包~~

tonger2003

231321321

Whitlack

Start of the scan: 2007年4月20日  18:09

Starting the file scan:

Begin scan in 'D:\My Downloads\TDDOWNLOAD00.rar'
D:\My Downloads\
  TDDOWNLOAD00.rar
  TDDOWNLOAD00.rar:Zone.Identifier
    [0] Archive type: RAR
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/PSW.9728.8
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Agent.10240.32
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Agent.17920.26
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.1776
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.1771
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '466c9193.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!


End of the scan: 2007年4月20日  18:09
Used time: 00:03 min

风野胤

扫描日志
NOD32 版本 2207 (20070420) NT
命令行: C:\Documents and Settings\fengyeyin\桌面\ ?
?TDDOWNLOAD00.rar
NOD32.EXE CRC 校验检查: 状态正常
d:\Program Files\Eset\nod32.exe - 正常
扫描内存: 未执行（选项禁用）
扫描 MBR 和引导扇区: 未执行（选项禁用）
日期: 2007年4月20日  时间: 18:09:51
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\ ?
?fengyeyin\桌面\TDDOWNLOAD00.rar
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?1.exe - 可能是 Win32/PSW.Agent.NCC 木马 变种
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?2.exe - Win32/PSW.Agent.NCC 木马 变种
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?3.exe - Win32/PSW.Agent.NDF 木马 变种
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?5.exe - Win32/PSW.Agent.NCC 木马 变种
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?6.exe - Win32/PSW.Delf.NGV 木马
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?7.exe - Win32/PSW.Agent.NCC 木马 变种
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00.rar  ?
??RAR ?8.exe - Win32/PSW.WOW.NBV 木马
C:\Documents and Settings\fengyeyin\桌面\TDDOWNLOAD00. ?
?rar:Zone.Identifier - 正常
已扫描文件数量: 8
已发现病毒数量: 7
完成时间: 18:09:52 总共扫描时间: 1 秒 (00:00:01)

sharkvv

7个毒？

promised

用AntiVirusKit扫描病毒
版本 16.0.7
病毒库签名 2007-4-20
开始时间: 2007-4-20 18:27
引擎: KAV 引擎 (AVK 17.3590), BD  引擎
启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 2.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.lz (KAV 引擎), Trojan.PWS.OnLineGames.ARI (BD  引擎)
对象: 3.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎), Generic.Malware.SdldPWS.BF534B4D (BD  引擎)
对象: 5.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎), Trojan.PWS.OnLineGames.ARI (BD  引擎)
对象: 6.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.hu (KAV 引擎), Trojan.PWS.WOW.ZG (BD  引擎)
对象: 7.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.es (KAV 引擎), Trojan.PWS.OnLineGames.ARI (BD  引擎)
对象: 8.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 已发现病毒
        病毒: Trojan-Dropper.Win32.Agent.bcv (KAV 引擎), GenPack:Trojan.PWS.WoW.DT (BD  引擎)
对象: 1.exe
        在压缩档案里: D:\TDDOWNLOAD00.rar
        Status: 可疑病毒
        病毒: Trojan.PWS.OnLineGames.ARI (BD  引擎)
对象: TDDOWNLOAD00.rar
        路径: D:
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.lz, Trojan-PSW.Win32.OnLineGames.es (3x), Trojan-PSW.Win32.OnLineGames.hu, Trojan-Dropper.Win32.Agent.bcv (KAV 引擎), Trojan.PWS.OnLineGames.ARI (4x), Generic.Malware.SdldPWS.BF534B4D, Trojan.PWS.WOW.ZG, GenPack:Trojan.PWS.WoW.DT (BD  引擎)
Analysis complete: 2007-4-20 18:27
    1 files checked
    1 infected files detected
    发现 0 个可疑文件

小邪邪

既然AVK都能通杀我就不用试了

[ 本帖最后由 小邪邪 于 2007-4-20 18:33 编辑 ]

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用



===============================================
   ___________病毒查杀结果__________________


