29个

显示全部楼层 · 发表于 2007-12-31 19:37:59

C:\ABC\样本.rar:\1.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\2.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\3.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\样本.rar:\4.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\6.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\样本.rar:\7.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\8.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\样本.rar:\9.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\10.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\12.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\13.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\14.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\样本.rar:\15.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\16.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\re.exe - 特征码 'Trojan-Downloader.Win32.Small.eyz' 被发现
C:\ABC\样本.rar:\w3.exe - 特征码 'Trojan-Downloader.Win32.Delf.bny' 被发现
C:\ABC\样本.rar:\avzxlmn.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\gdgji32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdhnxai32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdqqhxi32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gdtli32.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\gjfhayc.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\jsqsbyc.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\kvdxslma.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\msvcp51.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\raqjkpi.dll - 特征码 'Virus.Win32.OnLineGames.BGD' 被发现
C:\ABC\样本.rar:\rarjepi.dll - 特征码 'Virus.Win32.OnLineGames.BGD' 被发现
C:\ABC\样本.rar:\rsmyjpm.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\wsmsezx.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar

显示全部楼层 · 发表于 2007-12-31 19:40:23

Starting the file scan:

Begin scan in 'E:\��.rar'
E:\��.rar
  [0] Archive type: RAR
  --> 1.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 4.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfi
  --> 6.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 7.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 8.exe
   [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 9.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.28619
  --> 10.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 12.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> 13.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.auw
  --> 14.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 15.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 16.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.21963
  --> re.exe
   [DETECTION] Is the Trojan horse TR/Conime.8192
  --> w3.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> avzxlmn.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> gdgji32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdhnxai32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdqqhxi32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gdtli32.dll
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> gjfhayc.dll
   [DETECTION] Is the Trojan horse TR/FWDisable.21963
  --> kvdxslma.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> msvcp51.dll
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> raqjkpi.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.auw
  --> rarjepi.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> rsmyjpm.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfi
  --> wsmsezx.dll
   [DETECTION] Is the Trojan horse TR/FWDisable.28619
   [WARNING] The file was ignored!

End of the scan: 2007年12月31日  19:41
Used time: 00:29 min

The scan has been done completely.

   0 Scanning directories
   30 Files were scanned
   24 viruses and/or unwanted programs were found
   4 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   6 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-31 19:42:46

27个
D:\Downloads\样本\样本4.rar » RAR » 1.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 2.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.JOJ trojan
D:\Downloads\样本\样本4.rar » RAR » 4.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 6.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
D:\Downloads\样本\样本4.rar » RAR » 7.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 8.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
D:\Downloads\样本\样本4.rar » RAR » 9.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 10.exe - probably a variant of Win32/Genetik trojan
D:\Downloads\样本\样本4.rar » RAR » 12.exe - probably unknown NewHeur_PE virus
D:\Downloads\样本\样本4.rar » RAR » 13.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 14.exe - probably a variant of Win32/PSW.OnLineGames.NHF trojan
D:\Downloads\样本\样本4.rar » RAR » 15.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » 16.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » w3.exe - probably a variant of Win32/Genetik trojan
D:\Downloads\样本\样本4.rar » RAR » avzxlmn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » gdgji32.dll - probably a variant of Win32/PSW.OnLineGames.NHF trojan
D:\Downloads\样本\样本4.rar » RAR » gdhnxai32.dll - a variant of Win32/PSW.OnLineGames.JOJ trojan
D:\Downloads\样本\样本4.rar » RAR » gdqqhxi32.dll - probably a variant of Win32/Genetik trojan
D:\Downloads\样本\样本4.rar » RAR » gdtli32.dll - probably a variant of Win32/PSW.OnLineGames.NHF trojan
D:\Downloads\样本\样本4.rar » RAR » gjfhayc.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » jsqsbyc.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » kvdxslma.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » raqjkpi.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » rarjepi.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » rsmyjpm.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\Downloads\样本\样本4.rar » RAR » wsmsezx.dll - a variant of Win32/PSW.OnLineGames.FDY trojan

显示全部楼层 · 发表于 2007-12-31 19:43:27

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.gnx
病毒： Trojan.PSW.Win32.GameOL.glg
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.XYOnline.yy
病毒： Trojan.PSW.Win32.XYOnline.yz
病毒： Trojan.Clicker.Win32.Agent.adg
病毒： Malicious Code
病毒： Trojan.PSW.Win32.ZeroOnline.cy
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.SO2Online.ap
病毒： Trojan.PSW.Win32.GameOL.gog
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.DL.Win32.Mnless.km

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.25

显示全部楼层 · 发表于 2007-12-31 20:08:22

显示全部楼层 · 发表于 2007-12-31 20:11:05

江民K 23个七个都是DLL

显示全部楼层 · 发表于 2007-12-31 20:23:25

显示全部楼层 · 发表于 2007-12-31 20:31:14

AVG 17个

显示全部楼层 · 发表于 2007-12-31 22:06:56

detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1.exe//UPack
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/2.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mnc File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/3.exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/4.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lry File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/6.exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/7.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lzl File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mmy File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lzg File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/10.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/12.exe
detected: virus Heur.Trojan.Generic (modification) File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/13.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mhq File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/14.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mmy File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/15.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mqa File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/16.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.eyz File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/re.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.may File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gdgji32.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mqj File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gdhnxai32.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.lzf File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gdqqhxi32.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mhq File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gdtli32.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mft File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/gjfhayc.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.mmx File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/wsmsezx.dll
21

显示全部楼层 · 发表于 2007-12-31 22:18:29

很好，很强大！

* avast! 报告
* 这个文件自动被产生
* 任务 '简易用户界面' 被使用
* 开始于 2007年12月31日 22:14:04
* VPS: 071230-0, 2007-12-30
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\1.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\2.exe\[Upack]\[Embedded#MUSIC] [L] Win32:Delf-FVM [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\3.exe\[Upack]\[Embedded#6060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\4.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\6.exe\[Upack]\[Embedded#6060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\7.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\8.exe\[Upack]\[Embedded#ac68]\[Upack] [L] Win32:OnLineGames-BKP [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\9.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BOA [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\10.exe\[Upack]\[Embedded#7060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\13.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\14.exe\[Upack]\[Embedded#6060]\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\15.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\16.exe\[Upack]\[Embedded#MUSIC] [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\re.exe [L] Win32:Trojan-gen {UPX} (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\w3.exe\[UPX] [L] Win32:Delf-FKN [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\avzxlmn.dll [L] Win32:Delf-FVM [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\gdgji32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\gdhnxai32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\gdqqhxi32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\gdtli32.dll\[Upack] [L] Win32:OnLineGames-BKU [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\gjfhayc.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\jsqsbyc.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\kvdxslma.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\raqjkpi.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\rarjepi.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\rsmyjpm.dll [L] Win32:OnLineGames-BGD [Trj] (0)
C:\Documents and Settings\David\桌面\病毒样本\样本.rar\wsmsezx.dll [L] Win32:OnLineGames-BOA [Trj] (0)
已感染文件: 27
总共文件: 96
总共文件夹: 1
总共大小: 7.1 MB

* 任务被停止: 2007年12月31日 22:14:27
* 运作时间是 23 秒

[病毒样本] 29个

本帖子中包含更多资源

47/15

本帖子中包含更多资源