查看: 5433|回复: 21
收起左侧

[病毒样本] 某贴挖的51个…

[复制链接]
will
发表于 2008-2-28 15:20:43 | 显示全部楼层 |阅读模式
虚拟机里面的SSM挂了      

51个…

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
hahacomcn
发表于 2008-2-28 15:21:42 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\s.part1.rar'
C:\Documents and Settings\haha\桌面\s.part1.rar
  [0] Archive type: RAR
    --> s\10[1].exe
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\11[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
          --> Object
            [4] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.5
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\12[1].exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
    --> s\13[1].exe
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\14[1].exe
          [DETECTION] Is the Trojan horse TR/Onlinegames.rxt
    --> s\15[1].exe
          [DETECTION] Contains suspicious code HEUR/Malware
    --> s\16[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtv.2
    --> s\17[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.375
  --> s\18[1].exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
    --> s\19[1].exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> s\1[1].exe
          [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.2
    --> s\20[1].exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> s\21.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.30
    --> s\22[1].exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> s\2[1].exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> s\3[1].exe
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\4[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtu.2
    --> s\5[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
          --> Object
            [4] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rti.2
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\6[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.22
    --> s\72600.dat
          [DETECTION] Contains suspicious code HEUR/Malware
    --> s\7[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
          --> Object
            [4] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.11
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen


End of the scan: 2008年2月28日  15:21
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     22 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
spaceplane
发表于 2008-2-28 15:22:15 | 显示全部楼层
BD 34
will
 楼主| 发表于 2008-2-28 15:22:51 | 显示全部楼层

