21个

promised

1. http://fv.fvskl.com.cn/down.txt

复制代码

1. c0=http://vh1.vfrfs.net.cn/gd/bvc01.exe
   
2. c1=http://vh1.vfrfs.net.cn/gd/bvc02.exe
   
3. c2=http://vh1.vfrfs.net.cn/gd/bvc04.exe
   
4. c3=http://vh1.vfrfs.net.cn/gd/bvc05.exe
   
5. c4=http://vh1.vfrfs.net.cn/gd/bvc06.exe
   
6. c5=http://vh1.vfrfs.net.cn/gd/bvc07.exe
   
7. c6=http://vh1.vfrfs.net.cn/gd/bvc08.exe
   
8. c7=http://vh1.vfrfs.net.cn/gd/bvc09.exe
   
9. c8=http://vh1.vfrfs.net.cn/gd/bvc10.exe
   
10. c9=http://vh2.vfrfs.net.cn/gd/bvc11.exe
    
11. c10=http://vh2.vfrfs.net.cn/gd/bvc12.exe
    
12. c11=http://vh2.vfrfs.net.cn/gd/bvc13.exe
    
13. c12=http://vh2.vfrfs.net.cn/gd/bvc18.exe
    
14. c13=http://vh2.vfrfs.net.cn/gd/bvc19.exe
    
15. c14=http://vh2.vfrfs.net.cn/gd/bvc20.exe
    
16. c15=http://vh2.vfrfs.net.cn/gd/bvc21.exe
    
17. c16=http://vh2.vfrfs.net.cn/gd/bvc25.exe
    
18. c17=http://vh3.vfrfs.net.cn/gd/bvc35.exe
    
19. 
    

复制代码

promised

C:\ABC\vir\ad.exe - 特征码 'Trojan.Crypt.DJ' 被发现
C:\ABC\vir\bvc01.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc02.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc04.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc05.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc06.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc07.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc08.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc09.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\bvc10.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\vir\hdf453d.dll - 特征码 'Virus.Win32.OnLineGames.EAT' 被发现
C:\ABC\vir\mnmhgsrv.dll - 特征码 'BehavesLike.Trojan.ShellHook' 被发现
C:\ABC\vir\mpwdeapi.dll - 特征码 'Virus.Win32.OnLineGames.BGD' 被发现
C:\ABC\vir\oohxebyt.dll - 特征码 'Virus.Win32.OnLineGames.EAT' 被发现
C:\ABC\vir\pbac.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\vir\ptjhehlp.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\vir\SFC_OS.DLL（无问题）
C:\ABC\vir\ypcqghlp.dll - 特征码 'BehavesLike.Trojan.ShellHook' 被发现
C:\ABC\vir\zptlcsys.dll - 特征码 'BehavesLike.Trojan.ShellHook' 被发现
C:\ABC\vir\zxmsdwin.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\vir\zyzxjime.dll - 特征码 'Virus.Win32.OnLineGames.BGD' 被发现

        21 文件被扫描
          (0 压缩档 0 文件)
        20 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.266

woai_jolin

2008-6-29 16:10:43 Real-time file system protection file G:\v\c\zptlcsys.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:42 Real-time file system protection file G:\v\c\ypcqghlp.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:40 Real-time file system protection file G:\v\c\ptjhehlp.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:39 Real-time file system protection file G:\v\c\oohxebyt.dll a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:37 Real-time file system protection file G:\v\c\mpwdeapi.dll a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:36 Real-time file system protection file G:\v\c\mnmhgsrv.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:35 Real-time file system protection file G:\v\c\hdf453d.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:33 Real-time file system protection file G:\v\c\pbac.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:32 Real-time file system protection file G:\v\c\bvc10.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:31 Real-time file system protection file G:\v\c\bvc09.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:29 Real-time file system protection file G:\v\c\bvc08.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:28 Real-time file system protection file G:\v\c\bvc07.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:27 Real-time file system protection file G:\v\c\bvc06.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:25 Real-time file system protection file G:\v\c\bvc05.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:24 Real-time file system protection file G:\v\c\bvc04.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:22 Real-time file system protection file G:\v\c\bvc02.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:21 Real-time file system protection file G:\v\c\bvc01.exe probably a variant of Win32/PSW.OnLineGames.OAF trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:20 Real-time file system protection file G:\v\c\ad.exe probably a variant of Win32/Genetik trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:18 Real-time file system protection file G:\v\c\zyzxjime.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-29 16:10:17 Real-time file system protection file G:\v\c\zxmsdwin.dll probably a variant of Win32/PSW.OnLineGames.FDY trojan cleaned by deleting - quarantined NT AUTHORITY\SYSTEM Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

