[病毒样本] 29

显示全部楼层 · 发表于 2008-6-18 16:58:02

c0=http://tttfdsr66.cn/inte/dlld1.exe
c1=http://tttfdsr66.cn/inte/dlld2.exe
c2=http://tttfdsr66.cn/inte/dlld3.exe
c3=http://tttfdsr66.cn/inte/dlld4.exe
c4=http://tttfdsr66.cn/inte/dlld5.exe
c5=http://tttfdsr66.cn/inte/dlld6.exe
c6=http://tttfdsr66.cn/inte/dlld7.exe
c7=http://tttfdsr66.cn/inte/dlld8.exe
c8=http://tttfdsr66.cn/inte/dlld9.exe
c9=http://tttfdsr66.cn/inte/dlld10.exe
c10=http://tttfdsr66.cn/inte/dlld11.exe
c11=http://tttfdsr66.cn/inte/dlld12.exe
c12=http://tttfdsr66.cn/inte/dlld13.exe
c13=http://tttfdsr66.cn/inte/dlld14.exe
c14=http://tttfdsr66.cn/inte/dlld15.exe
c15=http://dddukwjk9.cn/inte/dlld16.exe
c16=http://dddukwjk9.cn/inte/dlld17.exe
c17=http://dddukwjk9.cn/inte/dlld18.exe
c18=http://dddukwjk9.cn/inte/dlld19.exe
c19=http://dddukwjk9.cn/inte/dlld20.exe
c20=http://dddukwjk9.cn/inte/dlld21.exe
c21=http://dddukwjk9.cn/inte/dlld22.exe
c22=http://dddukwjk9.cn/inte/dlld23.exe
c23=http://dddukwjk9.cn/inte/dlld24.exe
c24=http://dddukwjk9.cn/inte/dlld25.exe
c25=http://dddukwjk9.cn/inte/dlld26.exe
c26=http://dddukwjk9.cn/inte/dlld27.exe
c27=http://dddukwjk9.cn/inte/dlld28.exe
c28=http://dddukwjk9.cn/inte/dlld29.exe
c29=http://dddukwjk9.cn/inte/dlld30.exe

显示全部楼层 · 发表于 2008-6-18 17:00:43

信息 2008-06-18  17:00:23 您此次查毒清除了29个病毒
信息 2008-06-18  17:00:23 您此次查毒共查出29个病毒以及危险代码
信息 2008-06-18  17:00:23 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件59个
信息 2008-06-18  17:00:23 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-06-18  17:00:23 C:\Documents and Settings\Administrator\桌面\29.rar\dlld5.exe3 Win32.Troj.OnlineGamesT.ny.102456 清除成功

显示全部楼层 · 发表于 2008-6-18 17:03:32

MCAFEE8.7i全杀了

显示全部楼层 · 发表于 2008-6-18 17:04:07

The scan has been done completely.

   1 Scanning directories
   29 Files were scanned
   29 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   29 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   29 Notes

显示全部楼层 · 发表于 2008-6-18 17:44:42

Scan Log
Version of virus signature database: 3195 (20080617)
Date: 2008-6-18 Time: 17:46:11
Scanned disks, folders and files: D:\firefox download\29.rar
D:\firefox download\29.rar » RAR » dlld6.exe4 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld7.exe5 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld8.exe6 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld9.exe7 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe0 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe8 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe9 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe10 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe11 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe12 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe13 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe14 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe15 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe16 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld1.exe17 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe18 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe19 - Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe20 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe21 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe22 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe23 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe24 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe25 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe26 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld2.exe27 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld3.exe1 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld3.exe28 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld4.exe2 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
D:\firefox download\29.rar » RAR » dlld5.exe3 - a variant of Win32/PSW.OnLineGames.OAF trojan - was a part of the deleted object
Number of scanned objects: 29
Number of threats found: 29
Number of cleaned objects: 29
Time of completion: 17:46:39 Total scanning time: 28 sec (00:00:28)

显示全部楼层 · 发表于 2008-6-18 17:49:40

kis2009全砍...

显示全部楼层 · 发表于 2008-6-18 18:11:23

直接解压，红伞全灭

显示全部楼层 · 发表于 2008-6-18 20:15:28

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.ZeroOnline.dv
病毒： Trojan.PSW.Win32.ZhuXian.hx
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.oci
病毒： Trojan.PSW.Win32.SunGame.u
病毒： Trojan.PSW.Win32.GameOL.ocu
病毒： Trojan.PSW.Win32.ZhengTu.ynv
病毒： Trojan.PSW.Win32.RocOnline.lf

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.49.22

显示全部楼层 · 发表于 2008-6-18 20:17:14

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld6.exe4->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld7.exe5->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld8.exe6->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld9.exe7->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe0->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe8->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe9->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe10->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe11->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe12->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe13->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe14->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe15->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe16->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld1.exe17->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe18->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe19->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe20->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe21->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe22->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe23->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe24->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe25->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe26->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld2.exe27->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld3.exe1->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld3.exe28->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld4.exe2->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\29.rar->dlld5.exe3->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-18, 20:16:51
Duration: 0:00:11

Scan result:

Scanned files:    6
Infected objects:    29
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-6-18 20:17:44

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld7.exe5 <- Trojan.Psw.Onlinegames.Apjn : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld7.exe5<UPack>:dlld7.exe5<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Apjp : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld8.exe6 <- Trojan.Psw.Onlinegames.Apms : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe0 <- Trojan.Psw.Onlinegames.Alzp : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe0<UPack>:dlld1.exe0 <- Trojan.Psw.Onlinegames.Alzp : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe0<UPack>:dlld1.exe0<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Alzc : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe9<UPack>:dlld1.exe9<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Apke : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe10 <- Trojan.Psw.Onlinegames.Ajpz : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe10<UPack>:dlld1.exe10 <- Trojan.Psw.Onlinegames.Ajpz : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe10<UPack>:dlld1.exe10<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aepa : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe12 <- Trojan.Psw.Onlinegames.Apil : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld1.exe13 <- Trojan.Psw.Onlinegames.Apil : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe19 <- Trojan.Psw.Onlinegames.Ajod : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe19<UPack>:dlld2.exe19<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Affc : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe20<UPack>:dlld2.exe20<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Apke : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe21 <- Trojan.Psw.Onlinegames.Ajpx : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe21<UPack>:dlld2.exe21 <- Trojan.Psw.Onlinegames.Aejc : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe21<UPack>:dlld2.exe21<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aeox : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe24 <- Trojan.Psw.Onlinegames.Ajpy : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe24<UPack>:dlld2.exe24 <- Trojan.Psw.Onlinegames.Ajpy : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld2.exe24<UPack>:dlld2.exe24<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aidn : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld3.exe1 <- Trojan.Psw.Onlinegames.Akwe : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld3.exe1<UPack>:dlld3.exe1<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Ambj : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld3.exe28 <- Trojan.Psw.Onlinegames.Ajrc : No action
C:\Documents and Settings\All Users\Documents\Test\29.rar<RAR>:dlld3.exe28<UPack>:dlld3.exe28<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Ajrf : No action

Scanned objects : 88

Infected objects : 25

[病毒样本] 29

本帖子中包含更多资源

本帖子中包含更多资源

29

回复 1楼电影结束了的帖子

65/29

F-Prot 4.4.4

ArcaVir2008

[病毒样本] 29

本帖子中包含更多资源

本帖子中包含更多资源

29

回复 1楼 电影结束了 的帖子

65/29

F-Prot 4.4.4

ArcaVir2008

回复 1楼电影结束了的帖子