回复 2楼 hahacomcn 的帖子

你动作真快…  有两包  
spaceplane
发表于 2008-2-28 15:23:40 | 显示全部楼层
NOD 50

已扫描的磁盘,文件夹及文件:E:\pic\_PICtemp\s\
E:\pic\_PICtemp\s\s\10[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\11[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\12[1].exe - Win32/PSW.OnLineGames.NML 木马的变种
E:\pic\_PICtemp\s\s\13[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\14[1].exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\s\s\15[1].exe - Win32/PSW.OnLineGames.NML 木马的变种
E:\pic\_PICtemp\s\s\16[1].exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\s\s\17[1].exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\s\s\18[1].exe - Win32/PSW.OnLineGames.NML 木马的变种
E:\pic\_PICtemp\s\s\19[1].exe - Win32/PSW.OnLineGames.NFL 木马的变种
E:\pic\_PICtemp\s\s\1[1].exe - 可能是 Win32/Genetik 木马 的一个变种
E:\pic\_PICtemp\s\s\20[1].exe - Win32/PSW.OnLineGames.NFL 木马的变种
E:\pic\_PICtemp\s\s\21.exe - Win32/PSW.QQPass.AVS 木马
E:\pic\_PICtemp\s\s\22[1].exe - Win32/Agent.NOS 木马的变种
E:\pic\_PICtemp\s\s\2[1].exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\s\s\3[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\4[1].exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\s\s\5[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\6[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\72600.dat - 可能是 Win32/Genetik 木马 的一个变种
E:\pic\_PICtemp\s\s\7[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\8[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\9[1].exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\s\s\AtiSrv.exe - 可能是 Win32/Genetik 木马 的一个变种
E:\pic\_PICtemp\s\s\bauhgnem.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\cuhad.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\DbgHlp32.dlL - Win32/PSW.OnLineGames.HCV 木马
E:\pic\_PICtemp\s\s\eohsom.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\gnolnait.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\hfrdzx.dll - 可能是 Win32/PSW.OnLineGames.NML 木马 的一个变种
E:\pic\_PICtemp\s\s\ijougiemnaw.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\kcxfpltf.dll - Win32/PSW.OnLineGames.HCV 木马的变种
E:\pic\_PICtemp\s\s\kiluw.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\Kvsc3.dll - Win32/PSW.OnLineGames.HCV 木马
E:\pic\_PICtemp\s\s\msaclue.sys - Win32/PSW.OnLineGames.MYG 木马
E:\pic\_PICtemp\s\s\mseion.sys - Win32/PSW.OnLineGames.NFC 木马
E:\pic\_PICtemp\s\s\mselk.sys - Win32/PSW.OnLineGames.MYG 木马
E:\pic\_PICtemp\s\s\msepion.sys - Win32/PSW.OnLineGames.NFC 木马
E:\pic\_PICtemp\s\s\msosfpids32.sys - Win32/PSW.OnLineGames.NMQ 木马
E:\pic\_PICtemp\s\s\msosmhfp00.dll - 可能是 Win32/Genetik 木马 的一个变种
E:\pic\_PICtemp\s\s\msyecp.sys - Win32/PSW.OnLineGames.MYG 木马
E:\pic\_PICtemp\s\s\oadnew.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\oqnauhc.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\PTSShell.dll - Win32/PSW.OnLineGames.HCV 木马
E:\pic\_PICtemp\s\s\SHAProc.dll - 可能是 Win32/PSW.OnLineGames.HCV 木马 的一个变种
E:\pic\_PICtemp\s\s\taijoad.dll - Win32/PSW.OnLineGames.NLH 木马
E:\pic\_PICtemp\s\s\upxdnd.dll - 可能是 Win32/PSW.OnLineGames.HCV 木马 的一个变种
E:\pic\_PICtemp\s\s\WSockDrv32.dll - Win32/PSW.OnLineGames.HCV 木马
E:\pic\_PICtemp\s\s\zgxfdx.dll - 可能是 Win32/PSW.OnLineGames.NML 木马 的一个变种
E:\pic\_PICtemp\s\s\zjydcx.dll - 可能是 Win32/PSW.OnLineGames.NML 木马 的一个变种
已扫描的文件数目:51
已发现的病毒数目:50
完成时间: 15:22:50 总扫描时间:12 秒 (00:00:12)
spaceplane
发表于 2008-2-28 15:25:58 | 显示全部楼层
伞7 49?
Begin scan in 'E:\pic\_PICtemp\s.part1.rar'
E:\pic\_PICtemp\s.part1.rar
  [0] Archive type: RAR
  --> s\10[1].exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\11[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.5
  --> s\12[1].exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
  --> s\13[1].exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\14[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.400
  --> s\15[1].exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> s\16[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtv.2
  --> s\17[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.375
  --> s\18[1].exe
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
  --> s\19[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> s\1[1].exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.djg.2
  --> s\20[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> s\21.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.30
  --> s\22[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> s\2[1].exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> s\3[1].exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\4[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtu.2
  --> s\5[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rti.2
  --> s\6[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.22
  --> s\72600.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> s\7[1].exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
Begin scan in 'E:\pic\_PICtemp\s.part2.rar'
E:\pic\_PICtemp\s.part2.rar
  [0] Archive type: RAR
  --> s\9[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> s\AtiSrv.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> s\bauhgnem.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.5
  --> s\cuhad.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\DbgHlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.375
  --> s\eohsom.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> s\gnolnait.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\hfrdzx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> s\ijougiemnaw.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.9
  --> s\kcxfpltf.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> s\kiluw.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtv.2
  --> s\msaclue.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\mseion.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\mselk.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\msepion.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\msosfpids32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.QZL
  --> s\msosmhfp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.14933
  --> s\msyecp.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\oadnew.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\oqnauhc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rti.2
  --> s\PTSShell.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtu.2
  --> s\SHAProc.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> s\taijoad.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.400
  --> s\WSockDrv32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.369
  --> s\zgxfdx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> s\zjydcx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年2月28日  15:25
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     52 Files were scanned
     45 viruses and/or unwanted programs were found
      4 Files were classified as suspicious:
wangjay1980
发表于 2008-2-28 15:42:13 | 显示全部楼层
43    TO KL
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl        File: C:\Documents and Settings\Owner\×ÀÃæ\s\10[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\Owner\×ÀÃæ\s\11[1].exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.BHO.azt        File: C:\Documents and Settings\Owner\×ÀÃæ\s\12[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl        File: C:\Documents and Settings\Owner\×ÀÃæ\s\13[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rxs        File: C:\Documents and Settings\Owner\×ÀÃæ\s\14[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sdd        File: C:\Documents and Settings\Owner\×ÀÃæ\s\15[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rts        File: C:\Documents and Settings\Owner\×ÀÃæ\s\16[1].exe//UPack
detected: Trojan program Trojan.Win32.Vaklik.ku        File: C:\Documents and Settings\Owner\×ÀÃæ\s\17[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwv        File: C:\Documents and Settings\Owner\×ÀÃæ\s\18[1].exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\s\19[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ryh        File: C:\Documents and Settings\Owner\×ÀÃæ\s\1[1].exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\s\20[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.avs        File: C:\Documents and Settings\Owner\×ÀÃæ\s\21.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rmj        File: C:\Documents and Settings\Owner\×ÀÃæ\s\2[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwl        File: C:\Documents and Settings\Owner\×ÀÃæ\s\3[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rtr        File: C:\Documents and Settings\Owner\×ÀÃæ\s\4[1].exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\Owner\×ÀÃæ\s\5[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.prw        File: C:\Documents and Settings\Owner\×ÀÃæ\s\6[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\Owner\×ÀÃæ\s\7[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.pzl        File: C:\Documents and Settings\Owner\×ÀÃæ\s\8[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\Owner\×ÀÃæ\s\9[1].exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.iqm        File: C:\Documents and Settings\Owner\×ÀÃæ\s\AtiSrv.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rky        File: C:\Documents and Settings\Owner\×ÀÃæ\s\bauhgnem.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rvp        File: C:\Documents and Settings\Owner\×ÀÃæ\s\cuhad.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rno        File: C:\Documents and Settings\Owner\×ÀÃæ\s\eohsom.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rof        File: C:\Documents and Settings\Owner\×ÀÃæ\s\gnolnait.dll//UPack
detected: Trojan program Trojan.Win32.Agent.fym        File: C:\Documents and Settings\Owner\×ÀÃæ\s\hfrdzx.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.prw        File: C:\Documents and Settings\Owner\×ÀÃæ\s\ijougiemnaw.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwm        File: C:\Documents and Settings\Owner\×ÀÃæ\s\kiluw.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rtv        File: C:\Documents and Settings\Owner\×ÀÃæ\s\Kvsc3.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.prw        File: C:\Documents and Settings\Owner\×ÀÃæ\s\msaclue.sys
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rvv        File: C:\Documents and Settings\Owner\×ÀÃæ\s\mseion.sys
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rnn        File: C:\Documents and Settings\Owner\×ÀÃæ\s\msepion.sys
detected: Trojan program Rootkit.Win32.Agent.abq        File: C:\Documents and Settings\Owner\×ÀÃæ\s\msosfpids32.sys
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rzf        File: C:\Documents and Settings\Owner\×ÀÃæ\s\msosmhfp00.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rji        File: C:\Documents and Settings\Owner\×ÀÃæ\s\msyecp.sys
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qpq        File: C:\Documents and Settings\Owner\×ÀÃæ\s\oadnew.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rqh        File: C:\Documents and Settings\Owner\×ÀÃæ\s\oqnauhc.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rtu        File: C:\Documents and Settings\Owner\×ÀÃæ\s\PTSShell.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rwd        File: C:\Documents and Settings\Owner\×ÀÃæ\s\taijoad.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rxt        File: C:\Documents and Settings\Owner\×ÀÃæ\s\upxdnd.dll
detected: Trojan program Trojan.Win32.KillAV.ot        File: C:\Documents and Settings\Owner\×ÀÃæ\s\usbcams3.sys
detected: Trojan program Trojan.Win32.Agent.fzb        File: C:\Documents and Settings\Owner\×ÀÃæ\s\zjydcx.dll//UPack



