样本3

0106

红心王子

费尔11个

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\system3221.rar'
C:\Documents and Settings\Administrator\My Documents\
  system3221.rar
    [0] Archive type: RAR
    --> iblldx.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UZ.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> meex.com
        [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QH.59
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.17
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Agent.12288.36
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.22
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Imei
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Is the Trojan horse TR/Agent.7680.64
        [WARNING]   Infected files in archives cannot be repaired!
    --> 15.dll
        [DETECTION] Is the Trojan horse TR/Spy.Delf.KL.74
        [WARNING]   Infected files in archives cannot be repaired!
    --> 20.dll
        [DETECTION] Is the Trojan horse TR/PSW.Steal.20612
        [WARNING]   Infected files in archives cannot be repaired!
    --> edltyh.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.RT.43
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年6月6日  23:19
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
     12 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
     13 Warnings
      0 Notes
      0 Hidden objects were found

promised

请按新版规发帖
*:
C:\
C:\ABC\...\iblldx.dll : infected Trojan-PSW.Win32.OnLineGames.uz
C:\ABC\...\meex.com : infected Trojan-Downloader.Win32.Small.enf
C:\ABC\system3221.rar:<RAR>\3.exe : infected Trojan-PSW.Win32.OnLineGames.qh
C:\ABC\system3221.rar:<RAR>\4.exe : infected Trojan-PSW.Win32.OnLineGames.qy
C:\ABC\system3221.rar:<RAR>\5.exe : infected Trojan-PSW.Win32.Nilage.bjt
C:\ABC\system3221.rar:<RAR>\6.exe : infected Trojan-PSW.Win32.OnLineGames.qy
C:\ABC\system3221.rar:<RAR>\9.exe : infected Trojan-Spy.Win32.Delf.nt
C:\ABC\...\10.exe : is suspected of Embedded.Trojan-PSW.Win32.WOW.qp
C:\ABC\system3221.rar:<RAR>\15.dll : infected Trojan-Spy.Win32.Delf.kl
C:\ABC\system3221.rar:<RAR>\edltyh.dll : infected Trojan.PWS.Wsgame
Program execution terminated by user


Directories       : 4       Files in archives:      Files on disks:
Archives:                   - total       : 13      - total       : 24
- scanned         : 1       -  scanned    : 13      - scanned     : 24
- contain viruses : 1       -  infected   : 9       - infected    : 1
- deleted         : 0       -  suspicious : 1       - suspicious  : 0

Startup    : 14:20:19 07-06-2007
End        : 14:20:24 07-06-2007
Total time : 00:00:05
终止批处理操作吗(Y/N)?

wangjay1980

新版规发帖！

1688388728

编辑

[ 本帖最后由 1688388728 于 2007-6-7 14:50 编辑 ]

taihuxian

Virus: Trojan-PSW.Win32.OnLineGames.uz, Virus.Win32.AutoRun.s, Trojan-PSW.Win32.OnLineGames.qh, Trojan-PSW.Win32.OnLineGames.qy (2x), Trojan-PSW.Win32.Nilage.bjt, Trojan-PSW.Win32.OnLineGames.qw, Trojan-Spy.Win32.Delf.nt, Trojan-PSW.Win32.WOW.qp, Trojan-Spy.Win32.Delf.kl, Trojan-PSW.Win32.OnLineGames.rt

Virus found while downloading Web content.

Address: bbs.kafan.cn

扫描开始时间: 2007-6-7 19:23:39
扫描日志
NOD32 版本 2314 (20070606) NT
命令行: F:\virus\样本3\system3221.rar

日期: 2007年6月7日  时间: 19:23:40
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\样本3\system3221.rar
F:\virus\样本3\system3221.rar ?RAR ?iblldx.dll<病毒 - Win32/PSW.OnLineGames.NAO 木马>
F:\virus\样本3\system3221.rar ?RAR ?3.exe<病毒 - Win32/PSW.Agent.NDF 木马>
F:\virus\样本3\system3221.rar ?RAR ?4.exe<病毒 - Win32/PSW.Agent.NCC 木马>
F:\virus\样本3\system3221.rar ?RAR ?5.exe<病毒 - Win32/PSW.OnLineGames.NAG 木马 变种>
F:\virus\样本3\system3221.rar ?RAR ?6.exe<病毒 - Win32/PSW.Agent.NCC 木马 变种>
F:\virus\样本3\system3221.rar ?RAR ?7.exe<病毒 - Win32/PSW.OnLineGames.QW 木马>
F:\virus\样本3\system3221.rar ?RAR ?9.exe<病毒 - Win32/PSW.Delf.NGU 木马>
F:\virus\样本3\system3221.rar ?RAR ?10.exe<病毒 - Win32/PSW.Agent.NEW 木马 变种>
F:\virus\样本3\system3221.rar ?RAR ?15.dll<病毒 - 可能是 Win32/Genetik 木马 变种>
F:\virus\样本3\system3221.rar ?RAR ?20.dll<病毒 - 可能是 Win32/Genetik 木马 变种>
已扫描文件数量: 12
已发现病毒数量: 10
完成时间: 19:23:44 总共扫描时间: 4 秒 (00:00:04)

欠妳緈諨

拦截了

harry_chang2003

有比PC-cillin 2005DIY版強的嗎??
[:27:]

PC-cillin 2005全殺

其中
已知8
啟發4
報殼0