49个

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> djatl.dll
      [DETECTION] Is the Trojan horse TR/Agent.AFVL
  --> dthxatl.dll
      [DETECTION] Is the Trojan horse TR/Gendal.7624
  --> gdfyi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdjzi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdmsi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> gdwdi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdwli32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdwmi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdxwtwi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gdzxi32.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> gjatl.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Agent.AFVL
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 20.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 21.exe
      [DETECTION] Is the Trojan horse TR/Gendal.7624
  --> 22.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 23.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hzt.7
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> GenProtect.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iha.1
  --> GenProtect.exE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> NVDispDrv.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ihi
  --> qqhxatl.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> qqsgatl.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> sqmapi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.adu.2
  --> SVCCtrl01.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hys.2
  --> tlatl.dll
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> videodevice.dll
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 0.exe
      [DETECTION] Is the Trojan horse TR/Killav.GE.3
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> LotusHlp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hzt.7
  --> cmdbcs.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iax.1
      [INFO]      The file was deleted!


End of the scan: 星期日 2007年12月2日  21:09
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     51 Files were scanned
     49 viruses and/or unwanted programs were found

haol

avg found 49 threats

sam.to

Hello,

gdjzi32.dll - Trojan-PSW.Win32.OnLineGames.hql,
gdwli32.dll - Trojan-PSW.Win32.OnLineGames.iua

These files are already detected. Please update your antivirus bases.

gdwdi32.dll - Trojan-PSW.Win32.OnLineGames.jiq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1009
Paranoia Database - 49435
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\djatl.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\dthxatl.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdfyi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdjzi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdmsi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdwdi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdwli32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdwmi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdxwtwi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gdzxi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\gjatl.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\4.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\5.exe - Infected MaliciousScope:TROJAN-PSW.GAME.35 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\6.exe - Infected GENERIC.MALWARE.077.7957 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\7.exe - Infected TROJAN-DOWNLOADER.DELF.18 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\8.exe - Infected GENERIC.MALWARE.E84.51DC - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\9.exe - Infected TROJAN-PSW.ONLINEGAMES.147 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\10.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\11.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\12.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\13.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\14.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\15.exe - Suspected MaliciousScope:GENERIC.MALWARE.4
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\16.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\17.exe - Suspected MaliciousScope:TROJAN-DOWNLOADER.DELF.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\18.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\19.exe - Infected MaliciousScope:GENERIC.MALWARE.E27.4868 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\20.exe - Infected GENERIC.MALWARE.74B.4564 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\21.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\22.exe - Infected GENERIC.MALWARE.C55.42C8 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\23.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\24.exe - Infected TROJAN-PSW.ONLINEGAMES.126 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LYLOADER.EXE - Infected GENERIC.MALWARE.4A1.2EE0 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LYMANGR.DLL - Infected GENERIC.MALWARE.28C.DC2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MSDEG32.DLL - Infected GENERIC.MALWARE.334.175A - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\GenProtect.dll - Infected TROJAN-PSW.ONLINEGAMES.12 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\GenProtect.exE - Infected GENERIC.MALWARE.FAE.4258 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\NVDispDrv.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\qqhxatl.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\qqsgatl.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\sqmapi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\SVCCtrl01.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\tlatl.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\videodevice.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\0.exe - Infected TROJAN.KILLAV.2 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\1.exe - Infected TROJAN-PSW.ONLINEGAMES.U - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\3.exe - Infected GENERIC.MALWARE.18D.4FAC - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\LotusHlp.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\cmdbcs.dll - Infected TROJAN-PSW.ONLINEGAMES.12 - Deleted

