16病毒样本

moonsilver

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOnline.att
病毒： Trojan.Win32.Mnless.zqz  
病毒： Trojan.PSW.Win32.Woool.c
病毒： Trojan.PSW.Win32.GameOnline.auk
病毒： Trojan.PSW.Win32.GameOnline.asq
病毒： Trojan.PSW.Win32.GameOnline.asm

用户来源：互联网

软件版本：20.20.52

cs32401

nod32杀了16个，一个不漏

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\Drive.rar'
C:\Users\morgan\Documents\
  Drive.rar
    [0] Archive type: RAR
      --> my0616.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> qj0617.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> qqhx.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> qqsg.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> tl0619.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> wd0618.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> wl0618.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
    --> wow0617.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
        [WARNING]   Infected files in archives cannot be repaired!
      --> zt0616.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
    --> 792405C6.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      --> cq0619.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> cs0619.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> dh3.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> dh0616.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.25088.2
              [WARNING]   Infected files in archives cannot be repaired!
      --> jh0619.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> mh0618.exe
        [1] Archive type: RSRC
        --> Object
      [WARNING]   The file was ignored!


End of the scan: 2007年12月1日  20:02
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     17 Files were scanned
     10 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
     15 Archives were scanned
     16 Warnings
      0 Notes

promised

C:\ABC\Drive.rar:\my0616.exe - 特征码 'Trojan-Spy.Win32.Agent.hz' 被发现
C:\ABC\Drive.rar:\qj0617.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\qqhx.exe - 特征码 'Trojan-Spy.Win32.Agent.hz' 被发现
C:\ABC\Drive.rar:\qqsg.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\tl0619.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\wd0618.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\wl0618.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\wow0617.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\zt0616.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\792405C6.exe - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\Drive.rar:\cq0619.exe - 特征码 'Trojan-PWS.Win32.WOW.vd' 被发现
C:\ABC\Drive.rar:\cs0619.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hfr' 被发现
C:\ABC\Drive.rar:\dh3.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\dh0616.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\jh0619.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Drive.rar:\mh0618.exe - 特征码 'Virus.Win32.OnLineGames.SR' 被发现
C:\ABC\Drive.rar

zwl2828

C:\Users\Wesley\Desktop\Drive.rar » RAR » my0616.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » qj0617.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » qqhx.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » qqsg.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » tl0619.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » wd0618.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » wl0618.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » wow0617.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » zt0616.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » 792405C6.exe - probably a variant of Win32/Genetik trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » cq0619.exe - Win32/PSW.WOW.WU trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » cs0619.exe - Win32/PSW.WOW.WU trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » dh3.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » dh0616.exe - Win32/PSW.OnLineGames.NFL trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » jh0619.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Users\Wesley\Desktop\Drive.rar » RAR » mh0618.exe - Win32/PSW.Agent.NEC trojan

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOnline.avr
病毒： Trojan.PSW.Win32.SunOnline.ij
病毒： Trojan.PSW.Win32.GameOnline.att
病毒： Trojan.PSW.Win32.QQSG.au
病毒： Trojan.PSW.Win32.GameOnline.avs
病毒： Trojan.PSW.Win32.GameOnline.avt
病毒： Trojan.PSW.Win32.GameOnline.avu
病毒： Trojan.PSW.Win32.GameOnline.avv
病毒： Trojan.PSW.Win32.GameOnline.avw
病毒： Worm.Win32.Agent.zep     
病毒： Trojan.Win32.Mnless.zqz  
病毒： Trojan.PSW.Win32.Woool.c
病毒： Trojan.PSW.Win32.GameOnline.auk
病毒： Trojan.PSW.Win32.GameOnline.asq
病毒： Trojan.PSW.Win32.GameOnline.avq
病毒： Trojan.PSW.Win32.GameOnline.asm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.20.62

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1009
Paranoia Database - 49435
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\my0616.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\qj0617.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\qqhx.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\qqsg.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\tl0619.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\wd0618.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\wl0618.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\wow0617.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\zt0616.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\792405C6.exe - Infected BACKDOOR.AGENT.9 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\cq0619.exe - Infected WIN32.TROJAN-PSW.LMIR.6 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\cs0619.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.G - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\dh3.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\dh0616.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\jh0619.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\mh0618.exe - Infected TROJAN-PSW.ONLINEGAMES.U - Deleted

16 Files scanned
4 Infected files found
12 Suspected files found
0 Files disinfected
4 Files deleted

qcs_93140521

金山毒霸2007报13个病毒木马，1个风险程序！

28654621

D:\download\Drive.rar\my0616.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\qj0617.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\qqhx.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\qqsg.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\tl0619.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\wd0618.exe\[Upack] [L] Win32:OnLineGames-BCD [Trj] (0)
D:\download\Drive.rar\wl0618.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\wow0617.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\zt0616.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\792405C6.exe\[NsPack]\[Embedded#05010] [L] Win32:AutoRun-IC (0)
D:\download\Drive.rar\cq0619.exe\[ASPack]\[Embedded#J999666] [L] Win32:Lmir-OK [Trj] (0)
D:\download\Drive.rar\cs0619.exe\[ASPack]\[Embedded#ABCDE] [L] Win32:OnLineGames-ALS [Trj] (0)
D:\download\Drive.rar\dh3.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\dh0616.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\jh0619.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\Drive.rar\mh0618.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack] [L] Win32:OnLineGames-BIV [Trj] (0)
D:\download\Drive.rar\mh0618.exe [L] Win32:OnLineGames-SR [Trj] (0)
已感染文件: 17
总共文件: 54
总共文件夹: 1
总共大小: 2.0 MB

scottxzt

全部已知