查看: 1942|回复: 8
收起左侧

病毒

[复制链接]
kp2006
头像被屏蔽
发表于 2007-4-15 20:46:21 | 显示全部楼层 |阅读模式
快杀

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
xpn282
发表于 2007-4-15 20:47:50 | 显示全部楼层
那么大

不杀
The EQs
发表于 2007-4-15 20:49:01 | 显示全部楼层
不完了。。。。。去测试去了。。。。
ALEXBLAIR
发表于 2007-4-15 21:41:11 | 显示全部楼层
kis全杀!!


  1. deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ib        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0066417.exe
  2. deleted: Trojan program Trojan-PSW.Win32.Nilage.beq        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0067504.dll
  3. deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hd        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0067505.dll
  4. deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ib        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0067507.dll//UPX
  5. deleted: adware not-a-virus:AdWare.Win32.BHO.av        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0068381.exe//data.rar/ad838.exe//stream//data0001
  6. deleted: Trojan program Trojan-PSW.Win32.Nilage.bdy        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0068690.exe
  7. deleted: Trojan program Trojan-PSW.Win32.Nilage.bbf        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0068691.exe
  8. deleted: virus Worm.Win32.Detnat.e        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0068692.DLL
  9. deleted: Trojan program Backdoor.Win32.Agent.ahj        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0068695.exe//BeRo//BeRo
  10. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0071709.sys
  11. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0071714.exe
  12. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0076713.sys
  13. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0076715.exe
  14. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0077713.sys
  15. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0077715.exe
  16. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0078712.sys
  17. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0078713.exe
  18. deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\A0078715.exe
  19. deleted: Trojan program Trojan-Downloader.Win32.Agent.bdl        File: J:\X_ZONE\test\ziper\×ÀÃæ[1]\smss.exe

复制代码
zxy900906
发表于 2007-4-15 22:10:00 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面'
C:\Documents and Settings\Administrator\桌面\桌面\A0066417.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      A backup was created as '465233fe.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0067504.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '465233ff.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0067505.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '47f7953c.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0067507.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
      [INFO]      A backup was created as '46523401.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0068381.exe
      [DETECTION] Is the Trojan horse TR/Drop.Cinmu.M.1.A
      [INFO]      A backup was created as '47f7953e.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0068690.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '46523400.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0068691.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      A backup was created as '47f7953d.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0068692.DLL
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      A backup was created as '46523402.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0068695.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47f7953f.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0071709.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      A backup was created as '46523403.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0071714.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47f79538.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0076713.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      A backup was created as '46523405.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0076715.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47f7953a.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0077713.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      A backup was created as '4652347c.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0077715.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47f79541.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0078712.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      A backup was created as '4652347e.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0078713.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '47f79543.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\A0078715.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      A backup was created as '46523407.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\桌面\smss.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bdl
      [INFO]      A backup was created as '46953440.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!

都这么大呢..
The EQs
发表于 2007-4-16 00:29:02 | 显示全部楼层

nod32杀了15个。。。。

Scan performed at: 2007-4-16 0:28:40
Scanning Log
NOD32 version 2190 (20070415) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面
Operating memory - is OK

Date: 16.4.2007  Time: 00:28:44
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面\
C:\Documents and Settings\EQ2\桌面\桌面\A0066417.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\桌面\A0067504.dll - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\桌面\A0067505.dll - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\桌面\A0067507.dll - a variant of Win32/PSW.Agent.NBX trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0068381.exe - Win32/Adware.CDN application - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\桌面\A0068690.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\桌面\A0068691.exe - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\桌面\A0068692.DLL - a variant of Win32/Bacalid virus
C:\Documents and Settings\EQ2\桌面\桌面\A0068695.exe - a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\EQ2\桌面\桌面\A0071714.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\A0076715.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\A0077715.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\A0078713.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\A0078715.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\smss.exe - Win32/TrojanDownloader.Agent.BDL trojan - quarantined - unable to clean - deleted
Number of scanned files: 21
Number of threats found: 15
Number of files cleaned: 15
Time of completion: 00:28:51 Total scanning time: 7 sec (00:00:07)

