23个

显示全部楼层 · 发表于 2008-3-29 15:18:49

C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\cmdbcs.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\DbgHlp32.dlL - 可能是 Win32/PSW.OnLineGames.HCV 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\fmsbbqi.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\interne.exe - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\jwlah.dll - 可能是 Win32/Genetik 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\Kvsc3.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\LotusHlp.dll - Win32/PSW.OnLineGames.HCV 特洛伊木马
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\mfchlp32.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msccrt.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msosdrop00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msosfmsq00.dll - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msosjtio00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msosmnsf00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\msosping00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\PTSShell.dll - Win32/PSW.OnLineGames.HCV 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\sehhter.dll - 可能是 Win32/PSW.OnLineGames.NHF 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\sfnqpewv.dll - Win32/PSW.OnLineGames.HCV 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\SHAProc.dat - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\SoundMan.exe - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\tciocp32.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\WINSvr32.dll - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\***.18F12FE200FB45E\桌面\Anti-Virus lab\4.rar > RAR > 4\xgnfn.dll - 可能是 Win32/PSW.OnLineGames.NHF 特洛伊木马的变种
漏一.....

显示全部楼层 · 发表于 2008-3-29 18:47:47

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.mqx
病毒： Trojan.PSW.Win32.SO2Online.bl
病毒： Trojan.PSW.Win32.SO2Game.u
病毒： Trojan.PSW.Win32.GameOL.mss
病毒： Trojan.PSW.Win32.GameOL.mtf
病毒： Trojan.PSW.Win32.GameOL.mos
病毒： Trojan.PSW.Win32.GameOL.mqv
病毒： Trojan.PSW.Win32.GameOL.msj
病毒： Trojan.PSW.Win32.GameOL.msu
病毒： Trojan.PSW.Win32.GameOL.mpw
病毒： Trojan.PSW.Win32.GameOL.mpz
病毒： Trojan.PSW.Win32.GamesOnline.ry
病毒： Trojan.PSW.Win32.QQSG.dg
病毒： Trojan.PSW.Win32.GameOL.mrs
病毒： Trojan.PSW.Win32.GameOL.mru
病毒： Trojan.PSW.Win32.GameOL.msp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.37.51

显示全部楼层 · 发表于 2008-3-29 18:52:33

Scan Log
Version of virus signature database: 2983 (20080329)
Date: 2008/3/29 Time: 18:52:27
Scanned disks, folders and files: G:\v\4.rar
G:\v\4.rar » RAR » 4\cmdbcs.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\DbgHlp32.dlL - probably a variant of Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\fmsbbqi.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\interne.exe - probably unknown NewHeur_PE virus [7] - was a part of the deleted object
G:\v\4.rar » RAR » 4\jwlah.dll - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\Kvsc3.dll - Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\LotusHlp.dll - Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\mfchlp32.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msccrt.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msepbe.dll - is OK
G:\v\4.rar » RAR » 4\msosdrop00.dll - a variant of Win32/PSW.OnLineGames.NMQ trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msosfmsq00.dll - probably a variant of Win32/PSW.OnLineGames.NMQ trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msosjtio00.dll - a variant of Win32/PSW.OnLineGames.NMQ trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msosmnsf00.dll - a variant of Win32/PSW.OnLineGames.NMQ trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\msosping00.dll - a variant of Win32/PSW.OnLineGames.NMQ trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\PTSShell.dll - a variant of Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\sehhter.dll - probably a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\sfnqpewv.dll - a variant of Win32/PSW.OnLineGames.HCV trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\SHAProc.dat - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\SoundMan.exe - probably unknown NewHeur_PE virus [7] - was a part of the deleted object
G:\v\4.rar » RAR » 4\tciocp32.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\WINSvr32.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan - was a part of the deleted object
G:\v\4.rar » RAR » 4\xgnfn.dll - probably a variant of Win32/PSW.OnLineGames.NHF trojan - was a part of the deleted object
Number of scanned objects: 24
Number of threats found: 22
Number of cleaned objects: 22
Time of completion: 18:52:29 Total scanning time: 2 sec (00:00:02)

Notes:
[7] Object is probably infected with an unknown virus.

显示全部楼层 · 发表于 2008-3-29 20:31:14

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:cmdbcs.dll <- Trojan.Psw.Onlinegames.Whi : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:interne.exe <- Variant:Downloader.Vb.Bbe : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:LotusHlp.dll <- Trojan.Psw.Onlinegames.Wef : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:msccrt.dll <- Trojan.Psw.Onlinegames.Whk : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:PTSShell.dll <- Trojan.Psw.Onlinegames.Wen : No action
C:\Documents and Settings\All Users\Documents\Test\4.rar<RAR>:tciocp32.dll <- Trojan.Psw.Onlinegames.Wjo : No action

Scanned objects : 42

Infected objects : 6

显示全部楼层 · 发表于 2008-3-29 20:33:20

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 11.00.703
病毒库日期 2008-03-29
更新日期 2008-03-15

