很多个

显示全部楼层 · 发表于 2008-3-31 12:14:46

C:\Documents and Settings\Administrator\桌面\Virus.rar>>AutoRun.rar>>AutoRun.inf INF.Autorun.b 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>D3D9_32.DLL.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP3B.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP4A.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>dxdlg.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>dxdlg.rar>>DXDLG.EXE2 Heuri.Suspicious.ERNM 启发式扫描还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>MSEION.rar>>MSEION.SYS RootKit.Mnless.jz.xstj 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>mwisys32_080323.rar>>mwisys32_080323.dll Spyware.Agent.br.dll.qlib.dll 间谍程序还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\1\13[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\1\15[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\1\17[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\1\21[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\11[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\12[1].exe2 TrojanPSW.OnLineGames.rkf.skmg 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\16[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\20[1].exe4 TrojanPSW.OnLineGames.rkf.daak 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\2[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\2\4[1].exe4 TrojanPSW.OnLineGames.rkf.ohuo 木马还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\14[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\18[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\22[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\3[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\5[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\3\6[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>yangben.rar>>yangben\1\4\27[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\Administrator\桌面\Virus.rar>>新病毒vlmcgol.rar>>vlmcgol.exe2 TrojanDownloader.Todon.aq.pgwr 木马还未处理

显示全部楼层 · 发表于 2008-3-31 12:32:58

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.mta
病毒： Trojan.PSW.Win32.GameOL.mqp
病毒： Trojan.PSW.Win32.SunOnline.mu
病毒： Trojan.PSW.Win32.SunOnline.mz
病毒： Trojan.PSW.Win32.SunOnline.mr
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.msz
病毒： Backdoor.Win32.Gpigeon.2007.en
病毒： Trojan.PSW.Win32.GameOL.moq
病毒： RootKit.Win32.GameHack.gex
病毒： Trojan.PSW.Win32.XYOnline.acl
病毒： Trojan.PSW.Win32.XYOnline.acl
病毒： RootKit.Win32.Mnless.jz
病毒： Trojan.Clicker.Win32.PopHot.drp

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.38

显示全部楼层 · 发表于 2008-4-1 12:53:13

desktop.ini, Display3D.exe2, index.dat4, svchost.exe2

No malicious code were found in these files.

MSEION.SYS - Trojan-PSW.Win32.OnLineGames.ytc

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

显示全部楼层 · 发表于 2008-4-1 13:07:10

3804417  AutoRun.inf  96 Byte  CLEAN
3804418  Display3D.exe2  11.14 KB  DAMAGED FILE (UNKNOWN)
3804419  mwisys32_080323.dll  208.5 KB  MALWARE
3804420  REGKEY.HIV  8 KB  CLEAN
200567  svchost.exe2  32 KB  KNOWN CLEAN
3804421  index.dat4  624 KB  CLEAN
The file 'dlbar.dll' has been determined to be 'MALWARE'. Our analysts named the threat DR/Rbot.143368.1. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.00.03.94. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'D3D9_64.DLL' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.vpi.13. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.03.94. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: PCK/UPACK.

显示全部楼层 · 发表于 2008-4-1 13:08:17

CLAMWIN

E:\VIRUS\Virus31\AutoRun.rar: Trojan.Delf-911 FOUND
E:\VIRUS\Virus31\D3D9_32.DLL.rar: PUA.Packed.UPack FOUND
E:\VIRUS\Virus31\dxdlg.rar: PUA.Packed.UPack FOUND
E:\VIRUS\Virus31\MSEION.rar: Trojan.Spy-27488 FOUND
E:\VIRUS\Virus31\mwisys32_080323.rar: Adware.Baidu FOUND
E:\VIRUS\Virus31\yangben.rar: PUA.Packed.UPack-1 FOUND
E:\VIRUS\Virus31\新病毒vlmcgol.rar: Trojan.Delf-818 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 238576
Engine version: 0.92
Scanned directories: 1
Scanned files: 11
Skipped non-executable files: 0
Infected files: 7

Data scanned: 1.27 MB
Time: 4.485 sec (0 m 4 s)
--------------------------------------
Completed
--------------------------------------

显示全部楼层 · 发表于 2008-4-1 15:58:54

C:\Documents and Settings\swans\桌面\Virus.rar>>AutoRun.rar>>AutoRun.inf INF.Autorun.b 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>AutoRun.rar>>rejoice082.exe2 Backdoor.Hupigon.axbr.pkjz 后门还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP3B.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP4A.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dlbar.rar>>dlbar.dll Backdoor.Rbot.jcl.jnzo.arc.dll 后门还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>D3D9_64.DLL TrojanPSW.OnLineGames.vpi.aujx.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>DXDLG.EXE2 TrojanDownloader.Agent.loa.pxkp 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>MSEION.rar>>MSEION.SYS RootKit.Mnless.jz.xstj 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>mwisys32_080323.rar>>mwisys32_080323.dll Spyware.Agent.br.dll.qlib.dll 间谍程序还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\13[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\15[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\17[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\21[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\11[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\12[1].exe2 TrojanPSW.OnLineGames.rkf.skmg 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\16[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\20[1].exe4 TrojanPSW.OnLineGames.rkf.daak 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\2[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\4[1].exe4 TrojanPSW.OnLineGames.rkf.ohuo 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\14[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\18[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\22[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\3[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\5[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\6[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\4\27[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>新病毒vlmcgol.rar>>vlmcgol.exe2 TrojanDownloader.Todon.aq.pgwr 木马还未处理

