下载者

小白鼠

1=http://66.186.34.250/1.exe
2=http://66.186.34.138/2.exe
7=http://66.186.37.130/7.exe
13=http://67.43.158.42/13.exe

Starting the file scan:

Begin scan in 'E:\7.exe'
E:\7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [INFO]      The file was deleted!
Begin scan in 'E:\13.exe'
E:\13.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [INFO]      The file was deleted!

tonger2003

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.yog        URL: http://67.43.158.42/13.exe//PE_Patch//UPack
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.ymu        URL: http://66.186.37.130/7.exe//PE_Patch//UPack

醉一生爱妍

LZ帖的不完整。。

http://66.186.34.250/20.exe
http://66.186.34.250/23.exe
http://67.43.158.42/16.exe
http://dl.360safe.com/360compkill.exe
http://66.186.34.138/1.exe
http://66.186.34.138/2.exe
http://66.186.34.138/4.exe
http://67.43.158.42/13.exe
http://67.43.158.42/17.exe
http://66.186.37.130/12.exe
http://66.186.34.138/5.exe
http://66.186.37.130/7.exe
http://67.43.158.42/14.exe
http://67.43.158.42/15.exe
http://66.186.34.250/21.exe
http://66.186.34.250/19.exe
http://66.186.34.250/22.exe
http://66.186.37.130/11.exe
?_pdt=360safe&_pg=s100737&_bd=SD015&_h=w4.safe.lft&_v=028&_u=http%3A%2F%2Fdl.360safe.com%2F360compkill.exe&_r=1719&_t=1
http://66.186.37.130/8.exe
http://66.186.37.130/10.exe
http://66.186.34.138/6.exe
http://67.43.158.42/18.exe
http://dl.360safe.com/360compkill.exe

醉一生爱妍

老东西了

Starting the file scan:

Begin scan in 'E:\system32.rar'
E:\system32.rar
  [0] Archive type: RAR
  --> system32\kduy.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [INFO]      The file was deleted!

mofunzone

能下的12个反正是全灭了
Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\18.exe'
C:\TDDOWNLOAD\
  18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\16.exe'
C:\TDDOWNLOAD\
  16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\360compkill.exe'
C:\TDDOWNLOAD\
  360compkill.exe
    [0] Archive type: RAR SFX (self extracting)
      --> killer_autorun.exe
        [1] Archive type: RAR SFX (self extracting)
        --> data\AVL000.dat
        --> data\avl001.dat
        --> data\avlub01.dat
        --> data\avlub02.dat
        --> data\avlub03.dat
        --> data\avl_h162.dat
        --> data\avl_h163.dat
        --> data\avl_h164.dat
        --> data\avl_h165.dat
        --> data\avl_h166.dat
        --> Module\APack.dll
        --> Module\ATrojan.dll
        --> Module\KillTrojan.dll
        --> antiRK.dll
          [2] Archive type: RSRC
          --> Object
        --> AVLeach.dll
        --> AVLeachSDK.dll
        --> kill_autorun.exe
          [2] Archive type: RSRC
          --> Object
          --> Object
        --> License.alf
        --> msvcp60.dll
      --> killer_javqhc.exe
        [1] Archive type: RAR SFX (self extracting)
        --> Rundll32.exe
          [2] Archive type: RSRC
          --> Object
          --> Object
          --> Object
          --> Object
            [3] Archive type: RSRC
            --> Object
        --> kernel32.dll
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
            --> Object
            --> Object
            --> Object
              [4] Archive type: RSRC
              --> Object
      --> KillerSet.exe
        [1] Archive type: RSRC
        --> Object
      --> killer_dummycom.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
        --> Object
          [2] Archive type: RSRC
          --> Object
        --> Object
      --> killer_ati2evxx.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
        --> Object
        --> Object
      --> killer_gdwli32.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
      --> killer_rodog.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
          --> Object
            [3] Archive type: RSRC
            --> Object
      --> check\cmdCheckTools.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
    --> check\msvcp60.dll
      --> fixtool.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
            --> Object
            --> Object
            --> Object
              [4] Archive type: RSRC
              --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\10.exe'
C:\TDDOWNLOAD\
  10.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\11.exe'
C:\TDDOWNLOAD\
  11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\12.exe'
C:\TDDOWNLOAD\
  12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\13.exe'
C:\TDDOWNLOAD\
  13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\14.exe'
C:\TDDOWNLOAD\
  14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\15.exe'
C:\TDDOWNLOAD\
  15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\17.exe'
C:\TDDOWNLOAD\
  17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\7.exe'
C:\TDDOWNLOAD\
  7.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
              [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\8.exe'
C:\TDDOWNLOAD\
  8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.whs
      [NOTE]      The file was deleted!


End of the scan: 2008年4月2日  23:23
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     43 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     12 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     31 Files not concerned
      3 Archives were scanned
      7 Warnings
     12 Notes

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16.EXE
木马程序生成以下文件:
1) C:\WINDOWS\CMDBCS.EXE
2) C:\WINDOWS\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\17.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\CDXBFXDB.DLL
2) C:\WINDOWS\SYSTEM32\MSEPBE.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\FJNBV.DLL
2) C:\WINDOWS\SYSTEM32\MSEPBE.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KDUY.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\14.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SEHHTER.DLL
2) C:\WINDOWS\SYSTEM32\MSEPBE.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\15.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\8.EXE
木马程序生成以下文件:
1) C:\A9BU.EXE
2) C:\WINDOWS\4KD3E.TMP.EXE
3) C:\WINDOWS\SYSTEM32\HJAIQ.DLL
4) C:\WINDOWS\SYSTEM32\MSEPBE.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RGFJJ.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\18.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\IJATNAW.DLL
2) C:\WINDOWS\SYSTEM32\MSEPBE.DLL
是否删除木马程序及其衍生物?

sam.to

有沒有人打包上來

solcroft

为什么在木马群里可以看见360safe.com的官方地址
而且这个东西还被avira杀了
360官方放马？