avast!报

kp2006

快杀

[ 本帖最后由 kp2006 于 2007-4-15 20:23 编辑 ]

剑指七星

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        URL: http:/bbs.kafan.cn/attachment.php?aid=55637/A0065362.dll
已检测到: 木马程序 Trojan-PSW.Win32.Nilage.bil        URL: http:/bbs.kafan.cn/attachment.php?aid=55638/A0065389.exe

solcroft

AVG杀八个

第二包4个

[ 本帖最后由 solcroft 于 2007-4-15 22:00 编辑 ]

The EQs

Scan performed at: 2007-4-15 20:34:26
Scanning Log
NOD32 version 2190 (20070415) NT
Command line: C:\Documents and Settings\EQ2\桌面\复件 桌.rar
Operating memory - is OK

Date: 15.4.2007  Time: 20:34:31
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\复件 桌.rar
C:\Documents and Settings\EQ2\桌面\复件 桌.rar ?RAR ?A0065389.exe - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\复件 桌.rar ?RAR ?A0066361.dll - a variant of Win32/PSW.Agent.KV trojan
C:\Documents and Settings\EQ2\桌面\复件 桌.rar ?RAR ?A0066382.exe - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\复件 桌.rar ?RAR ?A0065388.exe - Win32/Viking.CH virus - was a part of the deleted object
Number of scanned files: 5
Number of threats found: 4
Number of files cleaned: 1
Time of completion: 20:34:31 Total scanning time: 0 sec (00:00:00)

The EQs

Scan performed at: 2007-4-15 20:35:45
Scanning Log
NOD32 version 2190 (20070415) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面
Operating memory - is OK

Date: 15.4.2007  Time: 20:35:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面\
C:\Documents and Settings\EQ2\桌面\桌面\A0055362.dll - a variant of Win32/PSW.Maran trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0055366.exe - probably a variant of Win32/PSW.Maran trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0064455.dll - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0064460.dll - Win32/PSW.Agent.NCC trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\桌面\A0065362.dll - Win32/PSW.Agent.NCC trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\桌面\A0065384.exe - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0065387.exe - Win32/PSW.Agent.NCC trojan - quarantined - unable to clean - deleted
Number of scanned files: 10
Number of threats found: 7
Number of files cleaned: 7
Time of completion: 20:35:52 Total scanning time: 2 sec (00:00:02)

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\��.rar'
C:\Documents and Settings\morgan\My Documents\
  ��.rar
    [0] Archive type: RAR
    --> A0065389.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.CX.35
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0066361.dll
        [DETECTION] Is the Trojan horse TR/PSW.Agent.KV.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0066382.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.FB.66
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0065388.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
      [DETECTION] Is the Trojan horse TR/Drop.Onl.DR.40.B
      [WARNING]   The file was ignored!
    [0] Archive type: RAR
    --> A0065362.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.879
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0065384.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.FB.66
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0065386.exe
        [DETECTION] Is the Trojan horse TR/PSW.Steal.26056
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0055362.dll
        [DETECTION] Is the Trojan horse TR/Drop.Maran.C.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0055366.exe
        [DETECTION] Is the Trojan horse TR/PSW.Maran.CL.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0064370.cfg
    --> A0065387.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.837
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0064455.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.EQ.16
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0064460.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.879
        [WARNING]   Infected files in archives cannot be repaired!
    --> A0065361.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.DR.40
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月15日  10:08
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     16 Files were scanned
     14 viruses and/or unwanted programs were found
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      2 Archives were scanned
     15 Warnings
      0 Notes

鼻耳盖子

木马名称:Trojan-PSW.Win32.Agent.bsi
程序:
I:\TEST\070415\38\桌\A0066361.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Nilage.axw
程序:
I:\TEST\070415\38\桌\A0066382.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Viking.scb
程序:
I:\TEST\070415\38\桌\A0065388.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Nilage.axw
程序:
I:\TEST\070415\38\桌面\A0065384.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Delf.bok
程序:
I:\TEST\070415\38\桌面\A0065386.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Maran.ec
程序:
I:\TEST\070415\38\桌面\A0055366.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.bbh
程序:
I:\TEST\070415\38\桌面\A0065387.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.azb
程序:
I:\TEST\070415\38\桌面\A0064455.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.age
程序:
I:\TEST\070415\38\桌面\A0065361.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

一个可以根据行为库拦截