网友上报的一包，看看谁杀

moonsilver

网友上报的一包，看看谁杀

Graybird

Starting the file scan:

Begin scan in 'E:\7485642007129101443.zip'
E:\7485642007129101443.zip
  [0] Archive type: ZIP
  --> windows\system32\gdmoyi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLiGames.jrs
  --> windows\system32\gdqqhxi32.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> windows\system32\gddhyi32.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> windows\system32\gdmhi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.17745
  --> windows\system32\gdqqsgi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.joj.13
  --> windows\system32\addrmshelp.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [WARNING]   The file was ignored!

leonfg

FS:
结果: 发现2个恶意软件
Trojan-PSW.Win32.OnLineGames.joj (病毒)
C:\Documents and Settings\GUNDAM\桌面\7485642007129101443.zip\windows\system32\gdqqsgi32.dll
Trojan-PSW.Win32.WOW.age (病毒)
C:\Documents and Settings\GUNDAM\桌面\7485642007129101443.zip\windows\system32\addrmshelp.dll




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 7
未扫描: 0
结果:
病毒: 2
间谍软件: 0
可疑对象: 0
危险软件: 0

gogo8989

红伞


Begin scan in 'F:\迅雷和浏览器下载\7485642007129101443.zip'
F:\迅雷和浏览器下载\7485642007129101443.zip
  [0] Archive type: ZIP
  --> windows\system32\gdmoyi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLiGames.jrs
  --> windows\system32\gdqqhxi32.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> windows\system32\gddhyi32.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> windows\system32\gdmhi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.17745
  --> windows\system32\gdqqsgi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.joj.13
  --> windows\system32\addrmshelp.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [INFO]      The file was deleted!


End of the scan: 2007年12月9日星期日  10:47
Used time: 00:01 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

detected: virus


































































































































































































êÔ’|ÿ

promised

C:\ABC\7485642007129101443.zip:\windows\system32\gdmoyi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\7485642007129101443.zip:\windows\system32\gdqqhxi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\7485642007129101443.zip:\windows\system32\gddhyi32.dll - 特征码 'Worm.Win32.Feebs.AF' 被发现
C:\ABC\7485642007129101443.zip:\windows\system32\gdmhi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\7485642007129101443.zip:\windows\system32\gdqqsgi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\7485642007129101443.zip:\windows\system32\addrmshelp.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\7485642007129101443.zip

挪威的冬天

少一个。。。

信息        2007-12-09  11:02:23        您此次查毒共查出5个病毒以及危险代码                       
信息        2007-12-09  11:02:23        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件13个                       
信息        2007-12-09  11:02:23        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-09  11:02:23        C:\Documents and Settings\Norways Winter\桌面\7485642007129101443.zip\windows\system32\addrmshelp.dll        Win32.Troj.OnlineGames.yf.73728        跳过，未处理       
病毒        2007-12-09  11:02:23        C:\Documents and Settings\Norways Winter\桌面\7485642007129101443.zip\windows\system32\gdqqsgi32.dll        Win32.Troj.OnlineGamesT.zy.90112        跳过，未处理       
病毒        2007-12-09  11:02:23        C:\Documents and Settings\Norways Winter\桌面\7485642007129101443.zip\windows\system32\gdmhi32.dll        Win32.Troj.OnlineGamesT.zy.90112        跳过，未处理       
病毒        2007-12-09  11:02:23        C:\Documents and Settings\Norways Winter\桌面\7485642007129101443.zip\windows\system32\gdqqhxi32.dll        Win32.Troj.OnlineGamesT.ty.102400        跳过，未处理       
病毒        2007-12-09  11:02:23        C:\Documents and Settings\Norways Winter\桌面\7485642007129101443.zip\windows\system32\gdmoyi32.dll        Win32.Troj.OnLimeGamesT.gs.73779        跳过，未处理

will

Win32:OnLineGames-BBH [Trj]  addrmshelp.dll
Win32:Agent-KKN [Trj]        gddhyi32.dll
Win32:Agent-KKN [Trj]        gdmhi32.dll
Win32:OnLineGames-BKU [Trj]  gdmoyi32.dll
Win32:OnLineGames-BKU [Trj]  gdqqhxi32.dll

gho

W:\windows\system32\gdqqhxi32.dll        PWS-OnlineGames.r (Trojan)
2007-12-9        11:23:33        Not scanned  (scan timed out)         WHUT-D9193C067E\gho        WinRAR.exe        W:\windows\system32\gdqqhxi32.dll         (Virus)
2007-12-9        11:23:41        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        W:\windows\system32\gdmhi32.dll        PWS-OnlineGames.r (Trojan)
2007-12-9        11:23:48        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        W:\windows\system32\gdqqsgi32.dll        PWS-OnlineGames.r (Trojan)
2007-12-9        11:23:55        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        W:\windows\system32\addrmshelp.dll        PWS-OnlineGames.r (Trojan)

gho

还剩一个
detected: Trojan program Trojan-PSW.Win32.OnLineGames.jrr        File: W:\windows\system32\gdmoyi32.dll//UPack//#