生成物

Palkia

25x Rising killed 21x




查询编号：RS20090808174024875565
文件名称：新建文件夹.rar
文件MD5：616319469B7305E011E1F70240C28A7B
文件状态：分析中

[ 本帖最后由 Palkia 于 2009-8-8 17:57 编辑 ]

kingmuro

信息        2009-08-08  18:00:27        本次扫描文件总数:34,发现病毒数:7,清除病毒数:7                       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\keepSafe23.exe        Win32.Troj.KillAVT.fg.176128        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\keepSafe2.exe        Win32.Troj.Agent.ks.126976        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\GJJJ1657894.DLL        Win32.Troj.OnlineGameT.78048        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\csrss.exe        Win32.TrojDownloader.VB.20480        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\1.pif        Win32.Hack.UpackT.a.15981        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\XPTCN54RYTG.DLL        Win32.Troj.OnlineGameT.78048        处理成功（操作：删除）       
病毒        2009-08-08  18:00:26        D:\My Documents\桌面\test\新建文件夹\wlwszx.dll        Win32.Troj.OnlineGameT.78048        处理成功（操作：删除）       
信息        2009-08-08  18:00:26        扫描病毒木马,清除模式:自动清除

Palkia

极速版的

asd8010553

miss3个

尤金卡巴斯基

2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.oua        G:\Temp\Virus\新建文件夹.rar/msepion.sys               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.Small.jtu        G:\Temp\Virus\新建文件夹.rar/VSD7rfyh.jpg               
2009/8/8 18:17:20        已清除        木马程序 Trojan-PSW.Win32.Delf.cxo        G:\Temp\Virus\新建文件夹.rar/wlwszx.dll               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Dropper.Win32.Agent.ymn        G:\Temp\Virus\新建文件夹.rar/WOWSERVER.EXE               
2009/8/8 18:17:20        已清除        木马程序 Trojan-PSW.Win32.Delf.clm        G:\Temp\Virus\新建文件夹.rar/XPTCN54RYTG.DLL               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.yzt        G:\Temp\Virus\新建文件夹.rar/1.pif//PE_Patch//UPack               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.yzt        G:\Temp\Virus\新建文件夹.rar/1.pif//PE_Patch               
2009/8/8 18:17:20        已清除        木马程序 Trojan-PSW.Win32.QQPass.ig        G:\Temp\Virus\新建文件夹.rar/1121160224               
2009/8/8 18:17:20        已清除        木马程序 Trojan-PSW.Win32.Agent.mqp        G:\Temp\Virus\新建文件夹.rar/cqjhcq.dll               
2009/8/8 18:17:20        已清除        木马程序 Trojan-PSW.Win32.Agent.mqt        G:\Temp\Virus\新建文件夹.rar/CQNNH34TER.DLL               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.VB.ned        G:\Temp\Virus\新建文件夹.rar/csrss.exe//FSG               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.Small.jtu        G:\Temp\Virus\新建文件夹.rar/ErO0xDQN.jpg               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.Magania.ajiu        G:\Temp\Virus\新建文件夹.rar/event32.dll               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.urlq        G:\Temp\Virus\新建文件夹.rar/GJJJ1657894.DLL//UPack               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.ekm        G:\Temp\Virus\新建文件夹.rar/iejsf.exe//FSG               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\新建文件夹.rar/INJECTMSG.EXE//PE_Patch//UPack               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\新建文件夹.rar/INJECTMSG.EXE//PE_Patch               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.lyz        G:\Temp\Virus\新建文件夹.rar/kav32.exe//PE_Patch.UPX//UPX               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.lyz        G:\Temp\Virus\新建文件夹.rar/kav32.exe//PE_Patch.UPX               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Dropper.Win32.Agent.ymn        G:\Temp\Virus\新建文件夹.rar/KdServer.exe               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.Losabel.ary        G:\Temp\Virus\新建文件夹.rar/keepSafe2.exe               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.ztx        G:\Temp\Virus\新建文件夹.rar/keepSafe23.exe               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.Losabel.arg        G:\Temp\Virus\新建文件夹.rar/keepSafe.exe               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.zzt        G:\Temp\Virus\新建文件夹.rar/mseion.sys               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.yzt        G:\Temp\Virus\新建文件夹.rar/1.pif               
2009/8/8 18:17:20        已清除        木马程序 Trojan-Downloader.Win32.VB.ned        G:\Temp\Virus\新建文件夹.rar/csrss.exe               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.urlq        G:\Temp\Virus\新建文件夹.rar/GJJJ1657894.DLL               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.ekm        G:\Temp\Virus\新建文件夹.rar/iejsf.exe               
2009/8/8 18:17:20        已清除        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\新建文件夹.rar/INJECTMSG.EXE               
2009/8/8 18:17:20        已清除        病毒 Worm.Win32.AutoRun.lyz        G:\Temp\Virus\新建文件夹.rar/kav32.exe               

Miss 4,To KL

lingbo110120

费尔 剩3个

TO费尔

kalynn84

2009-8-8 18:37:56        Administrator        1244        Sign of "Win32:Agent-KKN [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\msepion.sys" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\VSD7rfyh.jpg" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\wlwszx.dll" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\WOWSERVER.EXE\[Embedded_I#1460]\[Embedded_I#3a60]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:AVKill-8 [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\WOWSERVER.EXE\[Embedded_I#1460]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:AVKill-8 [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\WOWSERVER.EXE" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\XPTCN54RYTG.DLL" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:OnLineGames-DOG [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\1.pif" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:QQShou-J [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\1121160224" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\cqjhcq.dll" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\CQNNH34TER.DLL" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\csrss.exe" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\EASYDOWNS.SYS" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\ErO0xDQN.jpg" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\event32.dll" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\GJJJ1657894.DLL" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Agent-SIM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\iejsf.exe\[FSG]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:QQPass-NM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\INJECTMSG.EXE" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\kav32.exe\[UPX]\[Embedded_I#5c60]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\KdServer.exe\[Embedded_I#1460]\[Embedded_I#3860]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:AVKill-8 [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\KdServer.exe\[Embedded_I#1460]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:AVKill-8 [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\KdServer.exe" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Agent-SIM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\keepSafe2.exe\[FSG]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Agent-SIM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\keepSafe23.exe\[FSG]" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:Agent-SIM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\keepSafe.exe" file.  
2009-8-8 18:37:59        Administrator        1244        Sign of "Win32:OnLineGames-DAA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\mseion.sys" file.

失落的手链

瑞星2010

O(∩_∩)O哈哈~

avira杀了12个，启发10个，上报！

62590423

微点特征MISS23 TO