某贴挖的31个盗号

promised

[ 本帖最后由 promised 于 2007-11-25 21:10 编辑 ]

qigang

Auto那帖子吗？

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.LMir.yyy
病毒： Trojan.PSW.Win32.GameOnline.apd
病毒： Trojan.PSW.Win32.GameOnline.apa
病毒： Trojan.PSW.Win32.GameOnline.aoa
病毒： Trojan.PSW.Win32.GameOnline.apf
病毒： Trojan.PSW.Win32.QQSG.ai
病毒： Trojan.PSW.Win32.GameOnline.ans
病毒： Trojan.PSW.Win32.GameOnline.ape
病毒： Trojan.PSW.Win32.XYOnline.tq
病毒： Trojan.PSW.Win32.LMir.yys
病毒： Trojan.PSW.Win32.GameOnline.apd
病毒： Trojan.PSW.Win32.GameOnline.anu
病毒： Trojan.PSW.Win32.GameOnline.aod
病毒： Trojan.PSW.Win32.XYOnline.tq
病毒： Trojan.PSW.Win32.XYOnline.to
病毒： Trojan.PSW.Win32.XYOnline.tq
病毒： Trojan.PSW.Win32.GameOnline.apf
病毒： Trojan.PSW.Win32.QQSG.ai
病毒： Trojan.PSW.Win32.GameOnline.aoe
病毒： Trojan.PSW.Win32.GameOnline.ape

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.62

shixinlong044

咔吧7报，费尔27个，红伞23个毒4个可疑

Graybird

Starting the file scan:

Begin scan in 'E:\样本1.rar'
E:\样本1.rar
  [0] Archive type: RAR
  --> 608769MM.DLL
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> AVPSrv.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> GenProtect.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> Kvsc3.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> LotusHlp.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> mppds.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> msccrt.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MsIMMs32.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MsPrint32D.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> NVDispDRV.EXE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> mh0618.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> cq0619.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> AVPSrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> cmdbcs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> GenProtect.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> LotusHlp.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> mppds.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> msccrt.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> MsIMMs32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MsPrint32D.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> NVDispDrv.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> upxdnd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月25日  21:11
Used time: 00:36 min

The scan has been done completely.

      0 Scanning directories
     32 Files were scanned
     24 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

The EQs

E:\Download\样本1.rar » RAR » 608769MM.DLL - Win32/PSW.Legendmir.NFF trojan
E:\Download\样本1.rar » RAR » AVPSrv.exE - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » cmdbcs.exe - a variant of Win32/PSW.OnLineGames.YA trojan
E:\Download\样本1.rar » RAR » DbgHlp32.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » GenProtect.exe - a variant of Win32/PSW.OnLineGames.YA trojan
E:\Download\样本1.rar » RAR » Kvsc3.exE - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » LotusHlp.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » mppds.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » msccrt.exe - a variant of Win32/PSW.OnLineGames.YA trojan
E:\Download\样本1.rar » RAR » MsIMMs32.exE - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » MsPrint32D.exe - Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » NVDispDRV.EXE - Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » upxdnd.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » mh0618.exe - Win32/PSW.Agent.NEC trojan
E:\Download\样本1.rar » RAR » cq0619.exe - Win32/PSW.WOW.WU trojan
E:\Download\样本1.rar » RAR » AVPSrv.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » cmdbcs.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » DbgHlp32.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » GenProtect.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » Kvsc3.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » LotusHlp.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » LYLOADER.EXE - Win32/PSW.Agent.NEC trojan
E:\Download\样本1.rar » RAR » LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan
E:\Download\样本1.rar » RAR » mppds.dll - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » msccrt.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\Download\样本1.rar » RAR » MSDEG32.DLL - Win32/PSW.OnLineGames.DVV trojan
E:\Download\样本1.rar » RAR » MsIMMs32.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » MsPrint32D.dll - Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » NVDispDrv.dll - Win32/PSW.OnLineGames.HCV trojan
E:\Download\样本1.rar » RAR » upxdnd.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan

[ 本帖最后由 EQ2 于 2007-11-25 21:16 编辑 ]

hunghung2hk

kis 7查到病毒

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ieg        檔案: C:\Documents and Settings\kato9096\桌面\161901\608769MM.DLL
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\AVPSrv.exE//PE_Patch//UPack
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\cmdbcs.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Lmir.boy        檔案: C:\Documents and Settings\kato9096\桌面\161901\cq0619.exe//ASPack
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\DbgHlp32.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ipf        檔案: C:\Documents and Settings\kato9096\桌面\161901\GenProtect.exe//UPack
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\Kvsc3.exE//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iob        檔案: C:\Documents and Settings\kato9096\桌面\161901\LotusHlp.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ikn        檔案: C:\Documents and Settings\kato9096\桌面\161901\LYLOADER.EXE//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ikn        檔案: C:\Documents and Settings\kato9096\桌面\161901\LYMANGR.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ikn        檔案: C:\Documents and Settings\kato9096\桌面\161901\mh0618.exe
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\mppds.exe//PE_Patch//UPack
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\msccrt.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ikn        檔案: C:\Documents and Settings\kato9096\桌面\161901\MSDEG32.DLL//UPack
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\MsIMMs32.exE//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.imv        檔案: C:\Documents and Settings\kato9096\桌面\161901\MsPrint32D.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.imv        檔案: C:\Documents and Settings\kato9096\桌面\161901\MsPrint32D.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.inv        檔案: C:\Documents and Settings\kato9096\桌面\161901\NVDispDRV.EXE//PE_Patch//UPack//PE_Patch
已隔離: 病毒 Heur.Invader (修改)        檔案: C:\Documents and Settings\kato9096\桌面\161901\upxdnd.exe//PE_Patch//UPack

19个，好多变种, 8个变种,12个没报，已上报２０个

promised

C:\ABC\样本1.rar
        C:\ABC\样本1.rar\608769MM.DLL
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\样本1.rar\608769MM.DLL
        C:\ABC\样本1.rar\AVPSrv.exE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\AVPSrv.exE
        C:\ABC\样本1.rar\cmdbcs.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\cmdbcs.exe
        C:\ABC\样本1.rar\DbgHlp32.exe
>>> Virus 'Mal/Behav-156' found in file C:\ABC\样本1.rar\DbgHlp32.exe
        C:\ABC\样本1.rar\GenProtect.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\GenProtect.exe
        C:\ABC\样本1.rar\Kvsc3.exE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\Kvsc3.exE
        C:\ABC\样本1.rar\LotusHlp.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\LotusHlp.exe
        C:\ABC\样本1.rar\mppds.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\mppds.exe
        C:\ABC\样本1.rar\msccrt.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\msccrt.exe
        C:\ABC\样本1.rar\MsIMMs32.exE
>>> Virus 'Mal/Behav-156' found in file C:\ABC\样本1.rar\MsIMMs32.exE
        C:\ABC\样本1.rar\MsPrint32D.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\MsPrint32D.exe
        C:\ABC\样本1.rar\NVDispDRV.EXE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\NVDispDRV.EXE
        C:\ABC\样本1.rar\upxdnd.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\upxdnd.exe
        C:\ABC\样本1.rar\mh0618.exe
        C:\ABC\样本1.rar\mh0618.exe\FILE:0000
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\mh0618.exe\FILE:0000
>>> Virus 'Mal/PWS-N' found in file C:\ABC\样本1.rar\mh0618.exe
        C:\ABC\样本1.rar\cq0619.exe
        C:\ABC\样本1.rar\cq0619.exe\FILE:0000
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\样本1.rar\cq0619.exe\FILE:0000
        C:\ABC\样本1.rar\cq0619.exe\FILE:0000
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\样本1.rar\cq0619.exe\FILE:0000
>>> Virus 'Mal/Behav-031' found in file C:\ABC\样本1.rar\cq0619.exe
        C:\ABC\样本1.rar\AVPSrv.dll
>>> File "C:\ABC\样本1.rar\AVPSrv.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本1.rar\cmdbcs.dll
>>> File "C:\ABC\样本1.rar\cmdbcs.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本1.rar\DbgHlp32.dll
>>> File "C:\ABC\样本1.rar\DbgHlp32.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本1.rar\GenProtect.dll
>>> File "C:\ABC\样本1.rar\GenProtect.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本1.rar\Kvsc3.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本1.rar\Kvsc3.dll
        C:\ABC\样本1.rar\LotusHlp.dll
>>> File "C:\ABC\样本1.rar\LotusHlp.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本1.rar\LYLOADER.EXE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\LYLOADER.EXE
        C:\ABC\样本1.rar\LYMANGR.DLL
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\LYMANGR.DLL
        C:\ABC\样本1.rar\mppds.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本1.rar\mppds.dll
        C:\ABC\样本1.rar\msccrt.dll
>>> Virus 'Mal/Gampass-A' found in file C:\ABC\样本1.rar\msccrt.dll
        C:\ABC\样本1.rar\MSDEG32.DLL
>>> Virus 'Mal/Packer' found in file C:\ABC\样本1.rar\MSDEG32.DLL
        C:\ABC\样本1.rar\MsIMMs32.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本1.rar\MsIMMs32.dll
        C:\ABC\样本1.rar\MsPrint32D.dll
>>> File "C:\ABC\样本1.rar\MsPrint32D.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本1.rar\NVDispDrv.dll
>>> File "C:\ABC\样本1.rar\NVDispDrv.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本1.rar\REGKEY.hiv
        C:\ABC\样本1.rar\upxdnd.dll
>>> File "C:\ABC\样本1.rar\upxdnd.dll" has been identified as suspicious 'Sus/Zhengtu-A'.