49 Files scanned
31 Infected files found
17 Suspected files found
0 Files disinfected
31 Files deleted

billy_xx

NOD32全杀了，老毒了吧。

gogo8989

FS报48个

PlayWill

qcs_93140521

金山毒霸2007报49个！

shixinlong044

趋势居然这次全杀了，^_^49个

28654621

D:\download\49.rar\gdfyi32.dll\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdjzi32.dll\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdmsi32.dll\[Upack]\[Embedded#a060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdwdi32.dll\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdwli32.dll\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdwmi32.dll\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdxwtwi32.dll\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gdzxi32.dll\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\gjatl.dll\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\4.exe\[Upack]\[Embedded#7090]\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\5.exe\[NsPack]\[Embedded#04060] [L] Win32:Nilage-JY [Trj] (0)
D:\download\49.rar\6.exe\[Upack]\[Embedded#DATEINFO]\[Embedded#J999666] [L] Win32:Lmir-OK [Trj] (0)
D:\download\49.rar\7.exe\[Upack]\[Embedded#DATEINFO]\[Embedded#ABCDE] [L] Win32:OnLineGames-ALS [Trj] (0)
D:\download\49.rar\8.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#a060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\9.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\10.exe\[Upack]\[Embedded#5090]\[Upack]\[Embedded#6060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\11.exe\[Upack]\[Embedded#7090]\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\12.exe\[Upack]\[Embedded#79d0]\[Upack] [L] Win32:Agent-MDY [Trj] (0)
D:\download\49.rar\13.exe\[Upack]\[Embedded#5090]\[Upack]\[Embedded#6060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\14.exe\[Upack]\[Embedded#5090] [L] Win32:OnLineGames-BLC [Trj] (0)
D:\download\49.rar\15.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\16.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#6060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\17.exe\[NsPack]\[Embedded#04060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\18.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\19.exe\[NsPack]\[Embedded#04060] [L] Win32:Lineage-639 [Trj] (0)
D:\download\49.rar\20.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\21.exe\[Upack]\[Embedded#9dc8]\[Upack] [L] Win32:Onlinegames-BJH [Trj] (0)
D:\download\49.rar\22.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#7060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\23.exe\[Upack]\[Embedded#7090]\[Upack]\[Embedded#8060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\24.exe\[Upack]\[Embedded#04060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\LYLOADER.EXE\[Upack]\[Embedded#5158]\[Upack] [L] Win32:OnLineGames-BIV [Trj] (0)
D:\download\49.rar\LYMANGR.DLL\[Upack] [L] Win32:OnLineGames-BIV [Trj] (0)
D:\download\49.rar\MSDEG32.DLL\[Upack] [L] Win32:OnLineGames-BKV [Trj] (0)
D:\download\49.rar\GenProtect.dll [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\GenProtect.exE\[Upack]\[Embedded#04060] [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\NVDispDrv.dll [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\qqhxatl.dll [L] Win32:OnLineGames-BLC [Trj] (0)
D:\download\49.rar\qqsgatl.dll\[Upack]\[Embedded#6060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\sqmapi32.dll\[Upack] [L] Win32:Onlinegames-BJH [Trj] (0)
D:\download\49.rar\SVCCtrl01.dll [L] Win32:Lineage-639 [Trj] (0)
D:\download\49.rar\tlatl.dll\[Upack]\[Embedded#6060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\videodevice.dll\[Upack] [L] Win32:OnLineGames-BMJ [Trj] (0)
D:\download\49.rar\0.exe\[Upack] [L] Win32:Agent-LNC [Trj] (0)
D:\download\49.rar\1.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack] [L] Win32:OnLineGames-BIV [Trj] (0)
D:\download\49.rar\1.exe [L] Win32:OnLineGames-SR [Trj] (0)
D:\download\49.rar\3.exe\[Upack]\[Embedded#6090]\[Upack]\[Embedded#9060] [L] Win32:Onlinegames-BMK [Trj] (0)
D:\download\49.rar\LotusHlp.dll [L] Win32:OnLineGames-BHW [Trj] (0)
D:\download\49.rar\cmdbcs.dll [L] Win32:Nilage-JY [Trj] (0)
已感染文件: 48
总共文件: 202
总共文件夹: 1
总共大小: 5.5 MB