都报了多少个

显示全部楼层 · 发表于 2007-5-23 14:32:10

卡吧7扫描报了14个
看看哪个报的多？

显示全部楼层 · 发表于 2007-5-23 14:35:09

一共就14个，你还想多少？
蜘蛛脱壳很辛苦。。
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面01.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面01.rar
[0] Archive type: RAR
--> spglsdr.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> mmc.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> smss.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> srogm.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> ctfmon.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> stpgldk.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> svchost32.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> copypfh.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> svchost(1).exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> conime.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> services.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> svchost.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面02.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面02.rar
[0] Archive type: RAR
--> csrss.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> IEXPLORE.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

End of the scan: 2007年5月22日  23:33
Used time: 00:09 min

The scan has been done completely.

   0 Scanning directories
   16 Files were scanned
   14 viruses and/or unwanted programs were found
   0 classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   2 Archives were scanned
   16 Warnings
   0 Notes
   0 Hidden objects were found

扫描日志
NOD32版本 2285 (20070522) NT
命令行： C:\Documents and Settings\morgan\My Documents\ ?
?桌面01.rar C:\Documents and Settings\morgan\My  ?
?Documents\桌面02.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 22.5.2007  时间：23:34:08
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?morgan\My Documents\桌面01.rar; C:\Documents and  ?
?Settings\morgan\My Documents\桌面02.rar
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>spglsdr.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>mmc.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>smss.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>srogm.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>ctfmon.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>stpgldk.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>svchost32.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>copypfh.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>svchost(1).exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>conime.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>services.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面01.rar  ?
?>>RAR >>svchost.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面02.rar  ?
?>>RAR >>csrss.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面02.rar  ?
?>>RAR >>IEXPLORE.EXE - 是正常的
已扫描的文件数目：14
已发现的病毒数目：0
完成时间： 23:34:10 总扫描时间：2 秒 (00:00:02)

[Scan path] C:\Documents and Settings\morgan\My Documents\桌面01.rar
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\spglsdr.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\mmc.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\smss.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\srogm.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\ctfmon.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\stpgldk.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\svchost32.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\copypfh.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\svchost(1).exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\conime.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\services.exe - Ok
>C:\Documents and Settings\morgan\My Documents\桌面01.rar\svchost.exe - Ok
C:\Documents and Settings\morgan\My Documents\桌面01.rar - Ok

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 16
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 0
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 15 Kb/s
Scan time: 00:00:13

显示全部楼层 · 发表于 2007-5-23 14:37:09

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/spglsdr.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/mmc.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/smss.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/srogm.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/ctfmon.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/stpgldk.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/svchost32.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/copypfh.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/svchost(1).exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/conime.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/services.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.bmo 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/svchost.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/桌面02.rar/csrss.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um 文件: C:\Documents and Settings\Administrator\桌面\桌面01.rar/桌面02.rar/IEXPLORE.EXE

卡巴报的一个名字~~
里面就一个不一样~~~~~~`

显示全部楼层 · 发表于 2007-5-23 14:38:49

都是一样的东西，过了NOD32情有可言

显示全部楼层 · 发表于 2007-5-23 14:45:38

我不会看日志
AntiVir PersonalEdition Classic
Report file date: 2007年5月23日  14:41

Scanning for 740715 virus strains and unwanted programs.

Licensed to:    Avira AntiVir PersonalEdition Classic
Serial number: 0000149996-ADJIE-0001
Platform:       Windows XP
Windows version:  (Service Pack 2)  [5.1.2600]
Username:       admin
Computer name: YX093

