生成物 x 21

qianwenxiang

[MD5: 26D714 7CBD8D E67AE1 8E0C00 AF99B3 6E297B 183D60 DD5AD7 914315 1FF033 2EDA8A 07A0E4 7C72C3 62831B 68DF49 A9CF4A F78506 5E4978 D9414B E3DC37 FE4FEA]

tracydk

10个

The EQs

Scan performed at: 2007-8-23 17:35:07
Scanning Log
NOD32 version 2477 (20070823) NT
Command line: C:\Documents and Settings\Don johnson\桌面\082303.rar
Operating memory - is OK

Date: 23.8.2007  Time: 17:35:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\082303.rar
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?myeins.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?myepri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?tluins.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?tlupri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?ztmins.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?ztmpri.dll - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?ravdhmon.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?ravdhmon.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?RAVCQMON.DAT - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?RAVCQMON.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?SysWin64.Jmp - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?SysWin64.Sys - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?MsIMMs32.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\082303.rar ?RAR ?WinForm.exe - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 22
Number of threats found: 14
Number of files cleaned: 1
Time of completion: 17:35:14 Total scanning time: 2 sec (00:00:02)

Nerazzurri

扫描进行于：2007-8-23 17:36:03
扫描日志
NOD32版本 2477 (20070823) NT
命令行： C:\Documents and Settings\Administrator\桌面\082303.rar

日期： 23.8.2007  时间：17:36:08
已开启反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\Administrator\桌面\082303.rar
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>myeins.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>myepri.dll - Win32/PSW.OnLineGames.NEN 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>tluins.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>tlupri.dll - Win32/PSW.OnLineGames.NEN 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>ztmins.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>ztmpri.dll - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>ravdhmon.dat - Win32/PSW.OnLineGames.NCU 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>ravdhmon.exe - Win32/PSW.OnLineGames.NEP 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>RAVCQMON.DAT - Win32/PSW.OnLineGames.NCU 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>RAVCQMON.exe - Win32/PSW.OnLineGames.NEP 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>SysWin64.Jmp - 可能是 Win32/AutoRun.Q 蠕虫 的一个变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>SysWin64.Sys - Win32/AutoRun.Q 蠕虫的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>MsIMMs32.exe - Win32/PSW.OnLineGames.YA 木马的变种
C:\Documents and Settings\Administrator\桌面\082303.rar >>RAR >>WinForm.exe - Win32/PSW.OnLineGames.YA 木马的变种
已扫描的文件数目：21
已发现的病毒数目：14
完成时间： 17:36:12 总扫描时间：4 秒 (00:00:04)

liaoying112

金山杀了

lsyer

C:\Documents and Settings\lsy\桌面\082303\MsIMMs32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\MsIMMs32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\mssql.dll
      [DETECTION] Is the Trojan horse TR/Agent.19600
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\myeins.exe
      [DETECTION] Is the Trojan horse TR/Agent.12714
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\myepri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\RAVCQMON.DAT
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\RAVCQMON.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\ravdhmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\ravdhmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\SysWin64.Jmp
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\SysWin64.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\tluins.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\tlupri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\WinForm.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\WinForm.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\ztmins.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\lsy\桌面\082303\ztmpri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!

promised

C:\ABC\082303\MsIMMs32.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\082303\MsIMMs32.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\082303\mssock.sys - 特征码 'Trojan.Win32.Agent.anj' 被发现
C:\ABC\082303\mssql.dll - 特征码 'Win32.SuspectCrc' 被发现
C:\ABC\082303\mydini.dll
C:\ABC\082303\myeins.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\082303\myepri.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\082303\RAVCQMON.DAT - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\082303\RAVCQMON.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\082303\ravdhmon.dat - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\082303\ravdhmon.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\082303\SysWin64.Jmp - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\082303\SysWin64.Sys - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\082303\tlrini.dll
C:\ABC\082303\tluins.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\082303\tlupri.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\082303\WinForm.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\082303\WinForm.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\082303\ztmini.dll
C:\ABC\082303\ztmins.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\082303\ztmpri.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现

        21 文件被扫描
          (0 压缩档 0 文件)
        18 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.281

promised

ik杀剩的是几个十位数字节损坏的dll ~~

lsyer

天啊
用卡巴试一下
拖个壳磨半天

欠妳緈諨

这种回复有灌水嫌疑