19

woai_jolin

2008-2-2 18:59:37        Kernel        File  'G:\v\conf.dat' was sent to ESET for analysis.

Graybird

The file 'stdole2.tlb' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'stdole2.tlb' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Windows XP (SP0)'.

The file 'conf.dat' has been determined to be 'UNDER ANALYSIS'.

Palkia

kav 12
rising  16

                瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： RootKit.Win32.Small.s   
病毒： Trojan.DL.Win32.Mnless.ki
病毒： Trojan.DL.Small.uei      
病毒： RootKit.Win32.GameHack.GEN
病毒： Trojan.PSW.Win32.GameOL.b
病毒： Trojan.Win32.Undef.ciq   

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.29.52

su-tt

system32.rar\WinForm.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;可能 DLOADER.Trojan;;
system32.rar\NVDispDrv.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;可能 DLOADER.Trojan;;
system32.rar\kprof;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.Sklog;;
system32.rar\Frjkfl4g.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.DownLoader.origin;;
system32.rar\Lfj95jg.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.DownLoader.origin;;
system32.rar\ijougiemnaw.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.2935;;
nahzij.dll\data001;C:\Documents and Settings\Administrator\桌面\system32.rar\nahzij.dll;Trojan.PWS.Wsgame.3106;;
nahzij.dll\data002;C:\Documents and Settings\Administrator\桌面\system32.rar\nahzij.dll;Trojan.PWS.Wsgame.3107;;
nahzij.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;发现档案文件中有受感染的对象;;
system32.rar\iqnauhc.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.3184;;
ijiq.dll\data001;C:\Documents and Settings\Administrator\桌面\system32.rar\ijiq.dll;Trojan.PWS.Wsgame.3190;;
ijiq.dll\data002;C:\Documents and Settings\Administrator\桌面\system32.rar\ijiq.dll;Trojan.PWS.Wsgame.3189;;
ijiq.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;发现档案文件中有受感染的对象;;
system32.rar\regflash.exe;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.Lenovo;;
system32.rar\NAVMon32.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.2742;;
system32.rar\LotusHlp.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.origin;;
system32.rar\PTSShell.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.origin;;
system32.rar\upxdnd.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;Trojan.PWS.Wsgame.origin;;
system32.rar\SHAProc.dll;C:\Documents and Settings\Administrator\桌面\system32.rar;可能 DLOADER.Trojan;;
system32.rar\DbgHlp32.dlL;C:\Documents and Settings\Administrator\桌面\system32.rar;可能 DLOADER.Trojan;;
system32.rar;C:\Documents and Settings\Administrator\桌面;发现档案文件中有受感染的对象;;

sam.to

Hello,

hidusb.sys, KAVSafe.sys, mouhid.sys, NMnt.sys, NSDriver.sys, Vbshell.tlb, ~GLH0001.tmp_, ~GLH0003.tmp_, conf.dat, stdole2.tlb, ~GLH000c.tmp_, emhbquvkk.exe.hiv, Sy_Win7k.Jmp

No malicious code were found in these files.

hocnuninstall.exe_, ~GLH0006.tmp_ - Trojan-Downloader.Win32.VB.clp,
DbgHlp32.dlL - Trojan-PSW.Win32.OnLineGames.qjh,
LotusHlp.dll - Trojan-PSW.Win32.OnLineGames.qje,
SHAProc.dll - Trojan-PSW.Win32.OnLineGames.qjg,
WinForm.dll - Trojan-PSW.Win32.OnLineGames.qjf

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

~GLH000d.tmp_

This file is corrupted.

DbgHlp32.exe_ - Trojan.Win32.Vaklik.hb,
LotusHlp.exe_ - Trojan.Win32.Vaklik.hc,
PTSShell.exe_ - Trojan-PSW.Win32.Nilage.bxx,
SHAProc.exe_ - Trojan.Win32.Vaklik.ig,
upxdnd.exe_ - Trojan-PSW.Win32.OnLineGames.qfw,
WinForm.exe_ - Trojan.Win32.Vaklik.gz

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： RootKit.Win32.GameHack.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.29.52