2009-2-4 09:32 发表
病毒名
456690

.....

显示全部楼层 · 发表于 2009-2-4 11:09:33

http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 multiple threats deleted (after the next restart) - quarantined
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw01.exe a variant of Win32/TrojanDropper.Agent.NPO trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw02.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw03.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw04.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw05.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw06.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw07.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw08.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw09.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw10.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw11.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw12.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw13.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw14.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw15.exe probably a variant of Win32/PSW.OnLineGames.NTP trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw16.exe Win32/TrojanDropper.Agent.NPO trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw17.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw18.exe a variant of Win32/PSW.OnLineGames.NTM trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw19.exe a variant of Win32/TrojanDropper.Agent.NPO trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw20.exe Win32/Rootkit.Agent.NIU trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw21.exe a variant of Win32/PSW.WOW.DZI trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw22.exe Win32/Rootkit.Agent.NIU trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw23.exe is OK
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw24.exe is OK
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw25.exe Win32/Rootkit.Agent.NIU trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw26.exe Win32/PSW.Delf.NLZ trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » cw27.exe a variant of Win32/PSW.Legendmir.NGG trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » csrss.dll Win32/PSW.OnLineGames.NRW trojan was a part of the deleted object
http://bbs.kafan.cn/attachment.p ... bf&t=1233716903 » RAR » jiocs.dll Win32/Agent.OGF trojan was a part of the deleted object

显示全部楼层 · 发表于 2009-2-4 11:10:50

楼主,kl有回信嗎???

显示全部楼层 · 发表于 2009-2-4 12:36:54

C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>csrss.dll TrojanGameThief.OnLineGames.bkri.avut.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw01.exe Trojan.Inject.nry.cmfv 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw02.exe Trojan.Cap911722.twvw 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw03.exe Trojan.Cap911722.ysqq 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw04.exe Trojan.Cap92312.sqiw 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw05.exe Trojan.Cap92312.gtol 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw06.exe Trojan.Cap92312.wzqf 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw07.exe Trojan.Cap92312.bivl 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw08.exe Trojan.Cap92312.aaaf 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw09.exe Worm.Downloader.zd.ywnn 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw10.exe Trojan.Cap92312.reiu 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw11.exe Trojan.Cap91282.wyjw 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw12.exe Trojan.Cap92320.pqpu 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw13.exe Trojan.Cap92312.ptqf 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw14.exe Trojan.Cap92312.dekn 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw15.exe Trojan.Cap9242.zjtk 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw16.exe TrojanGameThief.OnLineGames.ufmu.dgjp 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw17.exe Trojan.Cap92312.lyjt 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw18.exe Trojan.Cap92312.ccfh 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw19.exe TrojanGameThief.OnLineGames.ufmu.yzsm 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw20.exe Trojan.OnLineGames.gen.a 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw21.exe Trojan.Cap92312.iogy 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw22.exe Trojan.OnLineGames.gen.a 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw23.exe Trojan.OnLineGames.gen.a 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw24.exe Trojan.OnLineGames.gen.a 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw25.exe Trojan.OnLineGames.gen.a 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw26.exe Trojan.Cap912516.fkfo 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>cw27.exe TrojanDownloader.Nurech.bd.bmqk 木马还未处理
C:\Documents and Settings\Administrator\桌面\DefaultBox.rar>>jiocs.dll Trojan.AntiAV.yd.ulme.dll 木马还未处理

ALL KILL

显示全部楼层 · 发表于 2009-2-4 15:52:46

AVG竟kill了30个

显示全部楼层 · 发表于 2009-2-4 16:59:27

红伞全秒

显示全部楼层 · 发表于 2009-2-4 18:09:31

扫描系统区域...
扫描所选择的目录和文件...
对象: jiocs.dll
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.AntiAV.yd (KAV 引擎), Trojan.Inject.SJ (BD 引擎)
对象: csrss.dll
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.bkri (KAV 引擎), Trojan.IFrame.FW (BD 引擎)
对象: cw01.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Inject.nry (KAV 引擎), Trojan.PWS.OnlineGames.AAGG (BD 引擎)
对象: cw02.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.zd (KAV 引擎), Trojan.PWS.OnLineGames.AAKZ (BD 引擎)
对象: cw03.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.zd (KAV 引擎), Trojan.PWS.OnLineGames.AAKZ (BD 引擎)
对象: cw04.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw05.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw06.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw07.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw08.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw09.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.zd (KAV 引擎), Trojan.PWS.OnLineGames.AAKZ (BD 引擎)
对象: cw10.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw11.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.zx (KAV 引擎), Trojan.Generic.1393932 (BD 引擎)
对象: cw12.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw13.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw14.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw15.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-Dropper.Win32.Agent.agie (KAV 引擎)
对象: cw16.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.ufmu (KAV 引擎), Trojan.PWS.OnlineGames.AAGG (BD 引擎)
对象: cw17.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw18.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Worm.Win32.Downloader.aao (KAV 引擎), Trojan.Downloader.JLPM (BD 引擎)
对象: cw19.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.ufmu (KAV 引擎), Trojan.PWS.OnlineGames.AAGG (BD 引擎)
对象: cw20.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Agent.blsg (KAV 引擎)
对象: cw21.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.WOW.eyn (KAV 引擎), DeepScan:Generic.PWS.WoW.6F16F4FC (BD 引擎)
对象: cw22.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Agent.blty (KAV 引擎)
对象: cw23.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Agent.bodz (KAV 引擎)
对象: cw24.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Agent.bnzp (KAV 引擎)
对象: cw25.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan.Win32.Agent.bobl (KAV 引擎)
对象: cw26.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.Lmir.cku (KAV 引擎), Generic.PWStealer.ECD4E903 (BD 引擎)
对象: cw27.exe
路径: E:\收集区
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.bkpp (KAV 引擎), Trojan.PWS.OnlineGames.AAJL (BD 引擎)
扫描完成: 2009-2-4 18:10
已检查 29 个文件
已发现 29 个染毒文件
发现 0 个可疑文件

显示全部楼层 · 发表于 2009-2-4 18:11:48

2009-2-4 18:11:24 1233742284 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\csrss.dll\[Embedded_I#2c60]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw01.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw02.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw03.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw04.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw05.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw06.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw07.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw08.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw09.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw10.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw11.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw12.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw13.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw14.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Spyware-gen [Trj]" has been found in "E:\收集区\cw16.exe\[Upack]\[Embedded_I#3060]\[Embedded_I#2860]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw17.exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "E:\收集区\cw18.exe\[UPX]\[Embedded_R#607c]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw19.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "E:\收集区\cw20.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "E:\收集区\cw22.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "E:\收集区\cw25.exe" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Delf-FZG [Trj]" has been found in "E:\收集区\cw26.exe\[UPX]\[Embedded_R#FILE]" file.
2009-2-4 18:11:37 1233742297 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\cw27.exe" file.
2009-2-4 18:11:38 1233742298 Administrator 1564 Sign of "Win32:Trojan-gen {Other}" has been found in "E:\收集区\jiocs.dll" file.

显示全部楼层 · 发表于 2009-2-4 20:40:43

原帖由 fatezero 于 2009-2-4 09:32 发表
病毒名
456690

你的是汉化版????

显示全部楼层 · 发表于 2009-2-4 23:33:27

DR.WEB一共MISS了6個
掃描結果於附件

[病毒样本] 低质量x29

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块