收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 下载物*37
12下一页
返回列表 发新帖
查看: 2423|回复: 15
收起左侧

[病毒样本] 下载物*37

[复制链接]
IllusionWing
发表于 2008-7-27 16:02:18 | 显示全部楼层 |阅读模式
UG (With KPS) ALL KILLED
UG (Without KPS) 31
卡巴 35
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss01.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss02.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.Agent.udd 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss03.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss04.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss05.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss06.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss07.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss08.exe//PE_Patch//UPack
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.ryhe 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss09.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss10.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss11.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss12.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sife 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss13.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss14.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss15.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shir 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss16.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss17.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.Agent.sav 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss18.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss19.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sdaf 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss20.exe//FSG
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss21.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss22.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss23.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss24.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss25.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjhq 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss26.exe
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.ryhe 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss27.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sife 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss28.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.skmc 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss29.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss30.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-PSW.Win32.QQPass.crn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss31.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss32.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.shie 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss33.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/00904903\jss34.exe//PE_Patch//UPack
检测到：木马程序 Trojan-GameThief.Win32.OnLineGames.sjyh 文件: C:\Documents and Settings\Administrator\桌面\新建文件夹\TEMP\CDisk.rar/WINDOWS\system32\mttwfh.dll

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

testhawk
发表于 2008-7-27 16:06:11 | 显示全部楼层
很和谐

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

woai_jolin
发表于 2008-7-27 16:11:54 | 显示全部楼层
Scan Log
Version of virus signature database: 3300 (20080725)
Date: 2008-7-27  Time: 16:12:01
Scanned disks, folders and files: G:\v\CDisk.rar
G:\v\CDisk.rar » RAR » 00904903\jss01.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss02.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss03.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss04.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss05.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss06.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss07.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss08.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss09.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss10.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss11.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss12.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss13.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss14.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss15.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss16.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss17.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss18.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss19.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss20.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss21.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss22.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss23.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss24.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss25.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss26.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss27.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss28.exe - Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss29.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss30.exe - Win32/PSW.OnLineGames.NXI trojan - was a part of the deleted object
G:\v\CDisk.rar » RAR » 00904903\jss31.exe - archive damaged - the file could not be extracted.
Number of scanned objects: 31
Number of threats found: 30
Number of cleaned objects: 30
Time of completion: 16:12:04  Total scanning time: 3 sec (00:00:03)
回复

举报

woai_jolin
发表于 2008-7-27 16:12:45 | 显示全部楼层
!   G:\v\CDisk.rar: 00904903\jss31.exe CRC 失败。文件被破坏
!   G:\v\CDisk.rar: 不可预料的压缩文件末端
回复

举报

hahacomcn
发表于 2008-7-27 16:13:51 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\CDisk.rar'
C:\Documents and Settings\haha\桌面\CDisk.rar
    [0] Archive type: RAR
    --> 00904903\jss01.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss02.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Agent.vro Trojan
      --> 00904903\jss03.exe
          [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
    --> 00904903\jss04.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss05.exe
          [DETECTION] Is the TR/PSW.Online.bin Trojan
    --> 00904903\jss06.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss07.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss08.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss09.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss10.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss11.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss12.exe
          [DETECTION] Is the TR/PSW.OnLineGa.aqq Trojan
    --> 00904903\jss13.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss14.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss15.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss16.exe
          [DETECTION] Is the TR/PSW.OnLin.aklo.2 Trojan
      --> 00904903\jss17.exe
          [DETECTION] Is the TR/Spy.Agent.dhh Trojan
      --> 00904903\jss19.exe
          [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
    --> 00904903\jss20.exe
      [DETECTION] Is the TR/PSW.OnlineGames.YYE.8 Trojan
    --> 00904903\jss21.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss22.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss23.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss24.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss25.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss26.exe
          [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
    --> 00904903\jss27.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss28.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss29.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss30.exe
          [DETECTION] Is the TR/PSW.Online.tdy Trojan
    --> 00904903\jss32.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss34.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss35.exe
          [DETECTION] Is the TR/Undef.I Trojan
    --> WINDOWS\system32\mttwfh.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2008年7月27日  16:13
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
     38 Files were scanned
     36 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes
回复

举报

Nerazzurri
发表于 2008-7-27 16:15:30 | 显示全部楼层
2008-7-27        16:12:35        1217146355        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss01.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss02.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss03.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss04.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss05.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss06.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:38        1217146358        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss07.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss08.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss09.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss10.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss11.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss12.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss13.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss14.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss15.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss16.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss17.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss18.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss19.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss20.exe\[FSG]\[Embedded#6000]\[Embedded#40b0]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss21.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss22.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss23.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss24.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss25.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss26.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss27.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss28.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss29.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss30.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-BSI [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss31.exe\[UPX]\[Embedded#FILE]" file.  
2008-7-27        16:12:39        1217146359        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss32.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss33.exe\[UPX]\[Embedded#4060]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\00904903\jss34.exe\[Upack]\[Embedded#4080]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#09c00]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#13800]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#1d400]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#27000]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#30c00]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll\[Embedded#3a800]" file.  
2008-7-27        16:12:40        1217146360        Nerazzurri        2420        Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar\WINDOWS\system32\mttwfh.dll" file.
回复