wangfeng66

C:\样本.rar\608769MM.DLL - probably infected with DLOADER.Trojan
C:\样本.rar\AVPSrv.exE - infected with Trojan.PWS.Wsgame.2138
C:\样本.rar\cmdbcs.exe - infected with Trojan.PWS.Gamania.origin
C:\样本.rar\DbgHlp32.exe - infected with Trojan.PWS.Gamania.origin
C:\样本.rar\GenProtect.exe - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\Kvsc3.exE - infected with Trojan.PWS.Gamania.origin
C:\样本.rar\LotusHlp.exe - infected with Trojan.PWS.Wsgame.2152
C:\样本.rar\mppds.exe - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\msccrt.exe - probably infected with MULDROP.Trojan
C:\样本.rar\MsIMMs32.exE - infected with Trojan.PWS.Gamania.origin
C:\样本.rar\MsPrint32D.exe - infected with Trojan.PWS.Wsgame.2140
C:\样本.rar\NVDispDRV.EXE - infected with Trojan.PWS.Wsgame.2156
C:\样本.rar\upxdnd.exe - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\mh0618.exe - infected with Trojan.DownLoader.36882
C:\样本.rar\cq0619.exe - infected with Trojan.PWS.Legmir.1967
C:\样本.rar\AVPSrv.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\cmdbcs.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\DbgHlp32.dll - infected with Trojan.PWS.Gamania.origin
C:\样本.rar\GenProtect.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\Kvsc3.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\LotusHlp.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\LYLOADER.EXE - infected with Trojan.DownLoader.36882
C:\样本.rar\LYMANGR.DLL - infected with Trojan.PWS.Wsgame.2153
C:\样本.rar\mppds.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\msccrt.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\MSDEG32.DLL - infected with Trojan.PWS.Wsgame.2157
C:\样本.rar\MsIMMs32.dll - infected with Trojan.PWS.Wsgame.origin
C:\样本.rar\MsPrint32D.dll - infected with Trojan.PWS.Wsgame.2141
C:\样本.rar\upxdnd.dll - infected with Trojan.PWS.Wsgame.origin

Archive contains 29 infected items
DRWEB  4.44      29KILL