楼主: qianwenxiang
收起左侧

[病毒样本] Dogdel

[复制链接]
红心王子
发表于 2008-2-2 15:06:57 | 显示全部楼层
木马名称:Trojan-PSW.Win32.OLGames.kav

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\29\00003.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.AutoRun.wv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\29\WDFMGR.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Qhost.iz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\29\HOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Small.acr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\29\LMMH.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OLGames.aii

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\29\LMMY.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

微点已知17个
啊弥陀佛
发表于 2008-2-2 15:11:38 | 显示全部楼层
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00001.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WINFORM.EXE
2) C:\WINDOWS\SYSTEM32\WINFORM.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00002.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NVDISPDRV.EXE
2) C:\WINDOWS\SYSTEM32\NVDISPDRV.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00003.EXE
1) C:\DFD22450796.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00004.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00006.EXE
木马程序生成以下文件:
1) C:\WINDOWS\PTSSHELL.EXE
2) C:\WINDOWS\SYSTEM32\PTSSHELL.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00009.EXE
木马程序生成以下文件:
1) C:\WINDOWS\FRHHUSYK.EXE
2) C:\WINDOWS\WIASOISAO.EXE
3) C:\WINDOWS\KFNRTHOH.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00011.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\00011LT.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DOGDEL\00013.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?


去除已知的报警

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2008-2-2 15:12:18 | 显示全部楼层
detected: Trojan program Trojan-PSW.Win32.OnLineGames.oee        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00003.exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.gz        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00001.exe//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.ati        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00025.exe//UPX
detected: virus Worm.Win32.AutoRun.bkt        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/wdfmgr.exe//UPack
detected: Trojan program Trojan.Win32.Qhost.aef        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/host.exe//UPack
detected: Trojan program Trojan.Win32.Small.uj        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/lmmh.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kaw        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/lmmy.exe//UPack
detected: Trojan program Trojan.Win32.Agent.diq        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/soundma.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.hiq        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/wdlm.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pbp        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/jz.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Agent.drk        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/fbd.exe//UPack
detected: virus Worm.Win32.AutoRun.bkt        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/www.exe//UPack
detected: virus Worm.Win32.AutoRun.bkt        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/real.exe//UPack
detected: virus Heur.Trojan.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/arp111.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pry        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00018.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nkq        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00005.exe//UPack//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nxz        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00022.exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.gq        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00002.exe//UPack//PE_Patch
detected: Trojan program Trojan-Downloader.Win32.Agent.icj        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00011.exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.ig        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00033.exe//UPack
detected: virus Heur.Trojan.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00006.exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.hc        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00024.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qfw        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00013.exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.hb        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00004.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.jct        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00023.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pzl        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00017.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pmw        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00009.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.onw        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00015.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nzd        File: C:\Documents and Settings\Owner\×ÀÃæ\Dogdel.rar/00016.exe//UPack
29
clovedsm
发表于 2008-2-2 15:12:19 | 显示全部楼层
norton已知25
gho
发表于 2008-2-2 15:12:27 | 显示全部楼层
扫描报告
2008年2月2日 15:11:29 - 15:11:34
计算机名称: CN-89FF4B9EA4D6
扫描类型: 扫描指定目标
目标: E:\Documents and Settings\Administrator\桌面\Dogdel.rar


--------------------------------------------------------------------------------

结果: 发现27个恶意软件
Trojan-PSW.Win32.OnLineGames.oee (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00003.exe
Trojan.Win32.Vaklik.gz (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00001.exe
Trojan-PSW.Win32.QQPass.ati (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00025.exe
Worm.Win32.AutoRun.bkt (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\wdfmgr.exe
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\www.exe
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\real.exe
Trojan.Win32.Qhost.aef (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\host.exe
Trojan.Win32.Small.uj (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\lmmh.exe
Trojan-PSW.Win32.OnLineGames.kaw (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\lmmy.exe
Trojan.Win32.Agent.diq (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\soundma.exe
Trojan-Downloader.Win32.Small.hiq (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\wdlm.exe
Trojan-PSW.Win32.OnLineGames.pbp (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\jz.exe
Trojan.Win32.Agent.drk (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\fbd.exe
Trojan-PSW.Win32.OnLineGames.pry (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00018.exe
Trojan-PSW.Win32.OnLineGames.nkq (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00005.exe
Trojan-PSW.Win32.OnLineGames.nxz (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00022.exe
Trojan.Win32.Vaklik.gq (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00002.exe
Trojan-Downloader.Win32.Agent.icj (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00011.exe
Trojan.Win32.Vaklik.ig (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00033.exe
Trojan.Win32.Vaklik.hc (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00024.exe
Trojan-PSW.Win32.OnLineGames.qfw (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00013.exe
Trojan.Win32.Vaklik.hb (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00004.exe
Trojan-PSW.Win32.OnLineGames.jct (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00023.exe
Trojan-PSW.Win32.OnLineGames.pzl (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00017.exe
Trojan-PSW.Win32.OnLineGames.pmw (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00009.exe
Trojan-PSW.Win32.OnLineGames.onw (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00015.exe
Trojan-PSW.Win32.OnLineGames.nzd (病毒)
E:\Documents and Settings\Administrator\桌面\Dogdel.rar\00016.exe
挪威的冬天
发表于 2008-2-2 15:15:06 | 显示全部楼层
全杀

