毒来了(样本)

微点卫士

木马名称:Trojan-PSW.Win32.OnLineGames.rue

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\KVDXEIS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.efx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\KVDXSCIS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sas

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\RAQJCTL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.reg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\RATBFTL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.pwo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\RSZTSASP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qto

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\SIDJAAZ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.QQPass.gfx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\AUTORUN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.scd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\AVWLCST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.rza

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\AVZXEST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ric

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\KAPJBAZ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\KVMXFIS.EXE
1) C:\DFD11451640.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\QQ.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\RSMYFSP.EXE
1) C:\DFD11476921.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.XYOnline.nr
病毒： Trojan.PSW.Win32.XYOnline.nc
病毒： Trojan.PSW.Win32.QQPass.ytv
病毒： Trojan.PSW.Win32.SunOnline.eq
病毒： Trojan.PSW.Win32.AskTao.dm
病毒： Trojan.PSW.Win32.RocOnline.gj
病毒： Trojan.PSW.Win32.OnlineGames.ywy
病毒： Trojan.PSW.Win32.DJOnline.v
病毒： Worm.Win32.PaBug.be      
病毒： Trojan.PSW.Win32.GameOnline.el
病毒： Trojan.PSW.Win32.WoWar.acf
病毒： Trojan.PSW.Win32.NSword.ce

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.14.62

promised

C:\ABC\SYSTEM32.rar:\KVDXEIS.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\KVDXSCIS.EXE - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\SYSTEM32.rar:\KVMXFIS.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\QQ.exe - 特征码 'Dialer' 被发现
C:\ABC\SYSTEM32.rar:\RAQJCTL.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\RATBFTL.EXE - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\SYSTEM32.rar:\RSMYFSP.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\RSZTSASP.EXE - 特征码 'Trojan-PWS.Win32.OnLineGames.dki' 被发现
C:\ABC\SYSTEM32.rar:\SIDJAAZ.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\AUTORUN.EXE - 特征码 'Virus.Win32.AutoRun.bs' 被发现
C:\ABC\SYSTEM32.rar:\AVWLCST.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\AVZXEST.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\CAOMSNIMA.DLL - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar:\KAPJBAZ.EXE - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\SYSTEM32.rar

398566384

瑞星14个

秋叶濛濛

被通杀了就不测试咯

The EQs

C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » KVDXEIS.EXE - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » KVDXSCIS.EXE - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » KVMXFIS.EXE - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » QQ.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » RAQJCTL.EXE - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » RATBFTL.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » RSMYFSP.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » RSZTSASP.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » SIDJAAZ.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » AUTORUN.EXE - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » AVWLCST.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » AVZXEST.EXE - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » CAOMSNIMA.DLL - Win32/PSW.OnLineGames.FHO trojan
C:\Documents and Settings\Don johnson\桌面\SYSTEM32.rar » RAR » KAPJBAZ.EXE - a variant of Win32/PSW.OnLineGames.FDY trojan

pmj_sh

Virus: Trojan-PSW.Win32.OnLineGames.flj (4x), Trojan-Spy.Win32.Delf.anh, Trojan-PSW.Win32.Delf.afn, Trojan-PSW.Win32.OnLineGames.fqg, Trojan-PSW.Win32.OnLineGames.fdy, Trojan-PSW.Win32.OnLineGames.fmr, Trojan-PSW.Win32.OnLineGames.dki, Trojan-PSW.Win32.OnLineGames.fbt, Trojan-PSW.Win32.QQPass.aic, Trojan-PSW.Win32.OnLineGames.fho, Trojan-PSW.Win32.OnLineGames.fgd
File: SYSTEM32[1].rar

asdfgh

我的红伞，报扫15个，14个病毒

平淡

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 656
Paranoia Database - 48035
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\KVDXEIS.EXE - Infected TROJAN-PSW.ONLINEGAMES.65 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\KVDXSCIS.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\KVMXFIS.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\QQ.exe - Suspected MALWAREDETECTOR:WIN32.GENERIC.PSW.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\RAQJCTL.EXE - Infected GENERIC.MALWARE.14789.513 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\RATBFTL.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\RSMYFSP.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\RSZTSASP.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\SIDJAAZ.EXE - Infected TROJAN-PSW.ONLINEGAMES.59 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AUTORUN.EXE - Infected WIN32.TROJAN-PSW.QQPASS.B - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AVWLCST.EXE - Infected GENERIC.MALWARE.14995.D61 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AVZXEST.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\CAOMSNIMA.DLL - Suspected MALWAREDETECTOR:GENERIC.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\KAPJBAZ.EXE - Suspected MALWAREDETECTOR:GENERIC.PSW.3

14 Files scanned
5 Infected files found
9 Suspected files found
0 Files cured
5 Files deleted