explorer.exe

a8202286

运行aa.exe
     a0.exe
后没有危险动作~

Palkia

115/44
                瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： RootKit.Win32.Undef.hc   
病毒： Trojan.PSW.Win32.GameOL.nmn
病毒： RootKit.Win32.RESSDT.al  
病毒： Trojan.PSW.Win32.SunOnline.og
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.gbk
病毒： Trojan.PSW.Win32.GameOL.nlt
病毒： Trojan.PSW.Win32.GameOL.nka
病毒： Trojan.PSW.Win32.GameOL.njz
病毒： RootKit.Win32.Undef.gt   
病毒： Trojan.PSW.Win32.QQPass.dmg
病毒： Trojan.PSW.Win32.GameOL.njs
病毒： Trojan.PSW.Win32.GameOL.nkq
病毒： Trojan.PSW.Win32.QQHX.twz
病毒： Trojan.PSW.Win32.GameOL.nkd
病毒： Trojan.PSW.Win32.GameOL.gef
病毒： Trojan.PSW.Win32.GamesOnline.wb
病毒： Trojan.PSW.Win32.GamesOnline.zn
病毒： RootKit.Win32.Mnless.pn  
病毒： Trojan.PSW.Win32.QQHX.txk
病毒： Worm.Win32.PaBug.gy      
病毒： RootKit.Win32.Mnless.pn  
病毒： Trojan.PSW.Win32.SunOnline.oi
病毒： Trojan.PSW.Win32.GameOL.nlm
病毒： Trojan.PSW.Win32.GameOL.nib

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.45.12

sam.to

原帖由 tanlimo 于 2008-5-20 15:37 发表
搞下载的，没讯雷，不好下。

20
http://1.123690.net/iii/aa.exe
http://1.123690.net/iii/a0.exe
http://1.123690.net/iii/a1.exe
http://1.123690.net/iii/a2.exe
http://1.123690.net/iii/a3.exe
http:/ ...

打包上來

sam.to

The scan has been done completely.

      1 Scanning directories
     37 Files were scanned
     42 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -5 Files not concerned
      0 Archives were scanned
     35 Warnings
      0 Notes

上报2

Filename         Result
a0.exe          CLEAN

The file 'a0.exe' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
aa.exe          CLEAN

[ 本帖最后由 kato9096 于 2008-5-20 19:05 编辑 ]

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aidm        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a1.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.afql        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a10.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aibk        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a11.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aigr        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a12.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ygb        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a13.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiaq        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a14.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ahvj        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a15.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aeka        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a16.exe//FSG
已刪除: 特洛伊木馬程式 Rootkit.Win32.Agent.zf        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a17.exe
已刪除: 特洛伊木馬程式 Trojan-Proxy.Win32.Xorpix.es        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a18.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aimc        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a19.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiol        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a2.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ailf        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a20.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aikm        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a21.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acnp        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a22.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aioi        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a23.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiko        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a24.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aehr        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a25.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acnp        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a26.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.afel        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a27.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adup        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a28.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aicr        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a29.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adqo        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a3.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ygb        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a30.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiqs        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a31.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.bzg        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a32.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aieq        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a33.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aimc        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a34.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aioh        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a35.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.afql        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a4.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aimb        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a5.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aihg        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a6.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiqt        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a7.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ahyx        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a8.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aiij        檔案: C:\Documents and Settings\kato9096\桌面\37\37\a9.exe//PE_Patch.UPX//UPX

35

BING126

McAfee  New Malware.aj

傻猪猪米走鸡

D:\firefox download\37\37\a0.exe - is OK
D:\firefox download\37\37\a1.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a10.exe - a variant of Win32/PSW.OnLineGames.ZJK trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a11.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a12.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a13.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a14.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a15.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a16.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a17.exe - is OK
D:\firefox download\37\37\a18.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a19.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a2.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a20.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a21.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a22.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a23.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a24.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a25.exe - Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a26.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a27.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a28.exe - a variant of Win32/PSW.OnLineGames.ZJK trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a29.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a3.exe - Win32/PSW.OnLineGames.OAR trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a30.exe - a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a31.exe - Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a32.exe - a variant of Win32/PSW.QQPass.NCZ trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a34.exe - Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a35.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a4.exe - a variant of Win32/PSW.OnLineGames.ZJK trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a5.exe - Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a6.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a7.exe - Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a8.exe - a variant of Win32/PSW.OnLineGames.NWB trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\a9.exe - probably a variant of Win32/PSW.OnLineGames.NWC trojan - cleaned by deleting - quarantined
D:\firefox download\37\37\aa.exe - is OK

qigang

RS20.45.12未杀！

傻猪猪米走鸡

a17是否活的？是的话就上报一下下

allinwonderi

MISS