扫描目标 d:\我的文档\桌面\4.rar

开始时间 2008-03-15 09:40:11

在 d:\我的文档\桌面\4.rar->4\cmdbcs.dll 中发现 Trojan/PSW.OnLineGames.yxm 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\DbgHlp32.dlL 中发现 Trojan/PSW.GamePass.agzs 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\LotusHlp.dll 中发现 Trojan/PSW.OnLineGames.zbj 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\msccrt.dll 中发现 Trojan/PSW.OnLineGames.znv 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\PTSShell.dll 中发现 Trojan/PSW.OnLineGames.ytt 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\tciocp32.dll 中发现 Trojan/PSW.OnLineGames.zoe 病毒, 已删除
在 d:\我的文档\桌面\4.rar->4\xgnfn.dll 中发现 Trojan/PSW.OnLineGames.zut 病毒, 已删除
正常结束。

扫描结果:
               文件数 :25                               病毒体 :7
               删除 :7                                  解毒 :0
扫描速度(千字节/秒) :224                            扫描时间 :00:00:04
扫描文件速度(个/秒) :6

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -    - - - - - - - - - - - -

显示全部楼层 · 发表于 2008-3-29 20:37:57

Hello,

12.exe_ - Trojan-PSW.Win32.OnLineGames.ylu,
19.exe_, 30.exe_, aa23.exe_ - Trojan-PSW.Win32.OnLineGames.ylv,
2.exe_, aa3.exe_ - Trojan-PSW.Win32.OnLineGames.ymj,
27.exe_ - Trojan-PSW.Win32.OnLineGames.ymm,
34.exe_ - Trojan-PSW.Win32.OnLineGames.ylw,
4.exe_ - Trojan-PSW.Win32.OnLineGames.ymo,
9.exe_ - Trojan-PSW.Win32.OnLineGames.ymq,
aa14.exe_, aa20.exe_, aa8.exe_ - Trojan-PSW.Win32.OnLineGames.ylx,
aa2.exe_ - Trojan-PSW.Win32.OnLineGames.ymr,
aa28.exe_ - Trojan-PSW.Win32.OnLineGames.yms,
aa29.exe_ - Trojan-PSW.Win32.OnLineGames.ymt,
aa5.exe_ - Trojan-PSW.Win32.OnLineGames.ymu,
aa7.exe_ - Trojan-PSW.Win32.OnLineGames.ymv,
AVPSrv.dll - Trojan-PSW.Win32.OnLineGames.ymx,
ayNNBNNB1045.dll - Trojan-PSW.Win32.OnLineGames.yly,
CAPWSJHL.htm_ - Trojan-Downloader.VBS.Psyme.np,
cedafb.dll - Trojan-PSW.Win32.OnLineGames.ylz,
crugd.dll - Trojan-PSW.Win32.Lmir.bue,
DbgHlp32(1).dlL - Trojan-PSW.Win32.OnLineGames.ymy,
DbgHlp32.dlL - Trojan-PSW.Win32.OnLineGames.ymz,
dnteh.dll - Trojan-PSW.Win32.OnLineGames.yna,
ektvm.dll - Trojan-PSW.Win32.WOW.arq,
fjyjy.dll - Trojan-PSW.Win32.OnLineGames.ynb,
fmsbbqi.dll - Trojan-PSW.Win32.OnLineGames.ymk,
hhrdxd.dll - Trojan-PSW.Win32.OnLineGames.ymb,
interne.exe_ - Trojan-PSW.Win32.OnLineGames.ymc,
jfrwdh.dll - Trojan-PSW.Win32.OnLineGames.ymd,
jwlah.dll - Trojan-PSW.Win32.OnLineGames.ync,
jzijj.dll - Trojan-PSW.Win32.OnLineGames.ynd,
kg.cmd_ - Trojan-PSW.Win32.Magania.imw,
Kvsc3.dll - Trojan-PSW.Win32.OnLineGames.yne,
mppds.dll - Trojan-PSW.Win32.OnLineGames.ymp,
mseion.sys - Trojan-PSW.Win32.OnLineGames.yma,
msepbe(1).dll - Trojan-PSW.Win32.OnLineGames.xkv,
msepbe.dll - Trojan-PSW.Win32.OnLineGames.xku,
MsIMMs32(1).dll, MsIMMs32.dll - Trojan-PSW.Win32.OnLineGames.ynf,
msoscqit00.dll - Trojan-PSW.Win32.OnLineGames.ynl,
msosjtio00.dll - Trojan.Win32.Agent.jbx,
msosmhfp00.dll - Trojan-PSW.Win32.OnLineGames.yng,
msosping00.dll - Trojan-PSW.Win32.OnLineGames.ynk,
sehhter.dll - Trojan-PSW.Win32.OnLineGames.ynh,
sgrefg.dll - Trojan-PSW.Win32.OnLineGames.yme,
SHAProc.dat - Trojan-PSW.Win32.OnLineGames.yni,
SoundMan.exe_ - Trojan-PSW.Win32.OnLineGames.ymf,
tciocp32.dll - Trojan-PSW.Win32.OnLineGames.ymw,
WINSvr32.dll - Trojan-PSW.Win32.OnLineGames.ymn,
wrqszl.dll - Trojan-PSW.Win32.OnLineGames.ymg,
WSockDrv32(1).dll, WSockDrv32.dll - Trojan-PSW.Win32.OnLineGames.yml,
wyrsdj.dll - Trojan-PSW.Win32.OnLineGames.ymh,
xgnfn.dll - Trojan-PSW.Win32.OnLineGames.ynj,
zgfdet.dll - Trojan-PSW.Win32.OnLineGames.ymi,
zjydcx.dll - Trojan.Win32.Agent.jbw

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
[:1:]

[病毒样本] 23个

36/19

晕死~~。。

浏览过的版块