Version information:
BUILD.DAT : 247          14437 Bytes 2007-5-10 11:55:00
AVSCAN.EXE : 7.0.4.15    282664 Bytes 2007-4-20 05:37:14
AVSCAN.DLL : 7.0.4.4    33832 Bytes 2007-3-27 05:31:54
LUKE.DLL    : 7.0.4.11    143400 Bytes 2007-3-27 05:26:04
LUKERES.DLL  : 7.0.4.0    10280 Bytes 2007-3-19 05:18:59
ANTIVIR0.VDF : 6.35.0.1 7371264 Bytes 2006-5-31 07:08:58
ANTIVIR1.VDF : 6.37.1.151  4303360 Bytes 2007-2-23 07:09:01
ANTIVIR2.VDF : 6.38.0.214 729600 Bytes 2007-4-12 07:09:02
ANTIVIR3.VDF : 6.38.0.225 50688 Bytes 2007-4-16 07:09:02
AVEWIN32.DLL : 7.4.0.12 2404864 Bytes 2007-4-13 07:04:24
AVWINLL.DLL  : 1.0.0.7    14376 Bytes 2007-2-26 03:36:26
AVPREF.DLL : 7.0.2.1    24616 Bytes 2007-3-27 05:31:50
AVREP.DLL : 7.0.0.1    155688 Bytes 2007-4-16 06:16:24
AVPACK32.DLL : 7.3.0.8    360488 Bytes 2007-3-27 01:48:28
AVREG.DLL : 7.0.1.2    31784 Bytes 2007-3-15 02:05:08
AVEVTLOG.DLL : 7.0.0.18    86056 Bytes 2007-3-27 05:16:05
AVARKT.DLL : 1.0.0.17    278568 Bytes 2007-5-2 04:32:26
NETNT.DLL : 7.0.0.0       7720 Bytes 2007-3-8 04:09:42
RCIMAGE.DLL  : 7.0.1.15 2228264 Bytes 2007-3-13 03:46:18
RCTEXT.DLL : 7.0.45.0    86056 Bytes 2007-3-19 05:42:42

Configuration settings for the scan:
Jobname..........................: ShlExt
Configuration file...............: C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\3b3b7281.avp
Logging..........................: low
Primary action...................: interactive
Secondary action.................: ignore
Scan master boot sector..........: off
Scan boot sector.................: on
Boot sectors.....................: E:,
Scan memory......................: on
Process scan.....................: off
Scan registry....................: off
Search for rootkits..............: off
Scan all files...................: Intelligent file selection
Scan archives....................: on
Recursion depth..................: 20
Smart extensions.................: on
Macro heuristic..................: on
File heuristic...................: medium

Start of the scan: 2007年5月23日  14:41

Starting the file scan:

Begin scan in 'E:\桌面01.rar'
E:\桌面01.rar
  [0] Archive type: RAR
  --> spglsdr.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> mmc.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> smss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> srogm.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> ctfmon.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> stpgldk.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> svchost32.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> copypfh.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> svchost(1).exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> conime.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> services.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> svchost.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!
Begin scan in 'E:\桌面02.rar'
E:\桌面02.rar
  [0] Archive type: RAR
  --> csrss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> IEXPLORE.EXE
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!

End of the scan: 2007年5月23日  14:41
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   18 Files were scanned
   14 viruses and/or unwanted programs were found
   0 classified as suspicious:
   2 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   2 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-5-23 14:56:27

卡6

显示全部楼层 · 发表于 2007-5-23 15:27:38

avast 一个都没有发现晕

显示全部楼层 · 发表于 2007-5-23 17:04:44

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Packer.Mian007
病毒： Trojan.PSW.OnlineGames.brv

用户来源：互联网

软件版本：19.24.22

14个全灭

显示全部楼层 · 发表于 2007-5-23 18:03:30

LZ我对你无语了，你就那么喜欢把别人昨发过的样本发上来吗
http://bbs.kafan.cn/viewthread.php?tid=87899&extra=page%3D1
都不知道某番茄以前的承诺到那里去了，当官的都管管

显示全部楼层 · 发表于 2007-5-23 20:49:14

----------
[凝逸反毒] (http://hi.baidu.com/503165656)
[凝逸.扫描病毒引擎-日志] 2007.5.23 20:47:7
文件:F:\070524\桌面01\mmc.exe | 感染:木马 [105>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\桌面01\conime.exe | 感染:木马 [99>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\桌面01\services.exe | 感染:木马 [97>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\桌面01\csrss.exe | 感染:木马 [104>20070523_150350_0225.axx]3
操作:删除文件
文件:F:\070524\桌面01\IEXPLORE.EXE | 感染:木马 [102>20070523_150350_0225.axx]3
操作:删除文件

扫描完成|病毒:5 文件:14|耗时:26128
----------

[病毒样本] 都报了多少个

本帖子中包含更多资源

本帖子中包含更多资源

凝逸反毒

本帖子中包含更多资源