===============================================

2007年4月20日18时30分51秒 开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00\1.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00\2.exe 为可疑文件
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00\6.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00\8.exe 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。


C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDOWNLOAD00\8.exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月20日18时30分52秒收起线程…100% 查杀完毕！
扫描文件：7查杀病毒：4

魑魅魍魉

//-----------------------------------------------------------------
//
// Product BitDefender Antivirus Plus v10
// Product 10.2
//
// Created on: 20/04/2007 18:53:13
//
//-----------------------------------------------------------------

Virus Statistics
Scan path : K:\TDDOWNLOAD00.rar
Folders : 0
Files :  8
Memory processes scanned : 0
Archives : 1
Runtime packers : 0
Identified viruses : 4
Infected files : 6
Memory processes infected : 0
Suspect files : 1
Warnings : 0
Disinfected files : 0
Deleted files : 0
Moved files : 0
I/O errors : 0
Scan time : 00:00:01
Scan speed (files/sec) : 8
Virus definitions : 533147
Scan plugins : 16
Archive plugins : 41
Unpack plugins : 6
Mail plugins : 6
System plugins : 5
Virus scan options
Detection
[ ] Scan boot sectors
[ ] Memory Processes
[X] Scan archives
[X] Scan runtime packers
[X] Scan email
File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;
Action
Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Move to quarantine
[ ] Prompt user
Second action
[ ] Ignore
[ ] Delete
[X] Move to quarantine
[ ] Prompt user
Virus scan options
[X] Enable warnings
[X] Enable heuristics
[X] Show all files in log
[X] Report file: C:\Documents and Settings\          \Application Data\BitDefender\Desktop\Profiles\Logs\contextual\1177066393.log
Spyware scan options
[X] Scan for riskware
[ ] Skip dial and applications from scan
[ ] Registry keys
[ ] Cookies

Summary:
K:\TDDOWNLOAD00.rar=>1.exe Suspect: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>2.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>2.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>2.exe Move failed
K:\TDDOWNLOAD00.rar=>3.exe Infected: Generic.Malware.SdldPWS.BF534B4D
K:\TDDOWNLOAD00.rar=>3.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>3.exe Move failed
K:\TDDOWNLOAD00.rar=>5.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>5.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>5.exe Move failed
K:\TDDOWNLOAD00.rar=>6.exe Infected: Trojan.PWS.WOW.ZG
K:\TDDOWNLOAD00.rar=>6.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>6.exe Move failed
K:\TDDOWNLOAD00.rar=>7.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>7.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>7.exe Move failed
K:\TDDOWNLOAD00.rar=>8.exe Infected: GenPack:Trojan.PWS.WoW.DT
K:\TDDOWNLOAD00.rar=>8.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>8.exe Move failed
Scanned files
K:\TDDOWNLOAD00.rar OK
K:\TDDOWNLOAD00.rar=>1.exe Suspect: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>2.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>2.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>2.exe Move failed
K:\TDDOWNLOAD00.rar=>3.exe Infected: Generic.Malware.SdldPWS.BF534B4D
K:\TDDOWNLOAD00.rar=>3.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>3.exe Move failed
K:\TDDOWNLOAD00.rar=>5.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>5.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>5.exe Move failed
K:\TDDOWNLOAD00.rar=>6.exe Infected: Trojan.PWS.WOW.ZG
K:\TDDOWNLOAD00.rar=>6.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>6.exe Move failed
K:\TDDOWNLOAD00.rar=>7.exe Infected: Trojan.PWS.OnLineGames.ARI
K:\TDDOWNLOAD00.rar=>7.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>7.exe Move failed
K:\TDDOWNLOAD00.rar=>8.exe Infected: GenPack:Trojan.PWS.WoW.DT
K:\TDDOWNLOAD00.rar=>8.exe Disinfection failed
K:\TDDOWNLOAD00.rar=>8.exe Move failed

[ 本帖最后由 魑魅魍魉 于 2007-4-20 18:57 编辑 ]

chow2006

费尔杀7个,一个启发