某贴挖的31个盗号

The EQs

sophos居然知道征途。。。。。。看来征途的影响力不小

flykiss

dr.web 4.44.1
C:\Documents and Settings\Administrator\桌面\样本1.rar\608769MM.DLL - probably infected with DLOADER.Trojan
C:\Documents and Settings\Administrator\桌面\样本1.rar\AVPSrv.exE - infected with Trojan.PWS.Wsgame.2138
C:\Documents and Settings\Administrator\桌面\样本1.rar\cmdbcs.exe - infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\DbgHlp32.exe - infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\GenProtect.exe - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\Kvsc3.exE - infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\LotusHlp.exe - infected with Trojan.PWS.Wsgame.2152
C:\Documents and Settings\Administrator\桌面\样本1.rar\mppds.exe - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\msccrt.exe - probably infected with MULDROP.Trojan
C:\Documents and Settings\Administrator\桌面\样本1.rar\MsIMMs32.exE - infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\MsPrint32D.exe - infected with Trojan.PWS.Wsgame.2140
C:\Documents and Settings\Administrator\桌面\样本1.rar\NVDispDRV.EXE - infected with Trojan.PWS.Wsgame.2156
C:\Documents and Settings\Administrator\桌面\样本1.rar\upxdnd.exe - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\mh0618.exe - infected with Trojan.DownLoader.36882
C:\Documents and Settings\Administrator\桌面\样本1.rar\cq0619.exe - infected with Trojan.PWS.Legmir.1967
C:\Documents and Settings\Administrator\桌面\样本1.rar\AVPSrv.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\cmdbcs.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\DbgHlp32.dll - infected with Trojan.PWS.Gamania.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\GenProtect.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\Kvsc3.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\LotusHlp.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\LYLOADER.EXE - infected with Trojan.DownLoader.36882
C:\Documents and Settings\Administrator\桌面\样本1.rar\LYMANGR.DLL - infected with Trojan.PWS.Wsgame.2153
C:\Documents and Settings\Administrator\桌面\样本1.rar\mppds.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\msccrt.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\MSDEG32.DLL - infected with Trojan.PWS.Wsgame.2157
C:\Documents and Settings\Administrator\桌面\样本1.rar\MsIMMs32.dll - infected with Trojan.PWS.Wsgame.origin
C:\Documents and Settings\Administrator\桌面\样本1.rar\MsPrint32D.dll - infected with Trojan.PWS.Wsgame.2141
C:\Documents and Settings\Administrator\桌面\样本1.rar\upxdnd.dll - infected with Trojan.PWS.Wsgame.origin

Archive contains 29 infected items

sam.to

Hello,

AVPSrv.dll, AVPSrv.exe_, cmdbcs.dll, cmdbcs.exe_, DbgHlp32.dll, DbgHlp32.exe_, Kvsc3.dll, Kvsc3.exe_, mppds.dll, mppds.exe_, msccrt.dll, msccrt.exe_, MsIMMs32.dll, MsIMMs32.exe_, upxdnd.dll, upxdnd.exe_ - Trojan-PSW.Win32.OnLineGames.isb,
GenProtect.dll - Trojan-PSW.Win32.OnLineGames.ise,
LotusHlp.dll - Trojan-PSW.Win32.OnLineGames.isd,
NVDispDrv.dll - Trojan-PSW.Win32.OnLineGames.isc

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

REGKEY.hiv

This file is corrupted.

Please quote all when answering.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 981
Paranoia Database - 49114
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\608769MM.DLL - Infected WIN32.MALWARE.AGENT.6 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\AVPSrv.exE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\cmdbcs.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\DbgHlp32.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\GenProtect.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Kvsc3.exE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LotusHlp.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\mppds.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\msccrt.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MsIMMs32.exE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MsPrint32D.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\NVDispDRV.EXE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\upxdnd.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\mh0618.exe - Infected TROJAN-PSW.ONLINEGAMES.U - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\cq0619.exe - Infected WIN32.TROJAN-PSW.LMIR.6 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\AVPSrv.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\cmdbcs.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\DbgHlp32.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\GenProtect.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\Kvsc3.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LotusHlp.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LYLOADER.EXE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LYMANGR.DLL - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\mppds.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\msccrt.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MSDEG32.DLL - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MsIMMs32.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MsPrint32D.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\NVDispDrv.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\REGKEY.hiv - Infected GENERIC.MALWARE.A07.2000 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\upxdnd.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted

31 Files scanned
16 Infected files found
15 Suspected files found
0 Files disinfected
16 Files deleted

啊弥陀佛

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\AVPSRV.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\CMDBCS.EXE
木马程序生成以下文件:
1) C:\WINDOWS\CMDBCS.EXE
2) C:\WINDOWS\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\CMDBCS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\CQ0619.EXE
木马程序生成以下文件:
1) C:\WINDOWS\391231M.EXE
2) C:\WINDOWS\391231MM.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\608769MM.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\DBGHLP32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\DBGHLP32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\GENPROTECT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\GENPROTECT.EXE
2) C:\WINDOWS\SYSTEM32\GENPROTECT.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\GENPROTECT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\KVSC3.EXE
木马程序生成以下文件:
1) C:\WINDOWS\KVSC3.EXE
2) C:\WINDOWS\SYSTEM32\KVSC3.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\KVSC3.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\LOTUSHLP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\LOTUSHLP.EXE
2) C:\WINDOWS\SYSTEM32\LOTUSHLP.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\LOTUSHLP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MH0618.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS\SYSTEM32\LYLOADER.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MPPDS.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MPPDS.EXE
2) C:\WINDOWS\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MPPDS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSCCRT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSCCRT.EXE
2) C:\WINDOWS\SYSTEM32\MSCCRT.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSCCRT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSDEG32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSIMMS32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSIMMS32.EXE
2) C:\WINDOWS\SYSTEM32\MSIMMS32.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSIMMS32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSPRINT32D.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSPRINT32D.EXE
2) C:\WINDOWS\SYSTEM32\MSPRINT32D.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\MSPRINT32D.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\NVDISPDRV.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NVDISPDRV.EXE
2) C:\WINDOWS\SYSTEM32\NVDISPDRV.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\NVDISPDRV.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\UPXDND.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\UPXDND.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