Hello,

19[1].exe, 5.exe, kcxfpltf.dll - Trojan-PSW.Win32.OnLineGames.sdx,
20[1].exe, SHAProc.dll - Trojan-PSW.Win32.OnLineGames.sdy,
22[1].exe, 72600.dat - Trojan.Win32.Agent.gbx,
25.exe - Trojan-PSW.Win32.QQPass.awz,
DbgHlp32.dlL - Trojan-PSW.Win32.OnLineGames.seg,
mselk.sys - Trojan-PSW.Win32.OnLineGames.seh,
WSockDrv32.dll - Trojan-PSW.Win32.OnLineGames.sef,
zgxfdx.dll - Trojan.Win32.Agent.gbt

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

tttt.gif

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 wangjay1980 于 2008-2-28 16:57 编辑 ]
hahacomcn
发表于 2008-2-28 15:47:22 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\s.part2.rar'
C:\Documents and Settings\haha\桌面\s.part2.rar
  [0] Archive type: RAR
    --> s\9[1].exe
      --> Object
        [2] Archive type: RSRC
        --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
    --> s\AtiSrv.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> s\bauhgnem.dll
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.5
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\cuhad.dll
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\DbgHlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.375
    --> s\eohsom.dll
          [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
    --> s\gnolnait.dll
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.11
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\hfrdzx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> s\ijougiemnaw.dll
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.9
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\kcxfpltf.dll
      [DETECTION] Contains suspicious code HEUR/Malware
    --> s\kiluw.dll
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtv.2
  --> s\msaclue.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\mseion.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\mselk.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\msepion.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\msosfpids32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.QZL
  --> s\msosmhfp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.14933
  --> s\msyecp.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\oadnew.dll
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
    --> s\oqnauhc.dll
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rti.2
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\PTSShell.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rtu.2
  --> s\SHAProc.dll
      [DETECTION] Contains suspicious code HEUR/Malware
    --> s\taijoad.dll
          [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> s\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.400
  --> s\WSockDrv32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.369
  --> s\zgxfdx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> s\zjydcx.dll
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [INFO]      A backup was created as '4836674a.qua'  ( QUARANTINE )