举报

Nerazzurri
发表于 2008-7-27 16:17:15 | 显示全部楼层

36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar'
C:\Documents and Settings\Nerazzurri\桌面\CDisk.rar
    [0] Archive type: RAR
    --> 00904903\jss01.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss02.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Agent.vro Trojan
      --> 00904903\jss03.exe
          [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
    --> 00904903\jss04.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss05.exe
          [DETECTION] Is the TR/PSW.Online.bin Trojan
    --> 00904903\jss06.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss07.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss08.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss09.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss10.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss11.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss12.exe
          [DETECTION] Is the TR/PSW.OnLineGa.aqq Trojan
    --> 00904903\jss13.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss14.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss15.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss16.exe
          [DETECTION] Is the TR/PSW.OnLin.aklo.2 Trojan
      --> 00904903\jss17.exe
          [DETECTION] Is the TR/Spy.Agent.dhh Trojan
      --> 00904903\jss19.exe
          [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
    --> 00904903\jss20.exe
      [DETECTION] Is the TR/PSW.OnlineGames.YYE.8 Trojan
    --> 00904903\jss21.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss22.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss23.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss24.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss25.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss26.exe
          [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
    --> 00904903\jss27.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss28.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss29.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss30.exe
          [DETECTION] Is the TR/PSW.Online.tdy Trojan
    --> 00904903\jss32.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 00904903\jss34.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 00904903\jss35.exe
          [DETECTION] Is the TR/Undef.I Trojan
    --> WINDOWS\system32\mttwfh.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
回复

举报

woai_jolin
发表于 2008-7-27 16:19:01 | 显示全部楼层
35个


2008-7-27 16:18:50        Real-time file system protection        file        G:\v\WINDOWS\system32\mttwfh.dll        Win32/PSW.OnLineGames.NOA trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:49        Real-time file system protection        file        G:\v\00904903\jss34.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:49        Real-time file system protection        file        G:\v\00904903\jss33.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:49        Real-time file system protection        file        G:\v\00904903\jss32.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:48        Real-time file system protection        file        G:\v\00904903\jss31.exe        a variant of Win32/PSW.QQPass.NCZ trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:48        Real-time file system protection        file        G:\v\00904903\jss30.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:48        Real-time file system protection        file        G:\v\00904903\jss29.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:47        Real-time file system protection        file        G:\v\00904903\jss28.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:47        Real-time file system protection        file        G:\v\00904903\jss27.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:47        Real-time file system protection        file        G:\v\00904903\jss26.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:47        Real-time file system protection        file        G:\v\00904903\jss25.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:46        Real-time file system protection        file        G:\v\00904903\jss24.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:46        Real-time file system protection        file        G:\v\00904903\jss23.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:46        Real-time file system protection        file        G:\v\00904903\jss22.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:45        Real-time file system protection        file        G:\v\00904903\jss21.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:45        Real-time file system protection        file        G:\v\00904903\jss20.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:45        Real-time file system protection        file        G:\v\00904903\jss19.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:45        Real-time file system protection        file        G:\v\00904903\jss18.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:44        Real-time file system protection        file        G:\v\00904903\jss17.exe        a variant of Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:44        Real-time file system protection        file        G:\v\00904903\jss16.exe        a variant of Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:44        Real-time file system protection        file        G:\v\00904903\jss15.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:44        Real-time file system protection        file        G:\v\00904903\jss14.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:44        Real-time file system protection        file        G:\v\00904903\jss13.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:43        Real-time file system protection        file        G:\v\00904903\jss12.exe        a variant of Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:43        Real-time file system protection        file        G:\v\00904903\jss11.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:43        Real-time file system protection        file        G:\v\00904903\jss10.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:42        Real-time file system protection        file        G:\v\00904903\jss09.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:42        Real-time file system protection        file        G:\v\00904903\jss08.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:42        Real-time file system protection        file        G:\v\00904903\jss07.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:42        Real-time file system protection        file        G:\v\00904903\jss06.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:41        Real-time file system protection        file        G:\v\00904903\jss05.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:41        Real-time file system protection        file        G:\v\00904903\jss04.exe        probably a variant of Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:41        Real-time file system protection        file        G:\v\00904903\jss03.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:40        Real-time file system protection        file        G:\v\00904903\jss02.exe        Win32/PSW.OnLineGames.NXI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 16:18:40        Real-time file system protection        file        G:\v\00904903\jss01.exe        Win32/PSW.OnLineGames.NML trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
回复

举报

dadingdading
发表于 2008-7-27 16:35:04 | 显示全部楼层
kv    35个  
回复

举报

kkgh
发表于 2008-7-27 18:59:56 | 显示全部楼层
费尔36个


瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.ovp
病毒： Trojan.PSW.Win32.GameOL.ott
病毒： Trojan.PSW.Win32.GameOL.osq
病毒： Trojan.PSW.Win32.GameOL.ovk
病毒： Trojan.PSW.Win32.GameOL.oek
病毒： Trojan.Win32.Undef.jnj   
病毒： Trojan.PSW.Win32.GameOL.oqt
病毒： Trojan.PSW.Win32.GameOL.ovi
病毒： Trojan.PSW.Win32.GameOL.oug
病毒： Trojan.PSW.Win32.GameOL.ovp

用户来源：互联网

软件版本：20.54.61

瑞星27个
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-7 23:52 , Processed in 0.147242 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表