流行網馬生成物2

haol

drweb found 20 threats
http://www.vdisk.cn/down/index/3619822A1328

schumi小粉

C:\Documents and Settings\Administrator\桌面\新建文件夹\02\AsyncMa0.#ys - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\comres.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\customsat.#ll - Win32/BHO.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\dhDhwS7fFW.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\dsad11_0.#xe - Win32/PSW.OnLineGames.OKB 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\E4814792.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\E4kaa97Nsz8WJ9UV.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\ed78ab90.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\extext15679840.#xe - Win32/TrojanDownloader.Agent.OZH 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\func.#ll - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\fyrwJf5Qfh0.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\hNdcS96gQxD0.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\iygce__0.#ys - Win32/Koutodoor.CG 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\JPccCJnKygDdp3.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\kSVHjMeWr5ZZY47.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > Entries.bin - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > Strings.txt - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > script.nsi - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > System.dll - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > 64.exe - 可能是 Win32/Adware.Cinmus 应用程序 的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\MbsV2QQJ0.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\MSGSCR.#LB - Win32/BHO.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\msmsgs.#ll - Win32/BHO.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\ndxq9awMc.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 扫描完成后再选择处理方式
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\comres.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\customsat.#ll - Win32/BHO.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\dhDhwS7fFW.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\dsad11_0.#xe - Win32/PSW.OnLineGames.OKB 特洛伊木马 的变种 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\E4814792.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\E4kaa97Nsz8WJ9UV.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\ed78ab90.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\extext15679840.#xe - Win32/TrojanDownloader.Agent.OZH 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\fyrwJf5Qfh0.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\hNdcS96gQxD0.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\iygce__0.#ys - Win32/Koutodoor.CG 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\JPccCJnKygDdp3.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\kSVHjMeWr5ZZY47.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > Entries.bin - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > Strings.txt - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > script.nsi - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > System.dll - 正常
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\lc[1]__0.#xe > NSIS > 64.exe - 可能是 Win32/Adware.Cinmus 应用程序 的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\MbsV2QQJ0.#on - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\MSGSCR.#LB - Win32/BHO.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\msmsgs.#ll - Win32/BHO.NRD 特洛伊木马 - 已删除 - 已隔离
C:\Documents and Settings\Administrator\桌面\新建文件夹\02\ndxq9awMc.#ll - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 已删除 - 已隔离

hddu

失落的手链

瑞星2010

kingmuro

信息        2009-08-08  09:43:06        本次扫描文件总数:31,发现病毒数:19,清除病毒数:19                       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\iygce__0.#ys        Win32.Troj.Eglnk.28128        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\AsyncMa0.#ys        Win32.Hack.Rootkit.4715        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\lc[1]__0.#xe        压缩包病毒        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\extext15679840.#xe        Win32.Troj.Agent.av.12288        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\MbsV2QQJ0.#on        Win32.PSWTroj.Magania.16975        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\fyrwJf5Qfh0.#on        Win32.Troj.GameOLT.zg.61529        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\E4kaa97Nsz8WJ9UV.#on        Win32.Troj.GameOLT.zg.61529        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\ndxq9awMc.#ll        Win32.Troj.GameOLT.zg.61529        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\msmsgs.#ll        Win32.Troj.AntiAV.265728        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\kSVHjMeWr5ZZY47.#ll        Win32.Troj.GameOLT.zg.61529        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\JPccCJnKygDdp3.#ll        Win32.PSWTroj.Magania.19053        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\hNdcS96gQxD0.#ll        Win32.PSWTroj.Magania.224865        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\func.#ll        Win32.Troj.BmwDown.g.35328        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\ed78ab90.#ll        Win32.Troj.GameCfg.69711        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\E4814792.#ll        Win32.Troj.GameOLT.ct.73816        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\dhDhwS7fFW.#ll        Win32.Troj.OnlineGames.de.69632        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\comres.#ll        Win32.Troj.GameOLT.zg.61529        处理成功（操作：删除）       
病毒        2009-08-08  09:43:05        D:\My Documents\桌面\test\02\MSGSCR.#LB        Win32.Troj.AntiAV.265728        处理成功（操作：删除）       
信息        2009-08-08  09:43:05        扫描病毒木马,清除模式:自动清除