信息        2008-02-02  15:14:20        金山毒霸主程序 退出                       
信息        2008-02-02  15:14:19        您此次查毒共查出29个病毒以及危险代码                       
信息        2008-02-02  15:14:19        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件56个                       
信息        2008-02-02  15:14:19        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒
qigang
发表于 2008-2-2 15:16:42 | 显示全部楼层

56/29

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.GameOL.lhu
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Worm.Win32.PaBug.GEN     
病毒: Worm.Win32.Agent.zik     
病毒: Trojan.Win32.QHost.abe   
病毒: Trojan.PSW.Win32.XYOnline.ta
病毒: Trojan.PSW.Win32.RocOnline.hz
病毒: Trojan.DL.Win32.Agent.bxw
病毒: Trojan.PSW.Win32.GameOL.ias
病毒: Trojan.PSW.Win32.QQHX.tvu
病毒: Trojan.Win32.Undef.avh   
病毒: Dropper.Win32.Agent.zfi  
病毒: Trojan.PSW.Win32.XYOnline.abc
病毒: Trojan.PSW.Win32.GameOL.lex
病毒: Trojan.PSW.Win32.GameOL.lhj
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.TLOnline.jln
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.QQGame.GEN
病毒: Trojan.PSW.Win32.QQGame.GEN
病毒: Trojan.Win32.Mnless.zvz  
病毒: Trojan.PSW.Win32.GamesOnline.mh
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.GamesOnline.ik
病毒: Trojan.PSW.Win32.GameOL.lgp

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.29.50
kkgh
发表于 2008-2-2 15:17:02 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.PSW.Win32.GameOL.lhu
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Worm.Win32.PaBug.GEN     
病毒: Worm.Win32.Agent.zik     
病毒: Trojan.Win32.QHost.abe   
病毒: Trojan.PSW.Win32.XYOnline.ta
病毒: Trojan.PSW.Win32.RocOnline.hz
病毒: Trojan.DL.Win32.Agent.bxw
病毒: Trojan.PSW.Win32.GameOL.ias
病毒: Trojan.PSW.Win32.QQHX.tvu
病毒: Trojan.Win32.Undef.avh   
病毒: Dropper.Win32.Agent.zfi  
病毒: Trojan.PSW.Win32.XYOnline.abc
病毒: Trojan.PSW.Win32.GameOL.lex
病毒: Trojan.PSW.Win32.GameOL.lhj
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.TLOnline.jln
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.QQGame.GEN
病毒: Trojan.PSW.Win32.QQGame.GEN
病毒: Trojan.Win32.Mnless.zvz  
病毒: Trojan.PSW.Win32.GamesOnline.mh
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.GamesOnline.ik
病毒: Trojan.PSW.Win32.GameOL.lgp

用户来源:互联网

软件版本:20.29.50

29个
wangjay1980
发表于 2008-2-2 16:02:52 | 显示全部楼层
Hello,

00006.exe_ - Trojan-PSW.Win32.OnLineGames.qiz,
arp111.exe_ - Trojan-Dropper.Win32.Agent.ebz,

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.
hj5abc
发表于 2008-2-2 16:19:18 | 显示全部楼层
原帖由 spaceplane 于 2008-2-2 14:53 发表
AVAST 21


AVAST 16 不是21 不是看 log viewer 里的数量 .
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-6-2 03:17 , Processed in 0.106612 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表