下载者及产物25个

显示全部楼层 · 发表于 2007-12-9 12:59:49

信息 2007-12-09  12:59:49 您此次查毒共查出21个病毒以及危险代码
信息 2007-12-09  12:59:49 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件38个
信息 2007-12-09  12:59:49 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\gdqqhxi32.dll Win32.Troj.OnlineGamesT.ty.102400 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\gdjzi32.dll Win32.Troj.OnlineGames.yf.73728 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\avzxkmn.dll Win32.Troj.OnLimeGamesT.zf.21080 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\avwghmn.dll Win32.Troj.OnLimeGamesT.zf.21080 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\68down.exe Win32.Troj.DwonLoaderT.xy.133203 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\23.exe Win32.Troj.OnLineGamesT.or.258048 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\22.exe Win32.Troj.OnLineGamesT.or.258048 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\17.exe Trash.OnlineGamesT.aq.2615 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\16.exe Win32.Troj.OnLineGamesT.gp.15597 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\15.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\13.exe Win32.Troj.WoWT.zy.110592 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\swjqbzc.dll Win32.Troj.OnlineGamesT.ty.24902 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\swjqbac.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\rwdjvbgmrw.dll Win32.PSWTroj.WowT.my.17831 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\MSDEG32.DLL Win32.Troj.OnlineGamesT.ty.135168 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\LYMANGR.DLL Win32.Troj.OnlineGames.jx.61440 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\kawdcaz.dat Win32.Troj.OnlineGamesT.ty.118975 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\kapjezy.dll Win32.Troj.OnLimeGamesT.zf.21080 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\kapjeaz.exe Win32.Troj.AgentT.fm.14452 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\GenProtect.dll Win32.Troj.OnlineGames.jb.134144 跳过，未处理
病毒 2007-12-09  12:59:49 C:\Documents and Settings\Norways Winter\桌面\样本.rar\gdwli32.dll Win32.Troj.OnlineGamesT.ty.102400 跳过，未处理

显示全部楼层 · 发表于 2007-12-9 12:59:52

G:\Users\Administrator\Desktop\样本.rar » RAR » gdwli32.dll - probably a variant of Win32/PSW.OnLineGames.NHF trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » GenProtect.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » kapjeaz.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » kapjezy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » kawdcaz.dat - a variant of Win32/PSW.OnLineGames.NCU trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » kawdcaz.exe - probably a variant of Win32/Genetik trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » LYLOADER.EXE - a variant of Win32/PSW.Agent.NEC trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » MSDEG32.DLL - a variant of Win32/PSW.OnLineGames.DVV trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » rwdjvbgmrw.dll - a variant of Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » swjqbac.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » swjqbzc.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 1.exe - Win32/PSW.Agent.NEC trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 2.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 13.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 15.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 16.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 17.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 22.exe - Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » 68down.exe - a variant of Win32/Jalous worm
G:\Users\Administrator\Desktop\样本.rar » RAR » avwghmn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » avzxkmn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\样本.rar » RAR » gdjzi32.dll - Win32/PSW.OnLineGames.NJP trojan

显示全部楼层 · 发表于 2007-12-9 13:03:31

全灭

显示全部楼层 · 发表于 2007-12-9 13:07:36

25
detected: virus File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gdwli32.dll//
detected: virus File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/GenProtect.dll
detected: virus êÔ’|ÿ

显示全部楼层 · 发表于 2007-12-9 13:09:12

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 11.00.702
病毒库日期 2007-12-08
更新日期 2007-12-09

扫描目标 C:\Documents and Settings\Administrator\桌面\样本.rar

开始时间 2007-12-09 12:53:14

在 C:\Documents and Settings\Administrator\桌面\样本.rar->GenProtect.dll 中发现 Trojan/PSW.OnLineGames.mey 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->kapjeaz.exe 中发现 TrojanSpy.Delf.aud 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->LYLOADER.EXE 中发现 Trojan/PSW.OnLineGames.mef 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->LYMANGR.DLL 中发现 Trojan/PSW.OnLineGames.mht 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->MSDEG32.DLL 中发现 Trojan/PSW.OnLineGames.mhu 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->swjqbac.exe 中发现 TrojanSpy.Delf.aud 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->swjqbzc.dll 中发现 Trojan/PSW.OnLineGames.hms 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->1.exe 中发现 Trojan/PSW.OnLineGames.mhv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->2.exe 中发现 Trojan/PSW.GamePass.adsx 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->13.exe 中发现 Trojan/PSW.OnLineGames.lha 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->15.exe 中发现 Trojan/PSW.OnLineGames.hnz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->16.exe 中发现 Trojan/PSW.OnLineGames.hnz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->17.exe 中发现 TrojanDownloader.Adload.lp 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->22.exe 中发现 Trojan/PSW.OnLineGames.mmp 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->23.exe 中发现 Trojan/PSW.OnLineGames.mme 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->68down.exe 中发现 Trojan/PSW.GamePass.adzv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->avwghmn.dll 中发现 Trojan/PSW.OnLineGames.mmb 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->avzxkmn.dll 中发现 Trojan/PSW.OnLineGames.mmc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->gdjzi32.dll 中发现 Trojan/PSW.GamePass.adyw 病毒, 已删除
正常结束。

