转一包

显示全部楼层 · 发表于 2007-12-24 19:52:40

Starting the file scan:

Begin scan in 'D:\Downloads\样本\cong'
D:\Downloads\样本\cong\uoxasv.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\sbslam.dll
   [DETECTION] Is the Trojan horse TR/PSW.29184.3
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\coniem0.exe
   [DETECTION] Is the Trojan horse TR/PSW.QQpass.aoo
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\49400WL.DLL
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\49400MM.DLL
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\49400M.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\pcibus.sys
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\HookHelp.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\gdzyzji32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\gdjx2i32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\gdgfsji32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\comint32.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\atkoat.exe
   [DETECTION] Is the Trojan horse TR/PSW.26624.4
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\xnewfo.exe
   [DETECTION] Is the Trojan horse TR/PSW.26624.4
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\xvwcfe.dll
   [DETECTION] Is the Trojan horse TR/PSW.26624.4
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\354687.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [WARNING] The file was ignored!
D:\Downloads\样本\cong\kynnku.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq.3
   [WARNING] The file was ignored!

End of the scan: 2007年12月24日  19:49
Used time: 00:08 min

The scan has been done completely.

   1 Scanning directories
   17 Files were scanned
   17 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   17 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-24 19:55:58

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.gfo
病毒： Trojan.PSW.Win32.GameOL.gfn
病毒： Worm.Win32.PaBug.ff
病毒： Trojan.PSW.Win32.Woool.c
病毒： Trojan.PSW.Win32.GameOnline.at
病毒： Trojan.PSW.Win32.LMir.yys
病毒： Trojan.Win32.Mnless.zkb
病毒： RootKit.Win32.KeyLogger.o
病毒： Trojan.PSW.Win32.GameOL.gkc
病毒： Trojan.PSW.Win32.ZeroOnline.cy
病毒： Trojan.PSW.Win32.GongFu.b
病毒： RootKit.Win32.GameHack.d
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GameOL.cu
病毒： RootKit.Win32.Protmin.a
病毒： Trojan.PSW.Win32.GamesOnline.d

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.24.02

显示全部楼层 · 发表于 2007-12-24 19:59:59

木马名称:Trojan-PSW.Win32.QQPass.hek

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\CONIEM0.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.dlg

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\49400WL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.dlf

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\49400MM.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Lmir.djv

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\49400M.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Downloader.ov

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\PCIBUS.SYS
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OLGames.asb

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\ATKOAT.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OLGames.asb

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\XNEWFO.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OLGames.aov

程序:
C:\DOCUMENTS AND SETTINGS\ZH\桌面\KYNNKU.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-12-24 20:00:56

Scan Log
Version of virus signature database: 2745 (20071224)
Date: 2007-12-24 Time: 20:00:24
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\cong.rar
Number of scanned objects: 17
Number of threats found: 16
Time of completion: 20:00:28 Total scanning time: 4 sec (00:00:04)

显示全部楼层 · 发表于 2007-12-24 20:05:05

信息 2007-12-24  20:05:01 您此次查毒共查出16个病毒以及危险代码
信息 2007-12-24  20:05:01 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件22个
信息 2007-12-24  20:05:01 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\kynnku.dll Win32.Troj.OnlineGamesT.ip.28160 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\354687.sys Win32.Hack.Protmin.a.27648 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\xvwcfe.dll Win32.Troj.OnlineGames.t.25088 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\xnewfo.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\atkoat.exe Win32.Troj.OnLineGamesT.gr.2637 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\comint32.sys Win32.Troj.OnlineGamesT.ty.14464 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\gdgfsji32.dll Win32.Troj.OnLimeGamesT.gs.73779 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\gdjx2i32.dll Win32.Troj.OnlineGamesT.ty.102400 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\gdzyzji32.dll Win32.Troj.OnlineGamesT.ty.102400 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\HookHelp.sys Win32.PSWTroj.OnLineGames.6656 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\49400M.exe Win32.Troj.OnlineGames.ie.22228 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\49400MM.DLL Win32.Troj.OnlineGames.ks.53825 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\49400WL.DLL Win32.Troj.OnlineGamesT.xy.44337 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\coniem0.exe Win32.Troj.QQPass.ao.102526 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\sbslam.dll Win32.Troj.OnlineGames.lb.29184 跳过，未处理
病毒 2007-12-24  20:05:01 C:\Documents and Settings\Norways_Winter\桌面\cong.rar\uoxasv.dll Win32.Troj.OnlineGames.l.28160 跳过，未处理

显示全部楼层 · 发表于 2007-12-24 20:08:27

卡巴 7.0.1.321
16个

已删除: 病毒 Worm.Win32.Downloader.cb 文件: F:\病毒样本\cong.rar/pcibus.sys
已删除: 木马程序 Trojan-PSW.Win32.Lmir.boy 文件: F:\病毒样本\cong.rar/49400M.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.iay 文件: F:\病毒样本\cong.rar/49400WL.DLL
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.isb 文件: F:\病毒样本\cong.rar/atkoat.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.isb 文件: F:\病毒样本\cong.rar/xnewfo.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.jyq 文件: F:\病毒样本\cong.rar/kynnku.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.kgu 文件: F:\病毒样本\cong.rar/HookHelp.sys
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.kmp 文件: F:\病毒样本\cong.rar/comint32.sys
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.krz 文件: F:\病毒样本\cong.rar/xvwcfe.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ksf 文件: F:\病毒样本\cong.rar/49400MM.DLL
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.lbg 文件: F:\病毒样本\cong.rar/sbslam.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.lbh 文件: F:\病毒样本\cong.rar/uoxasv.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.lsb 文件: F:\病毒样本\cong.rar/gdjx2i32.dll//UPack//#
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.lsb 文件: F:\病毒样本\cong.rar/gdzyzji32.dll//UPack//#
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.lsu 文件: F:\病毒样本\cong.rar/gdgfsji32.dll//UPack
已删除: 木马程序 Trojan-PSW.Win32.QQPass.aon 文件: F:\病毒样本\cong.rar/coniem0.exe//UPX

显示全部楼层 · 发表于 2007-12-24 20:22:11

显示全部楼层 · 发表于 2007-12-24 20:42:09

nod 16个
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » uoxasv.dll - Win32/PSW.OnLineGames.HCV trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » sbslam.dll - probably a variant of Win32/PSW.OnLineGames.HCV trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » coniem0.exe - Win32/PSW.QQPass.AON trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » 49400WL.DLL - Win32/PSW.Legendmir.NFN trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » 49400MM.DLL - a variant of Win32/PSW.Legendmir.NFF trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » 49400M.exe - probably a variant of Win32/PSW.WOW.WU trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » pcibus.sys - Win32/Jalous.Z worm
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » HookHelp.sys - Win32/PSW.OnLineGames.NFC trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » gdzyzji32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » gdjx2i32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » gdgfsji32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » comint32.sys - Win32/PSW.OnLineGames.NKA trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » atkoat.exe - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » xnewfo.exe - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » xvwcfe.dll - Win32/PSW.OnLineGames.HCV trojan
C:\Documents and Settings\GUNDAM\桌面\cong.rar » RAR » kynnku.dll - Win32/PSW.OnLineGames.NFL trojan

显示全部楼层 · 发表于 2007-12-24 20:52:54

[病毒样本] 转一包

本帖子中包含更多资源

22/17

本帖子中包含更多资源

本帖子中包含更多资源