21个

udiaB

雨过天晴被穿，恢复后一上网就抓到这么多……先在得ghost系统了……

[ 本帖最后由 udiaB 于 2008-1-26 16:50 编辑 ]

Joker

deleted: Trojan program Trojan.Win32.Vaklik.fe File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\1.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pbp File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\10.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.odx File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\11.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pen File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\13.exe//UPack
deleted: Trojan program Trojan.Win32.Vaklik.fb File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\14.exe//UPack
deleted: Trojan program Trojan.Win32.Vaklik.gf File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\15.exe//UPack//PE_Patch
detected: virus Heur.Invader (modification) File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\17.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pbp File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\19.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pgp File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\2.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.QQPass.ast File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\20.exe//UPX
deleted: Trojan program Trojan.Win32.Vaklik.gi File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\3.exe//UPack//PE_Patch
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ozu File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\4.exe//UPack
deleted: Trojan program Trojan.Win32.Vaklik.gg File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\5.exe//UPack
detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Administrator\×ÀÃæ\н¨Îļþ¼Ð\v\8.exe//UPack

14

[ 本帖最后由 dark1109 于 2008-1-26 16:54 编辑 ]

rasis

Begin scan in 'v'
v\1.exe
      [DETECTION] Is the Trojan horse TR/Vaklik.FE
      [WARNING]   The file was ignored!
v\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pgp
      [WARNING]   The file was ignored!
v\3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
v\4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ozu.2
      [WARNING]   The file was ignored!
v\5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
v\6.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
v\7.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.11871
      [WARNING]   The file was ignored!
v\8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
v\9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
v\10.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
      [WARNING]   The file was ignored!
v\11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.lus
      [WARNING]   The file was ignored!
v\12.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
v\13.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
v\14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.216
      [WARNING]   The file was ignored!
v\15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.239
      [WARNING]   The file was ignored!
v\16.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
v\17.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
v\18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
v\19.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
v\20.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.25
      [WARNING]   The file was ignored!
v\21.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年1月26日  16:57
Used time: 00:03 min

The scan has been done completely.

      1 Scanning directories
     21 Files were scanned
     16 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
     21 Warnings
      0 Notes

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.lmr
病毒： Trojan.PSW.Win32.GamesOnline.jz
病毒： Trojan.PSW.Win32.QQHX.tvu
病毒： Trojan.PSW.Win32.GameOL.lhw
病毒： Trojan.PSW.Win32.GameOL.lmq
病毒： Trojan.PSW.Win32.GameOL.lmu
病毒： Trojan.PSW.Win32.GamesOnline.ke
病毒： Trojan.PSW.Win32.GameOL.lmi
病毒： Trojan.PSW.Win32.GameOL.lpk

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.28.50

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.lmq
病毒： Trojan.PSW.Win32.GameOL.lmu
病毒： Trojan.PSW.Win32.GamesOnline.ke
病毒： Trojan.PSW.Win32.GameOL.lmi
病毒： Trojan.PSW.Win32.GameOL.lpk
病毒： Trojan.PSW.Win32.QQHX.tvu
病毒： Trojan.PSW.Win32.GameOL.lhw
病毒： Trojan.PSW.Win32.GameOL.lmr
病毒： Trojan.PSW.Win32.GamesOnline.jz

用户来源：互联网

软件版本：20.28.51

wangjay1980

Hello,

12.exek, 16.exek, 18.exek, 6.exek, 9.exek - Trojan-PSW.Win32.OnLineGames.pou,
17.exek - Trojan-PSW.Win32.OnLineGames.poj,
21.exek - Trojan.Win32.Agent.ekz,
7.exek - Trojan-PSW.Win32.OnLineGames.pov,
8.exek - Trojan-PSW.Win32.OnLineGames.pol,
sethc.exek - Trojan-Downloader.Win32.Small.hyf

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vladimir Krylov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

冷冷

I:\virus\test\1.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\10.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\test\11.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
I:\virus\test\12.exe - Suspect code-parts found (Level: 25)
I:\virus\test\13.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\14.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\15.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\16.exe - Suspect code-parts found (Level: 25)
I:\virus\test\17.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\test\18.exe - Suspect code-parts found (Level: 25)
I:\virus\test\19.exe - Signature 'Trojan-Spy.Win32.Delf.PD' found
I:\virus\test\2.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\20.exe - Signature 'Trojan-Proxy.Win32.Delf.AN' found
I:\virus\test\21.exe - Signature 'Backdoor.Win32.Agent.ahj' found
I:\virus\test\3.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\4.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\5.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\6.exe - Suspect code-parts found (Level: 25)
I:\virus\test\7.exe - Suspect code-parts found (Level: 25)
I:\virus\test\8.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\test\9.exe - Suspect code-parts found (Level: 25)
21 Files scanned
   (0 Archives with 0 files)
15 Signatures found
6 Suspect code-parts found
Used time: 0:02.250
-------------------------------------------------------------------------------

I:\virus\test/1.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/10.exe: PUA.Packed.UPack-3 FOUND
I:\virus\test/11.exe: PUA.Packed.UPack FOUND
I:\virus\test/12.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/13.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/14.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/15.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/16.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/17.exe: PUA.Packed.UPack-3 FOUND
I:\virus\test/18.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/19.exe: PUA.Packed.UPack-3 FOUND
I:\virus\test/2.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/20.exe: Trojan.QQPass-493 FOUND
I:\virus\test/3.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/4.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/5.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/6.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/7.exe: PUA.Packed.UPack-2 FOUND
I:\virus\test/8.exe: PUA.Packed.UPack-1 FOUND
I:\virus\test/9.exe: PUA.Packed.UPack-2 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 197940
Engine version: 0.92
Scanned directories: 1
Scanned files: 21
Infected files: 20
Data scanned: 0.46 MB
Time: 6.234 sec (0 m 6 s)