扫描结果:
               文件数 :27                               病毒体 :19
               删除 :19                                  解毒 :0
扫描速度(千字节/秒) :890                            扫描时间 :00:00:01
扫描文件速度(个/秒) :27

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -    - - - - - - - - - - - -

显示全部楼层 · 发表于 2007-12-9 13:09:56

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> gdwli32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> GenProtect.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> kapjeaz.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> kapjezy.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> kawdcaz.dat
   [DETECTION] Is the Trojan horse TR/PSW.OnLi.iiu.1.A
  --> kawdcaz.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLi.iiu.1.A
  --> LYLOADER.EXE
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> LYMANGR.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MSDEG32.DLL
   [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> rwdjvbgmrw.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> swjqbac.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jjr
  --> swjqbzc.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jjr
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 2.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> 13.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 15.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 16.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jro
  --> 17.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jti.5
  --> 22.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.joj.5
  --> 23.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jtq
  --> 68down.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> avwghmn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> avzxkmn.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jro
  --> gdjzi32.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.joj.24
  --> gdqqhxi32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [INFO]    The file was deleted!

End of the scan: 星期日 2007年12月9日  13:10
Used time: 00:10 min

The scan has been done completely.

   0 Scanning directories
   27 Files were scanned
   23 viruses and/or unwanted programs were found
   2 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   4 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-9 14:01:43

26

D:\Download\VirusScan\gdwli32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
D:\Download\VirusScan\GenProtect.dll [L] Win32:OnLineGames-BMZ [Trj] (0)
D:\Download\VirusScan\kapjeaz.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
D:\Download\VirusScan\kapjezy.dll [L] Win32:OnLineGames-BGD [Trj] (0)
D:\Download\VirusScan\kawdcaz.dat\[Upack] [L] Win32:OnLineGames-AUQ [Trj] (0)
D:\Download\VirusScan\kawdcaz.exe\[Upack]\[Embedded#2a060]\[Upack] [L] Win32:OnLineGames-AUQ [Trj] (0)
D:\Download\VirusScan\LYLOADER.EXE\[Upack]\[Embedded#5158]\[Upack] [L] Win32:OnLineGames-ST [Trj] (0)
D:\Download\VirusScan\LYMANGR.DLL\[Upack] [L] Win32:OnLineGames-ST [Trj] (0)
D:\Download\VirusScan\MSDEG32.DLL\[Upack] [L] Win32:OnLineGames-BKV [Trj] (0)
D:\Download\VirusScan\rwdjvbgmrw.dll\[Upack] [L] Win32:OnLineGames-BMW [Trj] (0)
D:\Download\VirusScan\swjqbac.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
D:\Download\VirusScan\swjqbzc.dll [L] Win32:OnLineGames-BGD [Trj] (0)
D:\Download\VirusScan\1.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack] [L] Win32:OnLineGames-ST [Trj] (0)
D:\Download\VirusScan\1.exe [L] Win32:OnLineGames-SR [Trj] (0)
D:\Download\VirusScan\2.exe\[Upack]\[Embedded#4060] [L] Win32:OnLineGames-BMZ [Trj] (0)
D:\Download\VirusScan\13.exe\[FSG]\[Embedded#DATEINFO]\[Upack] [L] Win32:OnLineGames-BMW [Trj] (0)
D:\Download\VirusScan\15.exe\[Upack]\[Embedded#MUSIC] [L] Win32:Delf-FVM [Trj] (0)
D:\Download\VirusScan\16.exe\[Upack]\[Embedded#MUSIC] [L] Win32:Delf-FVM [Trj] (0)
D:\Download\VirusScan\17.exe\[Upack]\[Embedded#6060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
D:\Download\VirusScan\22.exe\[Upack]\[Embedded#4060]\[Upack] [L] Win32:OnLineGames-BLD [Trj] (0)
D:\Download\VirusScan\23.exe\[Upack]\[Embedded#6060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
D:\Download\VirusScan\68down.exe\[Upack]\[Embedded#03008]\[Embedded#08008] [L] Win32:Downloader-RR [Wrm] (0)
D:\Download\VirusScan\avwghmn.dll [L] Win32:Delf-FVM [Trj] (0)
D:\Download\VirusScan\avzxkmn.dll [L] Win32:Delf-FVM [Trj] (0)
D:\Download\VirusScan\gdjzi32.dll\[Upack] [L] Win32:OnLineGames-BLD [Trj] (0)
D:\Download\VirusScan\gdqqhxi32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)

