别人机子上的17个[没有毒的已经去掉]

浪滔天

卡巴 7.0.1.282 BETA  高启发 10个

已隔离: 病毒 Heur.Downloader （变种）        文件: F:\病毒样本\system32.rar/qqsetups.log
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpo        文件: F:\病毒样本\system32.rar/LYMANGR.DLL//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hql        文件: F:\病毒样本\system32.rar/gdjzi32.dll//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hqo        文件: F:\病毒样本\system32.rar/dthxatl.dll//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hzt        文件: F:\病毒样本\system32.rar/LotusHlp.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.igh        文件: F:\病毒样本\system32.rar/gdzhtui32.dll//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ihi        文件: F:\病毒样本\system32.rar/NVDispDrv.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ikh        文件: F:\病毒样本\system32.rar/DbgHlp32.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.iox        文件: F:\病毒样本\system32.rar/gdwmi32.dll//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ipo        文件: F:\病毒样本\system32.rar/videodevice.dll//UPack

663219623

KILL冠群金辰 杀    就是那么硬  o(∩_∩)o...哈哈

葬禮

Fs下載自動擋 了

zwl2828

C:\Users\Administrator\Desktop\maran.rar » RAR » Pause.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\maran.rar » RAR » jar.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Users\Administrator\Desktop\maran.rar » RAR » dlyy.dll - probably a variant of Win32/PSW.Lineage.DN trojan
C:\Users\Administrator\Desktop\maran.rar » RAR » con32.dll - a variant of Win32/PSW.Lineage.DN trojan
C:\Users\Administrator\Desktop\maran.rar » RAR » temp.exe - a variant of Win32/PSW.Maran trojan

风野胤

原帖由 zwl2828 于 2007-11-24 19:14 发表
C:\Users\Administrator\Desktop\maran.rar » RAR » Pause.exe - probably a variant of Win32/Genetik trojan
C:\Users\Administrator\Desktop\maran.rar » RAR » jar.exe - a variant of ...

小夏
贴错日志了。。。。。。

SONGBOWEN

小红伞过了两个？上报……
Begin scan in 'C:\Documents and Settings\Administrator\桌面\system32.rar'
C:\Documents and Settings\Administrator\桌面\system32.rar
  [0] Archive type: RAR
  --> 3389.EXE
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
  --> DbgHlp32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ikh.3
  --> dthxatl.dll
      [DETECTION] Is the Trojan horse TR/Gendal.7624
  --> gdjzi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdwmi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdzhtui32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> GenProtect.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> lasse.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> LotusHlp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hzt.7
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MsPrint32D.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.hcv
  --> NVDispDrv.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> qqsetupe.log
      [DETECTION] Contains suspicious code HEUR/Malware
  --> SHQ.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> videodevice.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.adu.2
      [WARNING]   The file was ignored!


End of the scan: 2007年11月24日  19:31
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     18 Files were scanned
     12 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      6 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

SONGBOWEN

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ikh        文件: C:\Documents and Settings\Administrator\桌面\system32\DbgHlp32.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.hqo        文件: C:\Documents and Settings\Administrator\桌面\system32\dthxatl.dll//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.hql        文件: C:\Documents and Settings\Administrator\桌面\system32\gdjzi32.dll//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.iox        文件: C:\Documents and Settings\Administrator\桌面\system32\gdwmi32.dll//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.igh        文件: C:\Documents and Settings\Administrator\桌面\system32\gdzhtui32.dll//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.hzt        文件: C:\Documents and Settings\Administrator\桌面\system32\LotusHlp.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.hpo        文件: C:\Documents and Settings\Administrator\桌面\system32\LYMANGR.DLL//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ihi        文件: C:\Documents and Settings\Administrator\桌面\system32\NVDispDrv.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ipo        文件: C:\Documents and Settings\Administrator\桌面\system32\videodevice.dll//UPack

卡巴过了8个……还不如小红伞呢……

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Hack.Win32.Agent.cr      
病毒： Trojan.PSW.Win32.GameOnline.amc
病毒： Trojan.PSW.Win32.GameOnline.aea
病毒： Trojan.PSW.Win32.ZeroOnline.cn
病毒： Trojan.PSW.Win32.WorldOnline.mb
病毒： Trojan.PSW.Win32.GameOnline.ake
病毒： Trojan.PSW.Win32.GameOnline.ahg
病毒： Trojan.PSW.Win32.XYOnline.jy
病毒： Trojan.PSW.Win32.GameOnline.ako
病毒： Trojan.PSW.Win32.GameOnline.akv
病毒： Trojan.PSW.Win32.QQGame.az

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.52

SONGBOWEN

IK也过了2个？这两个是吗？
小红伞和IK，启发最强的都过了……

woai_jolin

Date,Virus Name,Virus Type,User,Filename,Scan Type
2007-11-24 19:38:34,TrojanDownloader.Nurech.bd.bmqk,木马,Administrator,G:\V\system32.rar>>qqsetupe.log,Manual scan
2007-11-24 19:38:34,TrojanPSW.OnLineGames.hpo.rzzn.dll,木马,Administrator,G:\V\system32.rar>>LYMANGR.DLL,Manual scan
2007-11-24 19:38:34,TrojanPSW.OnLineGames.hzt.gxvs.dll,木马,Administrator,G:\V\system32.rar>>LotusHlp.dll,Manual scan
2007-11-24 19:38:33,Heuri.Possible/Packed,启发式扫描,Administrator,G:\V\system32.rar>>lasse.exe,Manual scan
2007-11-24 19:38:33,TrojanPSW.OnLineGames.hql.gxfw.dll,木马,Administrator,G:\V\system32.rar>>gdjzi32.dll,Manual scan
2007-11-24 19:38:33,Hacktool.Agent.cr.cxlh,黑客工具,Administrator,G:\V\system32.rar>>3389.EXE,Manual scan