显示全部楼层 · 发表于 2008-4-1 20:06:16

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.mta
病毒： Trojan.PSW.Win32.GameOL.mqp
病毒： Trojan.PSW.Win32.SunOnline.mu
病毒： Trojan.PSW.Win32.SunOnline.mz
病毒： Trojan.PSW.Win32.SunOnline.mr
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.msz
病毒： Backdoor.Win32.Gpigeon.2007.en
病毒： Trojan.PSW.Win32.GameOL.moq
病毒： RootKit.Win32.GameHack.gex
病毒： Trojan.PSW.Win32.XYOnline.acl
病毒： Trojan.PSW.Win32.XYOnline.acl
病毒： RootKit.Win32.Mnless.jz
病毒： Trojan.Clicker.Win32.PopHot.drp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.38.11

显示全部楼层 · 发表于 2008-4-1 21:12:52

ArcaBit

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:13[1].exe2 <- Trojan.Psw.Onlinegames.Whl : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:13[1].exe2<UPack>:13[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Whk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:15[1].exe2 <- Trojan.Psw.Onlinegames.Whj : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:15[1].exe2<UPack>:15[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Whi : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:17[1].exe0 <- Trojan.Psw.Onlinegames.Wen : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:17[1].exe0<UPack>:17[1].exe0<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wen : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:21[1].exe2 <- Trojan.Psw.Onlinegames.Wjn : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:21[1].exe2<UPack>:21[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Whm : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:11[1].exe2<UPack>:11[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wjo : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:12[1].exe2<UPX>:12[1].exe2 <- Trojan.Psw.Onlinegames.Rkf : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:12[1].exe2<UPX>:12[1].exe2<DLLRES>:DATEINFO0.exe<UPack>:DATEINFO0.exe <- Trojan.Psw.Onlinegames.Tch : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:16[1].exe2<UPack>:16[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wdj : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:20[1].exe4<UPX>:20[1].exe4 <- Trojan.Psw.Onlinegames.Rkf : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:20[1].exe4<UPX>:20[1].exe4<DLLRES>:DATEINFO0.exe <- Trojan.Psw.Onlinegames.Uoe : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:20[1].exe4<UPX>:20[1].exe4<DLLRES>:DATEINFO0.exe<UPack>:DATEINFO0.exe <- Trojan.Psw.Onlinegames.Uoe : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:2[1].exe2<UPack>:2[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Weh : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:4[1].exe4<UPX>:4[1].exe4 <- Trojan.Psw.Onlinegames.Rkf : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:4[1].exe4<UPX>:4[1].exe4<DLLRES>:DATEINFO0.exe<UPack>:DATEINFO0.exe <- Trojan.Spy.Agent.Blw : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:14[1].exe2 <- Trojan.Psw.Onlinegames.Vlp : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:14[1].exe2<UPack>:14[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ymz : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:18[1].exe2 <- Trojan.Psw.Onlinegames.Wef : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:18[1].exe2<UPack>:18[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wef : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:22[1].exe2 <- Trojan.Psw.Onlinegames.Wfb : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:22[1].exe2<UPack>:22[1].exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wfb : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:3[1].exe2 <- Trojan.Psw.Onlinegames.Wek : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:5[1].exe4 <- Trojan.Psw.Onlinegames.Wjm : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:5[1].exe4<UPack>:5[1].exe4<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wiy : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:6[1].exe4 <- Trojan.Psw.Onlinegames.Who : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:6[1].exe4<UPack>:6[1].exe4<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Whn : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:27[1].exe0 <- Trojan.Psw.Onlinegames.Wjp : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:yangben.rar<RAR>:27[1].exe0<UPack>:27[1].exe0<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Wjp : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:穝痜瑀vlmcgol.rar<RAR>:vlmcgol.exe2 <- Variant:Downloader.Todon.am : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:D3D9_32.DLL.rar<RAR>:D3D9_32.DLL<UPack>:D3D9_32.DLL <- Downloader.Agent.Loa : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:D3D9_32.DLL.rar<RAR>:TMP3B.TMP <- Trojan.Psw.Onlinegames.Pmi : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:D3D9_32.DLL.rar<RAR>:TMP4A.TMP <- Trojan.Psw.Onlinegames.Pmi : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:dxdlg.rar<RAR>:D3D9_32.DLL<UPack>:D3D9_32.DLL <- Downloader.Agent.Loa : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:dxdlg.rar<RAR>:DXDLG.EXE2<UPack>:DXDLG.EXE2<DLLRES>:D3D9_32.DLL0.exe<UPack>:D3D9_32.DLL0.exe <- Downloader.Agent.Loa : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:MSEION.rar<RAR>:MSEION.SYS <- Trojan.Psw.Onlinegames.Yjk : No action
C:\Documents and Settings\All Users\Documents\Test\Virus.rar<RAR>:mwisys32_080323.rar<RAR>:mwisys32_080323.dll <- Trojan.Spy.Pophot.Aku : No action

Scanned objects : 96

Infected objects : 39

显示全部楼层 · 发表于 2008-4-2 14:05:56

detected lineage.gen

[病毒样本] 很多个

26个

72/28

72/28