22个样本地址

残缺的唯美

G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 22.exe - Win32/PSW.OnLineGames.NJW trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 1.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 2.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 4.exe - probably a variant of Win32/Genetik trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 5.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 6.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 7.exe - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 8.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 9.exe - a variant of Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 10.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 11.exe - a variant of Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 12.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 13.exe - Win32/PSW.WOW.WU trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 14.exe - Win32/PSW.OnLineGames.NGU trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 15.exe - Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 16.exe - probably a variant of Win32/Genetik trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 17.exe - Win32/PSW.OnLineGames.NKB trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 18.exe - Win32/PSW.OnLineGames.NJZ trojan
G:\Users\Administrator\Desktop\TDDOWNLOAD.rar » RAR » 20.exe - probably a variant of Win32/Genetik trojan

nod32  3.0  20个

leonfg

FS扫出19个 既然有人报给卡巴了 那偶就不给FS报了

sam.to

我忘記了上报19,再上报

[ 本帖最后由 kato9096 于 2007-12-11 15:43 编辑 ]

挪威的冬天

信息        2007-12-11  16:32:44        您此次查毒共查出16个病毒以及危险代码                       
信息        2007-12-11  16:32:44        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件32个                       
信息        2007-12-11  16:32:44        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\18.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\17.exe        Trash.OnlineGamesT.aq.2615        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\16.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\15.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\13.exe        Win32.PSWTroj.OnLineGames.49664        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\12.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\11.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\10.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\9.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\8.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\6.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\5.exe        Win32.Troj.OnLineGamesT.gp.15597        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\3.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\2.exe        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\1.exe        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理       
病毒        2007-12-11  16:32:44        C:\Documents and Settings\Norways Winter\桌面\TDDOWNLOAD.rar\22.exe        Win32.Troj.OnLineGamesT.or.258048        跳过，未处理

啊弥陀佛

木马名称:Trojan-PSW.Win32.OnLineGames.zhn
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.PcClient.bew
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Delf.bze
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\21.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\1.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WINFORM.EXE
2) C:\WINDOWS\SYSTEM32\WINFORM.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\3.EXE
1) C:\DFD4836718.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KAWDCAZ.EXE
2) C:\WINDOWS\SYSTEM32\KAWDCAZ.DAT
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\5.EXE
1) C:\DFD4885546.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\10.EXE
1) C:\DFD4947906.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\12.EXE
1) C:\DFD4972828.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\13.EXE
木马程序生成以下文件:
1) C:\WINDOWS\391231L.EXE
2) C:\WINDOWS\391231WL.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\14.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\QDSHM.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TDDOWNLOAD\20.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\NVSYS_55.SYS
是否删除木马程序及其衍生物?

qigang

瑞星病毒查杀结果报告(42/17)

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQHX.ttg
病毒： Trojan.PSW.Win32.GameOL.cn
病毒： Trojan.PSW.Win32.XYOnline.wf
病毒： Trojan.PSW.Win32.SunOnline.iv
病毒： Trojan.PSW.Win32.QQHX.tsy
病毒： Trojan.PSW.Win32.GameOnline.asy
病毒： Trojan.PSW.Win32.XYOnline.ui
病毒： Trojan.PSW.Win32.GameOnline.zzz
病毒： Trojan.PSW.Win32.GameOL.bi
病毒： Trojan.PSW.Win32.GameOL.a
病毒： Trojan.PSW.Win32.Woool.c
病毒： Trojan.PSW.Win32.TLOnline.jkb
病毒： Trojan.PSW.Win32.WLOnline.jjv
病毒： Trojan.PSW.Win32.QQGame.bc
病毒： Hack.DDoSer.Win32.Agent.an

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.22.10

qigang

瑞星病毒查杀结果报告(43/17)

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQHX.ttg
病毒： Trojan.PSW.Win32.GameOL.cn
病毒： Trojan.PSW.Win32.XYOnline.wf
病毒： Trojan.PSW.Win32.SunOnline.iv
病毒： Trojan.PSW.Win32.QQHX.tsy
病毒： Trojan.PSW.Win32.GameOnline.asy
病毒： Trojan.PSW.Win32.XYOnline.ui
病毒： Trojan.PSW.Win32.GameOnline.zzz
病毒： Trojan.PSW.Win32.GameOL.bi
病毒： Trojan.PSW.Win32.GameOL.a
病毒： Trojan.PSW.Win32.Woool.c
病毒： Trojan.PSW.Win32.TLOnline.jkb
病毒： Trojan.PSW.Win32.WLOnline.jjv
病毒： Trojan.PSW.Win32.QQGame.bc
病毒： Hack.DDoSer.Win32.Agent.an

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.22.10

sam.to

原帖由 kato9096 于 2007-12-11 15:42 发表
我忘記了上报19,再上报

Hello.
No malicious software was found in the attached file.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Vyacheslav Zakorzhevsky
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1081
Paranoia Database - 50091
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD

C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\22.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\1.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\2.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\3.exe - Infected TROJAN-PSW.ONLINEGAMES.164 - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\4.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\5.exe - Infected TROJAN-PSW.ONLINEGAMES.173 - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\6.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\7.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\8.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\9.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\10.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\11.exe - Infected MALWARE.8CD.3C20 - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\12.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\13.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.G - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\14.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\15.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\16.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\17.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\18.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\20.exe - Infected WIN32.TROJAN-PSW.QQPASS.A - Deleted
C:\Documents and Settings\Uhthn\Desktop\TDDOWNLOAD\21.exe - Suspected WIN32.BACKDOOR.DELF.1

21 Files scanned
6 Infected files found
15 Suspected files found
0 Files disinfected
6 Files deleted

欠妳緈諨

AVAST18