未知了

显示全部楼层 · 发表于 2007-5-16 21:41:01

未知了未知了未知了未知了未知了未知了未知了未知了未知了未知了

[ 本帖最后由 qqq000@qq.com 于 2007-5-16 08:45 编辑 ]

显示全部楼层 · 发表于 2007-5-16 21:45:14

缺东西的

显示全部楼层 · 发表于 2007-5-16 21:46:29

3个
上了

新马马
http://bbs.kafan.cn/viewthread.php?tid=85650&extra=page%3D1
http://bbs1.hypost.cn/read.php?tid=148740

显示全部楼层 · 发表于 2007-5-16 21:46:53

detected: Trojan program Trojan-PSW.Win32.OnLineGames.qo File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\Temp\qjso1.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sx File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\SYSTEM32\upxdnd.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sy File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\SYSTEM32\dh2103.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sx File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\SYSTEM32\cmdbcs.dll
detected: Trojan program Trojan-PSW.Win32.QQPass.wc File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\2\SystemKb.kao//PE_Patch.NSAnti//NSAnti
detected: Trojan program Trojan-PSW.Win32.QQPass.wc File: E:\Ñù±¾\ÐÂ½¨ÎÄ¼þ¼Ð (2)\Î´ÖªÁË\2\system2.jmp//PE_Patch.NSAnti//NSAnti

显示全部楼层 · 发表于 2007-5-16 21:47:09

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!

===============================================
___________病毒查杀结果__________________

===============================================

2007年5月16日21时46分59秒开始查杀C:\Documents and Settings\root\桌面\virus\未知了\未知了
  未知的可疑率80%的文件(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\Kavs0.dll 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\Kavs0.dll 操作:阻止运行
  未知的可疑率60%的文件(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\LgSy1.dll 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\LgSy1.dll 操作:阻止运行
  未知的可疑率60%的文件(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\qjzo0.dll 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\qjzo0.dll 操作:阻止运行
威胁性文件：C:\Documents and Settings\root\桌面\virus\未知了\未知了\SYSTEM32\WanPacket.dll
  未知的可疑率80%的文件(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\SYSTEM32\WanPacket.dll 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\root\桌面\virus\未知了\未知了\SYSTEM32\WanPacket.dll 操作:阻止运行
威胁性文件：C:\Documents and Settings\root\桌面\virus\未知了\未知了\SYSTEM32\Packet.dll
威胁性文件：C:\Documents and Settings\root\桌面\virus\未知了\未知了\SYSTEM32\wpcap.dll
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\Kavs0.dll 带壳文件:UPX加壳
C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\LgSy1.dll 带壳文件:UPX加壳
C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\LgSy0.dll 带壳文件:UPX加壳
C:\Documents and Settings\root\桌面\virus\未知了\未知了\Temp\qjzo0.dll 带壳文件:UPX加壳
-----------------------------------------

2007年5月16日21时47分11秒收起线程…100% 查杀完毕！
扫描文件：22查杀病毒：7

显示全部楼层 · 发表于 2007-5-16 21:48:33

唉　　

病毒木马横行的年代

显示全部楼层 · 发表于 2007-5-16 21:50:33

MCAFEE

显示全部楼层 · 发表于 2007-5-16 22:00:23

已删除: 木马程序 Trojan-PSW.Win32.QQPass.wc 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\2\system2.jmp//PE_Patch.NSAnti//NSAnti
已删除: 木马程序 Trojan-PSW.Win32.QQPass.wc 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\2\SystemKb.kao//PE_Patch.NSAnti//NSAnti
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.sx 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\SYSTEM32\cmdbcs.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.sy 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\SYSTEM32\dh2103.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.sx 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\SYSTEM32\upxdnd.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.qo 文件: D:\Documents and Settings\Administrator\桌面\未知了[1]\未知了\Temp\qjso1.dll

显示全部楼层 · 发表于 2007-5-16 22:23:30

趨勢Intellitrap技術報了8個

显示全部楼层 · 发表于 2007-5-16 23:01:18

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\未知了'
C:\Documents and Settings\morgan\My Documents\未知了\未知了\
  复件 ~DF67CD.tmp
C:\Documents and Settings\morgan\My Documents\未知了\未知了\2\
  2D8352.dmp
  cdnvers.dat
  system2.jmp
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
   [INFO]    The file was deleted!
  SystemKb.kao
   [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
   [INFO]    The file was deleted!
C:\Documents and Settings\morgan\My Documents\未知了\未知了\Network\
  unins000.exe
C:\Documents and Settings\morgan\My Documents\未知了\未知了\Network\ThunderMini\
  boost_thread-vc6-mt-1_31.dll
  MaxSetup.exe
  TDInstallTool.exe
  TDUpdate.exe
  ThunderMini.exe
  unins000.exe
  xunleibho_v6.dll
C:\Documents and Settings\morgan\My Documents\未知了\未知了\SYSTEM32\
  cmdbcs.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SX.41
   [INFO]    The file was deleted!
  dh2103.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SY.1
   [INFO]    The file was deleted!
  Packet.dll
  upxdnd.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SX.43
   [INFO]    The file was deleted!
  WanPacket.dll
  wpcap.dll
C:\Documents and Settings\morgan\My Documents\未知了\未知了\SYSTEM32\drivers\
  npf.sys
C:\Documents and Settings\morgan\My Documents\未知了\未知了\Temp\
  Kavs0.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  LgSy0.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  LgSy1.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  mhso1.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!
  qjso1.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QO
   [INFO]    The file was deleted!
  qjzo0.dll
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [INFO]    The file was deleted!
  rxso1.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年5月16日  08:00
Used time: 00:08 min

The scan has been done completely.

   8 Scanning directories
   27 Files were scanned
   12 viruses and/or unwanted programs were found
   0 classified as suspicious:
   12 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   15 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

[病毒样本] 未知了

本帖子中包含更多资源

本帖子中包含更多资源