End of the scan: 2008年2月28日  15:47
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     31 Files were scanned
     31 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
hahacomcn
发表于 2008-2-28 16:04:42 | 显示全部楼层
原帖由 yimike 于 2008-2-28 15:22 发表
你动作真快…  有两包  


hehe  ,我先看到一包了。

btw:对 beta5的计数真无语了。
xiaoxmj
发表于 2008-2-28 16:56:24 | 显示全部楼层
信息        2008-02-28  16:56:15        您此次查毒共查出38个病毒以及危险代码                       
信息        2008-02-28  16:56:15        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件90个                       
信息        2008-02-28  16:56:15        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\zjydcx.dll        Win32.PSWTroj.OnLineGamesT.nm.102400        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\zgxfdx.dll        Win32.PSWTroj.OnLineGamesT.nm.102400        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\WSockDrv32.dll        Win32.Troj.OnlineGamesT.k.28672        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\upxdnd.dll        Win32.Troj.OnLineGamesT.hh.29184        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\taijoad.dll        Win32.Troj.OnlineGames.yf.73728        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\PTSShell.dll        Win32.Troj.OnLineGamesT.hh.29184        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\oqnauhc.dll        Win32.Troj.OnlineGamesT.ty.90112        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\oadnew.dll        Win32.Troj.OnlineGamesT.ty.90112        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\msyecp.sys        Win32.Troj.RootKitT.on.10496        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\mselk.sys        Win32.Troj.RootKitT.on.10496        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\msaclue.sys        Win32.Troj.RootKitT.on.10496        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\Kvsc3.dll        Win32.Troj.OnLineGamesT.hh.29184        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\kiluw.dll        Win32.Troj.GameHackT.ge.118784        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\ijougiemnaw.dll        Win32.Troj.OnlineGamesT.zy.90112        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\hfrdzx.dll        Win32.PSWTroj.OnLineGamesT.nm.102400        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\gnolnait.dll        Win32.Troj.OnlineGamesT.ty.90112        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\eohsom.dll        Win32.Troj.OnlineGames.yf.73728        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\DbgHlp32.dlL        Win32.Troj.OnlineGames.db.25600        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\bauhgnem.dll        Win32.Troj.OnlineGamesT.ty.90112        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\9[1].exe        Win32.Troj.GamesHackT.gu.94304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\8[1].exe        Win32.Troj.OnlineGamesT.nr.37008        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\7[1].exe        Win32.Troj.GamesHackT.gu.94304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\6[1].exe        Win32.Troj.OnlineGamesT.nr.37008        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\5[1].exe        Win32.Troj.GamesHackT.gu.94304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\4[1].exe        Win32.Troj.OnlineGamesT.ty.98304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\3[1].exe        Win32.Troj.OnlineGameT.am.107664        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\2[1].exe        Win32.Troj.OnlineGamesT.e.94315        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\20[1].exe        Win32.Troj.OnlineGamesT.ky.151552        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\1[1].exe        Win32.Troj.OnLineGamesT.ax.94208        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\18[1].exe        Win32.Troj.OnlineGamesT.oy.61440        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\17[1].exe        Win32.Troj.OnlineGamesT.e.94315        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\16[1].exe        Win32.Troj.OnlineGamesT.ty.98304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\15[1].exe        Win32.Troj.OnlineGamesT.oy.61440        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\14[1].exe        Win32.Troj.OnlineGamesT.ty.98304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\13[1].exe        Win32.Troj.OnlineGameT.am.107664        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\12[1].exe        Win32.Troj.OnlineGamesT.oy.61440        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\11[1].exe        Win32.Troj.GamesHackT.gu.94304        跳过,未处理       
病毒        2008-02-28  16:56:15        C:\Documents and Settings\Administrator\桌面\s\10[1].exe        Win32.Troj.OnlineGameT.am.107664        跳过,未处理       
信息        2008-02-28  16:55:59        金山毒霸主程序启动查毒过程,查毒方式:命令行查毒                       
信息        2008-02-28  16:55:57        金山毒霸主程序 启动                       
信息        2008-02-28  16:54:24        金山毒霸主程序 退出
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-12-17 10:48 , Processed in 0.105536 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表