Notes:
[7] File is probably infected with an unknown virus.
dyw1021
头像被屏蔽
发表于 2007-4-16 01:06:35 | 显示全部楼层
费尔23个
Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-4-16 1:06:56,Suspect.Ttjlyl.itgk,可疑程序,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068690.exe,Manual scan
2007-4-16 1:06:56,Packed.Themida.a,带壳程序,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>smss.exe,Manual scan
2007-4-16 1:06:56,TrojanDownloader.Small.czl.kwnj,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0078715.exe,Manual scan
2007-4-16 1:06:56,TrojanDownloader.Small.czl.kwnj,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0078713.exe,Manual scan
2007-4-16 1:06:56,RootKit.CallGate.l.vzjt,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0078712.sys,Manual scan
2007-4-16 1:06:56,TrojanDownloader.Small.czl.kwnj,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0077715.exe,Manual scan
2007-4-16 1:06:56,RootKit.CallGate.l.vzjt,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0077713.sys,Manual scan
2007-4-16 1:06:56,TrojanDownloader.Small.czl.kwnj,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0076715.exe,Manual scan
2007-4-16 1:06:56,RootKit.CallGate.l.vzjt,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0076713.sys,Manual scan
2007-4-16 1:06:56,TrojanDownloader.Small.czl.kwnj,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0071714.exe,Manual scan
2007-4-16 1:06:56,RootKit.CallGate.l.vzjt,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0071709.sys,Manual scan
2007-4-16 1:06:56,Backdoor.Agent.ahj.rbek,后门,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068695.exe,Manual scan
2007-4-16 1:06:56,Worm.Detnat.e.gdzj.dll,病毒,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068692.DLL,Manual scan
2007-4-16 1:06:56,Trojan.Mnless.dx.kkvg.arc,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068381.exe>>dodolook212.exe,Manual scan
2007-4-16 1:06:56,Trojan.Agent.dls.nskw,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068381.exe>>103.exe,Manual scan
2007-4-16 1:06:56,Trojan.Clicker.Agent.bcw.gfdu.arc,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068381.exe>>ad838.exe,Manual scan
2007-4-16 1:06:55,Adware.CDN.fbar,广告程序,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068381.exe>>tshz103.exe,Manual scan
2007-4-16 1:06:55,TrojanPSW.OnLineGames.ib.nrun.dll,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0067507.dll,Manual scan
2007-4-16 1:06:55,TrojanPSW.OnLineGames.hd.ovpg.dll,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0067505.dll,Manual scan
2007-4-16 1:06:55,TrojanPSW.ZhengTu.ajt.ulxp.dll,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0067504.dll,Manual scan
2007-4-16 1:06:55,TrojanPSW.OnlineGames.mq.tows,木马,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0066417.exe,Manual scan
2007-4-16 1:06:55,Suspect.Emiird.ixwg,可疑程序,Administrator,C:\Documents and Settings\Administrator\桌面\桌面.part1.rar>>A0068691.exe,Manual scan
mofunzone
发表于 2007-4-16 01:14:21 | 显示全部楼层
End of the scan: 2007年4月15日  10:14
Used time: 00:13 min

The scan has been done completely.

      1 Scanning directories
     19 Files were scanned
     19 viruses and/or unwanted programs were found
     19 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
鼻耳盖子
发表于 2007-4-16 17:31:09 | 显示全部楼层

行为+特征库=无敌

处理成功 Trojan-PSW.Win32.Nilage.auz I:\TEST\070415\41\A0068690.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.gln I:\TEST\070415\41\A0078715.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.gln I:\TEST\070415\41\A0078713.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.isk I:\TEST\070415\41\A0078712.SYS C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.gln I:\TEST\070415\41\A0077715.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.isk I:\TEST\070415\41\A0077713.SYS C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.gln I:\TEST\070415\41\A0076715.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.isk I:\TEST\070415\41\A0076713.SYS C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.gln I:\TEST\070415\41\A0071714.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-Downloader.Win32.Small.isk I:\TEST\070415\41\A0071709.SYS C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Backdoor.Win32.Agent.bwn I:\TEST\070415\41\A0068695.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-PSW.Win32.OnLineGames.ady I:\TEST\070415\41\A0067507.DLL C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-PSW.Win32.OnLineGames.adx I:\TEST\070415\41\A0067505.DLL C:\PROGRAM FILES\WINRAR\WINRAR.EXE
处理成功 Trojan-PSW.Win32.OnLineGames.aie I:\TEST\070415\41\A0066417.EXE C:\PROGRAM FILES\WINRAR\处理成功 Trojan-PSW.Win32.Nilage.auy I:\TEST\070415\41\A0068691.EXE C:\PROGRAM FILES\WINRAR\WINRAR.EXE

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-2 12:35 , Processed in 0.124387 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表