显示全部楼层 · 发表于 2007-12-9 14:02:42

15

D:\Download\VirusScan\kapjeaz.exe infected: Generic.Malware.SBdldg.1D7DEBDD
D:\Download\VirusScan\kapjezy.dll infected: BehavesLike:Trojan.WUDisable
D:\Download\VirusScan\LYLOADER.EXE infected: Dropped:Generic.PWS.Games.3.B2382E9B
D:\Download\VirusScan\MSDEG32.DLL infected: Generic.PWS.Games.3.B2382E9B
D:\Download\VirusScan\rwdjvbgmrw.dll suspected: Generic.Malware.Fdldg.CE2D25D6
D:\Download\VirusScan\swjqbac.exe infected: Generic.Malware.SBdldg.7F7C0E19
D:\Download\VirusScan\swjqbzc.dll infected: BehavesLike:Trojan.WUDisable
D:\Download\VirusScan\1.exe infected: Dropped:Generic.PWS.Games.3.B2382E9B
D:\Download\VirusScan\2.exe infected: Generic.PWS.Games.4.113577A0
D:\Download\VirusScan\13.exe suspected: Dropped:Generic.Malware.Fdldg.CE2D25D6
D:\Download\VirusScan\15.exe infected: DeepScan:Generic.Dld.Agent.251D6826
D:\Download\VirusScan\16.exe infected: DeepScan:Generic.Dld.Agent.2DE6F1DD
D:\Download\VirusScan\68down.exe infected: Worm.Agent.H
D:\Download\VirusScan\avwghmn.dll infected: BehavesLike:Trojan.WUDisable
D:\Download\VirusScan\avzxkmn.dll infected: BehavesLike:Trojan.WUDisable

显示全部楼层 · 发表于 2007-12-9 14:03:38

25

D:\Download\VirusScan\gdwli32.dll - Signature 'Trojan-PWS.Win32.Small.br' found
D:\Download\VirusScan\GenProtect.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\kapjeaz.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
D:\Download\VirusScan\kapjezy.dll - Signature 'BehavesLikeTrojan.WUDisable' found
D:\Download\VirusScan\kawdcaz.dat - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\Download\VirusScan\kawdcaz.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\Download\VirusScan\LYLOADER.EXE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\LYMANGR.DLL - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\Download\VirusScan\MSDEG32.DLL - Signature 'Generic.PWS.Games.3' found
D:\Download\VirusScan\rwdjvbgmrw.dll - Signature 'Trojan-PWS.Win32.Agent.jp' found
D:\Download\VirusScan\swjqbac.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
D:\Download\VirusScan\swjqbzc.dll - Signature 'BehavesLikeTrojan.WUDisable' found
D:\Download\VirusScan\1.exe - Signature 'Virus.Win32.OnLineGames.SR' found
D:\Download\VirusScan\2.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
D:\Download\VirusScan\13.exe - Signature 'Trojan-PWS.Win32.Delf.ix' found
D:\Download\VirusScan\15.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
D:\Download\VirusScan\16.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
D:\Download\VirusScan\17.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\22.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\23.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\68down.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\avwghmn.dll - Signature 'BehavesLikeTrojan.WUDisable' found
D:\Download\VirusScan\avzxkmn.dll - Signature 'BehavesLikeTrojan.WUDisable' found
D:\Download\VirusScan\gdjzi32.dll - Signature 'Trojan-PWS.Win32.Small.br' found
D:\Download\VirusScan\gdqqhxi32.dll - Signature 'Trojan-PWS.Win32.Small.br' found

[病毒样本] 下载者及产物25个

本帖子中包含更多资源

本帖子中包含更多资源