一包~~

显示全部楼层 · 发表于 2007-4-13 13:58:57

0000000000

显示全部楼层 · 发表于 2007-4-13 14:03:28

卡巴只剩一个
jh.exe

显示全部楼层 · 发表于 2007-4-13 14:04:28

C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\mh.exe - infected with Trojan.PWS.Wsgame
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\qq.exe - infected with Trojan.PWS.Qqpass.569
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\wl.exe - infected with Trojan.PWS.Wsgame
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\wm.exe - infected with Trojan.PWS.Gamania
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\cq.exe - probably infected with DLOADER.Trojan
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\wow.exe - infected with Trojan.PWS.Gamania
C:\Documents and Settings\xyz\Local Settings\Temporary Internet Files\Content.IE5\Q5MNS1W5\桌面[1].rar\zt.exe - infected with Trojan.PWS.Wsgame

DR.WEB 报....

[ 本帖最后由 wangfeng66 于 2007-4-13 14:05 编辑 ]

显示全部楼层 · 发表于 2007-4-13 14:04:56

Starting the file scan:

Begin scan in 'C:\Documents and Settings\user\桌面\桌面.rar'
C:\Documents and Settings\user\桌面\桌面.rar
  [0] Archive type: RAR
  --> mh.exe
   [DETECTION] Is the Trojan horse TR/Drop.OnLineGames
  --> qq.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.26717
  --> wl.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.IM.51
  --> wm.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> cq.exe
   [DETECTION] Is the Trojan horse TR/Agent.20332.1
  --> gz.exe
   [DETECTION] Is the Trojan horse TR/PCK.NSAnti.N.60
  --> wow.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.1720
  --> zt.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    A backup was created as '464db444.qua'  ( QUARANTINE )
   [INFO]    The file was deleted!

End of the scan: 2007年4月13日  14:02
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   11 Files were scanned
   8 viruses and/or unwanted programs were found
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   3 Files not concerned
   1 Archives were scanned

显示全部楼层 · 发表于 2007-4-13 14:09:18

掃描進行於：2007-4-13 14:07:38
掃描日誌
NOD32版本 2185 (20070412) NT
指令行： C:\Documents and Settings\桌面\桌面.rar

日期： 13.4.2007 時間：14:07:40
已開啟反隱藏功能.
已掃描的磁碟，目錄及檔案：C:\Documents and Settings\user\桌面\桌面.rar
C:\Documents and Settings\桌面\桌面.rar >>RAR >>mh.exe - probably a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>qq.exe - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>wl.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>wm.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>cq.exe - a variant of Win32/PSW.Legendmir.NEF trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>gz.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\桌面\桌面.rar >>RAR >>wow.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\桌面\桌面.rar >>RAR >>zt.exe - a variant of Win32/PSW.Agent.NDF trojan
已掃描的檔案數目：9
已發現的病毒數目：8
完結時間： 14:07:41 總掃描時間：1 秒 (00:00:01)

显示全部楼层 · 发表于 2007-4-13 14:19:47

avast!报7个

显示全部楼层 · 发表于 2007-4-13 14:54:26

BitDefender Antivirus Plus v10
桌面.rar=>mh.exe Infected: Trojan.PWS.OnLineGames.ARO
桌面.rar=>qq.exe Infected: Generic.PWStealer.E27F5BFF
桌面.rar=>wl.exe Infected: Trojan.PWS.OnLineGames.IM
桌面.rar=>wm.exe Infected: BehavesLike:Win32.ExplorerHijack
桌面.rar=>cq.exe Infected: Generic.Lmir.29633E58
桌面.rar=>wow.exe Infected: Trojan.PWS.OnLineGames.ARO
桌面.rar=>zt.exe Infected: Generic.Malware.SdldPWS.DBEA1348

显示全部楼层 · 发表于 2007-4-13 15:03:08

除了 avast报了jh.exe楼上其他杀软都没报~~~

显示全部楼层 · 发表于 2007-4-13 16:25:53

报了4个

显示全部楼层 · 发表于 2007-4-13 16:32:45

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月13日16时32分36秒开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\wl.exe
C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\wm.exe 发现未知可疑文件:Win32.NkHack.FSG.A 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\gz.exe 发现未知可疑文件:Win32.Nop xwxr 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\jh.exe 发现未知可疑文件:Win32.NkHack.PEC.A 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\qq.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\新建文件夹\桌d面\gz.exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月13日16时32分36秒收起线程…100% 查杀完毕！
扫描文件：9查杀病毒：4

[病毒样本] 一包~~

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源