[病毒样本] 24

显示全部楼层 · 发表于 2007-12-13 08:56:29

毒霸23，瑞星20，红伞20+4

显示全部楼层 · 发表于 2007-12-13 08:58:06

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jfm File: E:\VKidding\24dll.rar/gdqqhxi32.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jpc File: E:\VKidding\24dll.rar/avwghmn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jaf File: E:\VKidding\24dll.rar/avzxjmn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kjf File: E:\VKidding\24dll.rar/avwlgmn.dll
deleted: Trojan program Trojan-PSW.Win32.WOW.aeg File: E:\VKidding\24dll.rar/addrmshelp.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kea File: E:\VKidding\24dll.rar/wszjczx.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kas File: E:\VKidding\24dll.rar/wsmsezx.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kmw File: E:\VKidding\24dll.rar/upxdnd.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.knm File: E:\VKidding\24dll.rar/swjqbzc.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jft File: E:\VKidding\24dll.rar/swrcezc.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kfr File: E:\VKidding\24dll.rar/sidjgzy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hdc File: E:\VKidding\24dll.rar/qdshm.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jal File: E:\VKidding\24dll.rar/rarjepi.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ijw File: E:\VKidding\24dll.rar/kvdxjma.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.knh File: E:\VKidding\24dll.rar/kawdfzy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.knn File: E:\VKidding\24dll.rar/kapjezy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kfu File: E:\VKidding\24dll.rar/hursax.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kpe File: E:\VKidding\24dll.rar/gdjzi32.dll//UPack//#
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kmp File: E:\VKidding\24dll.rar/gdqji32.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kav File: E:\VKidding\24dll.rar/gdwmi32.dll//UPack

20个

显示全部楼层 · 发表于 2007-12-13 09:00:08

红伞没报的上报了。

显示全部楼层 · 发表于 2007-12-13 09:03:53

24/24你还有什么好上报的？

显示全部楼层 · 发表于 2007-12-13 09:04:25

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\24dll.rar'
C:\Users\morgan\Documents\
  24dll.rar
[0] Archive type: RAR
--> gdqqhxi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jfm
      [WARNING] Infected files in archives cannot be repaired!
--> DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> avwghmn.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpc
      [WARNING] Infected files in archives cannot be repaired!
--> avzxjmn.dll
      [DETECTION] Is the Trojan horse TR/FWDisable.24932
      [WARNING] Infected files in archives cannot be repaired!
--> avwlgmn.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kjf
      [WARNING] Infected files in archives cannot be repaired!
   --> addrmshelp.dll
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
         [WARNING] Infected files in archives cannot be repaired!
--> SysWFGwd2.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
      [WARNING] Infected files in archives cannot be repaired!
--> wszjczx.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kea
      [WARNING] Infected files in archives cannot be repaired!
--> wsmsezx.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kas
      [WARNING] Infected files in archives cannot be repaired!
--> WinForm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> swjqbzc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfl
      [WARNING] Infected files in archives cannot be repaired!
--> swrcezc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jft
      [WARNING] Infected files in archives cannot be repaired!
--> sidjgzy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kfr
      [WARNING] Infected files in archives cannot be repaired!
   --> qdshm.dll
      [1] Archive type: Runtime Packed
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Wow.adu.2
         [WARNING] Infected files in archives cannot be repaired!
--> rarjepi.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jal
      [WARNING] Infected files in archives cannot be repaired!
--> MsPrint32D.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
--> kvdxjma.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ijw
      [WARNING] Infected files in archives cannot be repaired!
--> kawdfzy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfm
      [WARNING] Infected files in archives cannot be repaired!
--> kapjezy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGam.htk
      [WARNING] Infected files in archives cannot be repaired!
--> hursax.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING] Infected files in archives cannot be repaired!
   --> gdjzi32.dll
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Rootkit.Gen
            [WARNING] Infected files in archives cannot be repaired!
   --> gdqji32.dll
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Rootkit.Gen
            [WARNING] Infected files in archives cannot be repaired!
   --> gdwmi32.dll
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/Rootkit.Gen
            [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

End of the scan: 2007年12月12日  17:03
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   25 Files were scanned
   20 viruses and/or unwanted programs were found
   4 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   5 Files not concerned
   4 Archives were scanned
   24 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-13 09:05:50

4个启发报，当然要报咯。

显示全部楼层 · 发表于 2007-12-13 11:12:07

avast! 17

显示全部楼层 · 发表于 2007-12-13 11:34:44

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQHX.tsl
病毒： Trojan.PSW.Win32.GamesOnline.s
病毒： Trojan.PSW.Win32.SunOnline.in
病毒： Trojan.PSW.Win32.GameOnline.arq
病毒： Trojan.PSW.Win32.GameOL.ed
病毒： Trojan.PSW.Win32.WoWar.aeq
病毒： Trojan.PSW.Win32.GameOL.ci
病毒： Trojan.PSW.Win32.GameOL.bb
病毒： Trojan.PSW.Win32.GameOL.dq
病毒： Trojan.PSW.Win32.SunOnline.jf
病毒： Trojan.PSW.Win32.GameOnline.awl
病毒： Trojan.PSW.Win32.GameOL.ea
病毒： Trojan.PSW.Win32.WoWar.aeq
病毒： Trojan.PSW.Win32.ZeroOnline.cq
病毒： Trojan.PSW.Win32.QQSG.be
病毒： Trojan.PSW.Win32.XYOnline.tp
病毒： Trojan.PSW.Win32.AskTao.fw
病毒： Trojan.PSW.Win32.GameOL.eb
病毒： Trojan.Win32.Undef.dw
病毒： Trojan.PSW.Win32.GameOL.bt

用户来源：互联网

软件版本：20.22.22

显示全部楼层 · 发表于 2007-12-13 11:38:04

G:\Users\Administrator\Desktop\24dll.rar » RAR » gdqqhxi32.dll - Win32/PSW.OnLineGames.KAG trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » DbgHlp32.dll - Win32/PSW.OnLineGames.HCV trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » avwghmn.dll - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » avzxjmn.dll - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » avwlgmn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » addrmshelp.dll - a variant of Win32/PSW.OnLineGames.NHF trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » wszjczx.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » wsmsezx.dll - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » WinForm.dll - Win32/PSW.OnLineGames.HCV trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » upxdnd.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » swjqbzc.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » swrcezc.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » sidjgzy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » qdshm.dll - a variant of Win32/PSW.OnLineGames.NHF trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » rarjepi.dll - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » MsPrint32D.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » kvdxjma.dll - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » kawdfzy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » kapjezy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » hursax.dll - Win32/Delf.NIU trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » gdjzi32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » gdqji32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
G:\Users\Administrator\Desktop\24dll.rar » RAR » gdwmi32.dll - Win32/PSW.OnLineGames.JOJ trojan
23

[病毒样本] 24

本帖子中包含更多资源

回复 4楼 HC303 的帖子

浏览过的版块