查看: 3520|回复: 15
收起左侧

[病毒样本] 23个

[复制链接]
promised
发表于 2008-3-29 14:18:25 | 显示全部楼层 |阅读模式
1

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
aerbeisi
发表于 2008-3-29 14:21:30 | 显示全部楼层

13,有些老面孔,处理病毒速度慢,没办法。

[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\jwlah.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        c:\test\4\Kvsc3.dll
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        c:\test\4\LotusHlp.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msepbe.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msosdrop00.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msosfmsq00.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msosjtio00.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msosmnsf00.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\msosping00.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        c:\test\4\PTSShell.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\sehhter.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        c:\test\4\sfnqpewv.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        c:\test\4\xgnfn.dll->(UPack)
Palkia
发表于 2008-3-29 14:22:40 | 显示全部楼层

36/16

病毒: Trojan.PSW.Win32.GameOL.mqx
病毒: Trojan.PSW.Win32.SO2Online.bl
病毒: Trojan.PSW.Win32.GameOL.mss
病毒: Trojan.PSW.Win32.GameOL.mos
病毒: Trojan.PSW.Win32.GameOL.mqv
病毒: Trojan.PSW.Win32.GameOL.msj
病毒: Trojan.PSW.Win32.GameOL.msu
病毒: Trojan.PSW.Win32.GameOL.mpw
病毒: Trojan.PSW.Win32.GameOL.mpz
病毒: Trojan.PSW.Win32.GamesOnline.ry
病毒: Trojan.PSW.Win32.QQSG.dg
病毒: Trojan.PSW.Win32.GameOL.mrs
病毒: Trojan.PSW.Win32.GameOL.mru
病毒: Trojan.PSW.Win32.GameOL.msp
挪威的冬天
发表于 2008-3-29 14:26:41 | 显示全部楼层
信息        2008-03-29  14:23:27        您此次查毒清除了10个病毒                       
信息        2008-03-29  14:23:27        您此次查毒共查出10个病毒以及危险代码                       
信息        2008-03-29  14:23:27        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件33个                       
信息        2008-03-29  14:23:27        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-03-29  14:23:27        D:\Desktop\4.rar\4\xgnfn.dll        Win32.Troj.OnlineGameT.82153        清除成功       
病毒        2008-03-29  14:23:27        D:\Desktop\4.rar\4\tciocp32.dll        Win32.Troj.OnlineGamesT.FL.32768        清除成功       
病毒        2008-03-29  14:23:26        D:\Desktop\4.rar\4\SHAProc.dat        Win32.Troj.OnlineGames.rr.32768        清除成功       
病毒        2008-03-29  14:23:26        D:\Desktop\4.rar\4\sehhter.dll        Win32.Troj.OnlineGames.yf.73728        清除成功       
病毒        2008-03-29  14:23:26        D:\Desktop\4.rar\4\PTSShell.dll        Win32.PSWTroj.OnLineGames.33792        清除成功       
病毒        2008-03-29  14:23:24        D:\Desktop\4.rar\4\msccrt.dll        Win32.Troj.OnlineGamesT.FL.32768        清除成功       
病毒        2008-03-29  14:23:24        D:\Desktop\4.rar\4\LotusHlp.dll        Win32.Troj.OnlineGamesT.FL.32768        清除成功       
病毒        2008-03-29  14:23:24        D:\Desktop\4.rar\4\jwlah.dll        Win32.Troj.OnlineGames.yf.73728        清除成功       
病毒        2008-03-29  14:23:23        D:\Desktop\4.rar\4\DbgHlp32.dlL        Win32.Troj.OnlineGamesT.FL.32768        清除成功       
病毒        2008-03-29  14:23:23        D:\Desktop\4.rar\4\cmdbcs.dll        Win32.Troj.OnlineGamesT.FL.32768        清除成功
曲中求
发表于 2008-3-29 14:29:13 | 显示全部楼层
18