wu19934718

费尔21个

cao116

金山才报了14个

jimmyleo

D:\Download\VirusScan\AVPSrv.exE        infected: Generic.PWS.Games.4.235F35F3
D:\Download\VirusScan\cmdbcs.exe        infected: Generic.PWS.Games.4.68CE86F4
D:\Download\VirusScan\DbgHlp32.exe        infected: Generic.PWS.Games.4.00EA6D39
D:\Download\VirusScan\GenProtect.exe        infected: Generic.PWS.Games.4.6044EDAC
D:\Download\VirusScan\Kvsc3.exE        infected: Generic.PWS.Games.4.4123A4F0
D:\Download\VirusScan\LotusHlp.exe        suspected: Generic.Malware.Sdld.2082720C
D:\Download\VirusScan\mppds.exe        infected: Generic.PWS.Games.4.EF4C8920
D:\Download\VirusScan\msccrt.exe        infected: Generic.PWS.Games.4.7142914B
D:\Download\VirusScan\MsIMMs32.exE        infected: Generic.PWS.Games.4.5ED1B9AC
D:\Download\VirusScan\MsPrint32D.exe        suspected: Generic.Malware.Sdld.F6C33FD8
D:\Download\VirusScan\upxdnd.exe        infected: Generic.PWS.Games.4.70D8A064
D:\Download\VirusScan\mh0618.exe        infected: Dropped:Trojan.PWS.OnlineGames.NOQ
D:\Download\VirusScan\cq0619.exe        infected: Trojan.PWS.Lmir.ULP
D:\Download\VirusScan\AVPSrv.dll        infected: DeepScan:Generic.PWS.Games.1.ED3461A4
D:\Download\VirusScan\cmdbcs.dll        infected: DeepScan:Generic.PWS.Games.1.04060DC9
D:\Download\VirusScan\DbgHlp32.dll        infected: DeepScan:Generic.PWS.Games.1.77CB362C
D:\Download\VirusScan\Kvsc3.dll        infected: DeepScan:Generic.PWS.Games.1.E4CA4CC0
D:\Download\VirusScan\LotusHlp.dll        infected: DeepScan:Generic.PWS.Games.4.74AB49CF
D:\Download\VirusScan\LYLOADER.EXE        infected: Dropped:Trojan.PWS.OnlineGames.NOQ
D:\Download\VirusScan\LYMANGR.DLL        infected: Trojan.PWS.OnlineGames.NOQ
D:\Download\VirusScan\mppds.dll        infected: DeepScan:Generic.PWS.Games.1.8ABB3FEC
D:\Download\VirusScan\msccrt.dll        infected: DeepScan:Generic.PWS.Games.1.1A96F501
D:\Download\VirusScan\MSDEG32.DLL        infected: Generic.PWS.Games.3.C1583E32
D:\Download\VirusScan\MsIMMs32.dll        infected: DeepScan:Generic.PWS.Games.1.21E65A3E
D:\Download\VirusScan\MsPrint32D.dll        infected: DeepScan:Generic.PWS.Games.4.8776F701
D:\Download\VirusScan\REGKEY.hiv        infected: Trojan.PWS.Onlinegames.AVH
D:\Download\VirusScan\upxdnd.dll        infected: DeepScan:Generic.PWS.Games.1.7A464271


27

jimmyleo

[Found possible security risk] <W32/Heuristic-KPP!Eldorado (not disinfectable)>         D:\Download\VirusScan\608769MM.DLL
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\AVPSrv.exE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\cmdbcs.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\DbgHlp32.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\GenProtect.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\Kvsc3.exE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\LotusHlp.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\mppds.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\msccrt.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\MsIMMs32.exE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\MsPrint32D.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\NVDispDRV.EXE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\upxdnd.exe->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\mh0618.exe->(embedded)->(UPack)
[Found security risk] <W32/Injector.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\cq0619.exe
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\AVPSrv.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\cmdbcs.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\DbgHlp32.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\GenProtect.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\Kvsc3.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\LotusHlp.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\LYLOADER.EXE->(UPack)
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\LYMANGR.DLL->(UPack)
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\mppds.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\msccrt.dll
[Found possible security risk] <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>         D:\Download\VirusScan\MSDEG32.DLL->(UPack)
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\MsIMMs32.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\MsPrint32D.dll
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\NVDispDrv.dll
[Clean]    D:\Download\VirusScan\REGKEY.hiv
[Found password stealer] <W32/OnlineGames.A.gen!Eldorado (generic, not disinfectable)>         D:\Download\VirusScan\upxdnd.dll

30

jimmyleo

Found [ Possible_MLWR-1](    1) in D:\Download\VirusScan\LotusHlp.exe
Found [TSPY_ONLINEG.LPE](    1) in D:\Download\VirusScan\mh0618.exe

这个经典……