[ 本帖最后由 woai_jolin 于 2008-6-29 16:10 编辑 ]

Palkia

病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\zptlcsys.dll        Win32.Troj.OnlineGameT.uv.91648        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\ypcqghlp.dll        Win32.PSWTroj.GameOL.539144        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\ptjhehlp.dll        Win32.Troj.OnlineGames.u.535560        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\oohxebyt.dll        Win32.Troj.OnlineGameT.uv.91648        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\mpwdeapi.dll        Win32.Troj.OnlineGames.u.186880        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\mnmhgsrv.dll        Win32.Troj.OnlineGameT.uv.91648        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc10.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc09.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc08.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc07.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc06.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc05.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:56        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc04.exe        Win32.Troj.OnlineGamesT.ea.119304        清除成功       
病毒        2008-06-29  16:14:55        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc02.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:55        C:\Documents and Settings\Administrator\桌面\样本.rar\bvc01.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-29  16:14:55        C:\Documents and Settings\Administrator\桌面\样本.rar\ad.exe        Win32.TrojDownloader.Agent.143360        清除成功       
病毒        2008-06-29  16:14:55        C:\Documents and Settings\Administrator\桌面\样本.rar\zyzxjime.dll        Win32.Troj.OnlineGameT.uv.91648        清除成功       
病毒        2008-06-29  16:14:55        C:\Documents and Settings\Administrator\桌面\样本.rar\zxmsdwin.dll        Win32.Troj.OnlineGameT.uv.91648        清除成功

hkt988

D:\下载文件夹\样本.rar > RAR > zxmsdwin.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > zyzxjime.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > ad.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc01.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc02.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc04.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc05.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc06.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc07.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc08.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc09.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > bvc10.exe - 可能是 Win32/PSW.OnLineGames.OAF 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > pbac.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > hdf453d.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > mnmhgsrv.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > mpwdeapi.dll - Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > oohxebyt.dll - Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > ptjhehlp.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > ypcqghlp.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
D:\下载文件夹\样本.rar > RAR > zptlcsys.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种

Nerazzurri

2008/6/29        16:44:07        1214729047        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\zxmsdwin.dll" file.  
2008/6/29        16:44:13        1214729053        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\zyzxjime.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc01.exe" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc02.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc04.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc05.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc06.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc07.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc08.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc09.exe\[Upack]\[Embedded#MAIN]" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\bvc10.exe" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\hdf453d.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\mpwdeapi.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\oohxebyt.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\ptjhehlp.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:Spyware-gen [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\ypcqghlp.dll" file.  
2008/6/29        16:44:16        1214729056        Nerazzurri        3696        Sign of "Win32:OnLineGames-EEP [Trj]" has been found in "C:\Users\Nerazzurri\Desktop\样本.rar\zptlcsys.dll" file.

hj5abc

avast 17.
多报Onlinegames.

hum

Symantec
漏2

醉一生爱妍

MicroVita AntiSpyware  
_____________________________________________
                                          
             风暴微塔反间谍 T2
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\__\ad.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:16992  MD5:a999d12fe59cd3b2ac36b3933985f78b


[C:\Documents and Settings\Administrator\桌面\__\bvc01.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:18296  MD5:4f820bb0ab088c13954d3b83643b12af


[C:\Documents and Settings\Administrator\桌面\__\bvc02.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:16810  MD5:5efd99825ab8b914b17b01420785cf43


[C:\Documents and Settings\Administrator\桌面\__\bvc04.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:18012  MD5:02059d5d83145fae4a7bad7a23629079


[C:\Documents and Settings\Administrator\桌面\__\bvc05.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:17521  MD5:3786ad94e9b1dd3f22d7839e5471f16c


[C:\Documents and Settings\Administrator\桌面\__\bvc06.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:16776  MD5:7368234a4b66e7cef641a997c14b9330


[C:\Documents and Settings\Administrator\桌面\__\bvc07.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:16644  MD5:a166f40ea6d11aeff3b63558fce03966


[C:\Documents and Settings\Administrator\桌面\__\bvc08.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:17147  MD5:86e4349fe16472537af6e167b5ba9950


[C:\Documents and Settings\Administrator\桌面\__\bvc09.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:17180  MD5:71f9011a8b0849e3ec09ebcc0a434a68


[C:\Documents and Settings\Administrator\桌面\__\bvc10.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:19359  MD5:57e0b5f27b0041d3dd1ca8d54b4fc7ac


[C:\Documents and Settings\Administrator\桌面\__\pbac.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:7276  MD5:5e5b3e9ab4af58095ab873e26a499455


文件数:21   病毒数:11  比重:0.5238095238095
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

醉一生爱妍