无尽藏海

Scan Stats:
  Scan Time: 7 seconds
  Scan Options:
  Scan Targets: D:\virus\02.zip
  Counts:
   Total items scanned: 21
   - Files & Directories: 21
   - Registry Entries: 0
   - Processes & Start-up Items: 0
   - Network & Browser Items: 0
   - Other: 0
   - Trusted Files: 0
   - Skipped Files: 0

   Total security risks detected: 20
   Total items resolved: 20
   Total items that require attention: 0

Resolved Threats:
Adware.Purityscan
Type: Compressed
Risk: Medium (Medium Stealth, High Removal, Low Performance, Low Privacy)  
Categories: Adware
Status: Fully Resolved
-----------
1 File
[asyncma0.#ys] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[comres.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[customsat.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[dhdhws7ffw.#ll] inside of [d:\virus\02.zip] - Deleted


Packed.Generic.114
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
[dsad11_0.#xe] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[e4814792.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[e4kaa97nsz8wj9uv.#on] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[ed78ab90.#ll] inside of [d:\virus\02.zip] - Deleted


Downloader
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[extext15679840.#xe] inside of [d:\virus\02.zip] - Deleted


Trojan.KillAV
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[func.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[fyrwjf5qfh0.#on] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[hndcs96gqxd0.#ll] inside of [d:\virus\02.zip] - Deleted


Hacktool.Rootkit
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[iygce__0.#ys] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[jpcccjnkygddp3.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[ksvhjmewr5zzy47.#ll] inside of [d:\virus\02.zip] - Deleted


Downloader
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[lc[1]__0.#xe] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[mbsv2qqj0.#on] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[msgscr.#lb] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[msmsgs.#ll] inside of [d:\virus\02.zip] - Deleted


Infostealer.Gampass
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[ndxq9awmc.#ll] inside of [d:\virus\02.zip] - Deleted

幸福的猪猪

Start of the scan: 2009年8月8日  10:03    （miss 1x，to kill）

Starting the file scan:

Begin scan in 'C:\TDDownload\02\AsyncMa0.#ys'
C:\TDDownload\02\AsyncMa0.#ys
    [DETECTION] Is the TR/Rootkit.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\comres.#ll'
C:\TDDownload\02\comres.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\customsat.#ll'
C:\TDDownload\02\customsat.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\dhDhwS7fFW.#ll'
C:\TDDownload\02\dhDhwS7fFW.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\dsad11_0.#xe'
C:\TDDownload\02\dsad11_0.#xe
    [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\E4kaa97Nsz8WJ9UV.#on'
C:\TDDownload\02\E4kaa97Nsz8WJ9UV.#on
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\E4814792.#ll'
C:\TDDownload\02\E4814792.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\ed78ab90.#ll'
C:\TDDownload\02\ed78ab90.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\extext15679840.#xe'
C:\TDDownload\02\extext15679840.#xe
    [DETECTION] Is the TR/Dldr.Geral.Aot.2 Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\func.#ll'
C:\TDDownload\02\func.#ll
  [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/AVShoot.M Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\fyrwJf5Qfh0.#on'
C:\TDDownload\02\fyrwJf5Qfh0.#on
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\hNdcS96gQxD0.#ll'
C:\TDDownload\02\hNdcS96gQxD0.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\iygce__0.#ys'
Begin scan in 'C:\TDDownload\02\JPccCJnKygDdp3.#ll'
C:\TDDownload\02\JPccCJnKygDdp3.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\kSVHjMeWr5ZZY47.#ll'
C:\TDDownload\02\kSVHjMeWr5ZZY47.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\lc[1]__0.#xe'
C:\TDDownload\02\lc[1]__0.#xe
    [DETECTION] Contains recognition pattern of the DR/Dldr.Agent.cidg dropper
    --> ProgramFilesDir/64.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\MbsV2QQJ0.#on'
C:\TDDownload\02\MbsV2QQJ0.#on
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\MSGSCR.#LB'
C:\TDDownload\02\MSGSCR.#LB
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\msmsgs.#ll'
C:\TDDownload\02\msmsgs.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'C:\TDDownload\02\ndxq9awMc.#ll'
C:\TDDownload\02\ndxq9awMc.#ll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年8月8日  10:03
Used time: 00:12 Minute(s)

The scan has been done completely.

      0 Scanned directories
     22 Files were scanned
     20 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     19 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
     19 Notes

lingbo110120

又没有我什么事了

luxiao200888

mpav kill all

失去翅膀

AVG   直接拦截咔嚓