E:\病毒\4.rar>>4\cmdbcs.dll        TrojanPSW.OnLineGames.whi.osay.dll        木马        还未处理
E:\病毒\4.rar>>4\DbgHlp32.dlL        TrojanPSW.SO2Online.bl.bqbv.dll        木马        还未处理
E:\病毒\4.rar>>4\jwlah.dll        Trojan.Gampass.sred.dll        木马        还未处理
E:\病毒\4.rar>>4\Kvsc3.dll        PWSteal.OnLineGames.NFL.oxei.dll        木马        还未处理
E:\病毒\4.rar>>4\LotusHlp.dll        TrojanPSW.GameOL.mos.pkml.dll        木马        还未处理
E:\病毒\4.rar>>4\mfchlp32.dll        TrojanPSW.OnLineGames.xjn.zenm.dll        木马        还未处理
E:\病毒\4.rar>>4\msccrt.dll        TrojanPSW.OnLineGames.whk.awnh.dll        木马        还未处理
E:\病毒\4.rar>>4\msepbe.dll        TrojanPSW.GameOL.mss.huwl.dll        木马        还未处理
E:\病毒\4.rar>>4\msosdrop00.dll        TrojanPSW.GameOL.mri.pfcs.dll        木马        还未处理
E:\病毒\4.rar>>4\msosjtio00.dll        TrojanPSW.GameOL.mpw.npnu.dll        木马        还未处理
E:\病毒\4.rar>>4\msosmnsf00.dll        TrojanPSW.GameOL.msj.zqlb.dll        木马        还未处理
E:\病毒\4.rar>>4\PTSShell.dll        TrojanPSW.OnLineGames.wen.celq.dll        木马        还未处理
E:\病毒\4.rar>>4\sehhter.dll        TrojanPSW.GamesOnline.ry.cdaw.dll        木马        还未处理
E:\病毒\4.rar>>4\sfnqpewv.dll        TrojanPSW.OnLineGames.xjl.itcu.dll        木马        还未处理
E:\病毒\4.rar>>4\SHAProc.dat        TrojanPSW.GameOL.mrs.kmuj.dll        木马        还未处理
E:\病毒\4.rar>>4\SoundMan.exe        W32.Generic.worm.tnpz        病毒        还未处理
E:\病毒\4.rar>>4\tciocp32.dll        TrojanPSW.OnLineGames.wjo.jhnp.dll        木马        还未处理
E:\病毒\4.rar>>4\xgnfn.dll        TrojanPSW.GameOL.msp.fyku.dll        木马        还未处理
mofunzone
发表于 2008-3-29 14:30:14 | 显示全部楼层
全灭
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\4'
C:\Documents and Settings\Administrator\My Documents\4\4\
  cmdbcs.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whi
      [NOTE]      The file was deleted!
  DbgHlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.640
      [NOTE]      The file was deleted!
  fmsbbqi.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4860f05a.qua'!
  interne.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4861f05b.qua'!
  jwlah.dll
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [NOTE]      The file was deleted!
  Kvsc3.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4860f063.qua'!
  LotusHlp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wef.1
      [NOTE]      The file was deleted!
  mfchlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4850f053.qua'!
  msccrt.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
      [NOTE]      The file was deleted!
  msepbe.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosdrop00.dll
      [DETECTION] Is the Trojan horse TR/PSW.12986
      [NOTE]      The file was deleted!
  msosfmsq00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosjtio00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosmnsf00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  msosping00.dll
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  PTSShell.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wen.2
      [NOTE]      The file was deleted!
  sehhter.dll
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [NOTE]      The file was deleted!
  sfnqpewv.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '485bf053.qua'!
  SHAProc.dat
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.655
      [NOTE]      The file was deleted!
  SoundMan.exe
    [0] Archive type: RSRC
    --> Object
        [DETECTION] Contains detection pattern of the SPR/PortScan.I program
      --> Object
        [1] Archive type: Runtime Packed
        --> Object
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/FSG). Please verify the origin of the file
      [NOTE]      The file was deleted!
  tciocp32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wjo.2
      [NOTE]      The file was deleted!
  WINSvr32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '483bf036.qua'!
  xgnfn.dll
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [NOTE]      The file was deleted!


End of the scan: 2008年3月28日  23:29
Used time: 00:04 min

The scan has been done completely.

      2 Scanning directories
     23 Files were scanned
     14 viruses and/or unwanted programs were found
     10 Files were classified as suspicious:
     17 files were deleted
      0 files were repaired
      6 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      0 Archives were scanned
      0 Warnings
     23 Notes
风野胤
发表于 2008-3-29 14:31:11 | 显示全部楼层
EAV差1
2008-3-29 14:23:47        R:\4.rar           23        22        0        Completed
hsp19871116
发表于 2008-3-29 14:40:00 | 显示全部楼层
Antivir有点小强。
Exia 该用户已被删除
发表于 2008-3-29 14:45:37 | 显示全部楼层

全灭

Starting the file scan:

Begin scan in 'D:\4.rar'
D:\4.rar
  [0] Archive type: RAR
  --> 4\cmdbcs.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whi
  --> 4\DbgHlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.640
  --> 4\fmsbbqi.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4\interne.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4\jwlah.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 4\Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4\LotusHlp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wef.1
  --> 4\mfchlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4\msccrt.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whk.2
  --> 4\msepbe.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
  --> 4\msosdrop00.dll
      [DETECTION] Is the Trojan horse TR/PSW.12986
  --> 4\msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4\msosjtio00.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4\msosmnsf00.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4\msosping00.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4\PTSShell.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wen.2
  --> 4\sehhter.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 4\sfnqpewv.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4\SHAProc.dat
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.655
  --> 4\SoundMan.exe
      [DETECTION] Contains detection pattern of the SPR/PortScan.I program
  --> 4\tciocp32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wjo.2
  --> 4\WINSvr32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 4\xgnfn.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [WARNING]   The file was ignored!


End of the scan: 2008年3月29日  14:46
Used time: 00:38 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     18 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      6 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
kkgh
发表于 2008-3-29 15:00:01 | 显示全部楼层
诺顿13个
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-9-17 17:43 , Processed in 0.869459 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表