接招

显示全部楼层 · 发表于 2007-5-10 12:20:51

Scan carefullly！！

显示全部楼层 · 发表于 2007-5-10 12:22:49

费尔报6个

显示全部楼层 · 发表于 2007-5-10 12:23:22

显示全部楼层 · 发表于 2007-5-10 12:24:23

显示全部楼层 · 发表于 2007-5-10 12:24:34

----------
[凝逸反毒] (http://hi.baidu.com/503165656)

[凝逸.扫描病毒引擎-日志] 2007.5.10 12:24:18

文件:F:\070509\vvv\cmdbcs.exe | 感染:Trojan.PWS.Wsgame [256>20070508_210218_0260.axx]3
操作:删除文件

文件:F:\070509\vvv\javavm.dll | 感染:Trojan.PWS.Wsgame [34>20070430_150748_0103.axx]3
操作:删除文件

文件:F:\070509\vvv\msccrt.exe | 感染:木马(13747FFDCCC40D05D43B7B958AD89F25593E43948AD81228142ACC696FF9D840FAD72A25A3D6BF9E48509C0DA98678A255F30A30B1EAD155)
操作:删除文件

文件:F:\070509\vvv\shualai.exe | 感染:木马(13747FFDCCC40D05BF995F2F67994FA6D8496790CBFE39E1A4BEAC43FCD69E51901F302D93359D013D96F66340ABCC04FCB814F05401B06A)
操作:删除文件

扫描完成|病毒:4 文件:13|耗时:371
----------

显示全部楼层 · 发表于 2007-5-10 12:25:36

显示全部楼层 · 发表于 2007-5-10 12:26:53

微点杀

显示全部楼层 · 发表于 2007-5-10 12:28:15

BitDefender Antivirus Plus v10
777.rar=>vvv\cmdbcs.dll Infected: Generic.PWS.Games.F73C9754
777.rar=>vvv\cmdbcs.exe Infected: Trojan.PWS.OnLineGames.ARI
777.rar=>vvv\javavm.dll Infected: Generic.Malware.PWS.7A619E10
777.rar=>vvv\Kvsc3.exe Infected: Trojan.PWS.OnLineGames.FU
777.rar=>vvv\LYMANGR.DLL Infected: Trojan.PWS.OnLineGames.ASF
777.rar=>vvv\msccrt.dll Infected: Generic.PWS.Games.4B2DD4A6
777.rar=>vvv\msccrt.exe Infected: Generic.Malware.SdldgPWS.46002698
777.rar=>vvv\qjsj100.dll Infected: Trojan.PWS.OnLineGames.FF
777.rar=>vvv\shualai.dll Infected: Trojan.PWS.OnlineGames.ASL
777.rar=>vvv\shualai.exe Infected: Generic.Malware.SdldPWS.BD42B1AE
777.rar=>vvv\winform.dll Infected: Generic.PWS.Games.5E8C9078

显示全部楼层 · 发表于 2007-5-10 12:32:01

[0] Archive type: RAR
  --> vvv\cmdbcs.dll
   [DETECTION] Is the Trojan horse TR/Spy.LegMir
  --> vvv\cmdbcs.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ARI.223
  --> vvv\javavm.dll
   [DETECTION] Is the Trojan horse TR/Agent.6656.54
  --> vvv\Kvsc3.dll
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bjt.2
  --> vvv\Kvsc3.exe
   [DETECTION] Is the Trojan horse TR/Agent.12288.33
  --> vvv\LYMANGR.DLL
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NN.34
  --> vvv\msccrt.dll
   [DETECTION] Is the Trojan horse TR/PSW.10752.10
  --> vvv\msccrt.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NB.186
  --> vvv\MSDEG32.DLL
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> vvv\qjsj100.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.RC.13
  --> vvv\shualai.dll
   [DETECTION] Is the Trojan horse TR/PSW.11776.58
  --> vvv\shualai.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SA.20
  --> vvv\winform.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QH.24
   [INFO]    The file was deleted!

End of the scan: 2007年5月10日  12:31
Used time: 00:11 min

The scan has been done completely.

   0 Scanning directories
   14 Files were scanned
   13 viruses and/or unwanted programs were found
   0 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-5-10 12:37:26

解压前后..其余再上报

[ 本帖最后由 playx 于 2007-5-10 12:38 编辑 ]

[病毒样本] 接招

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

MCAFEE报了好多个木马

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源