list*56

显示全部楼层 · 发表于 2008-7-31 17:57:34

http://v.gogodown.com.cn/x.txt

复制代码

http://www.gogodown.com.cn/on/jss00.exe
http://www.gogodown.com.cn/on/jss01.exe
http://www.gogodown.com.cn/on/jss02.exe
http://www.gogodown.com.cn/on/jss03.exe
http://www.gogodown.com.cn/on/jss04.exe
http://www.gogodown.com.cn/on/jss05.exe
http://www.gogodown.com.cn/on/jss06.exe
http://www.gogodown.com.cn/on/jss07.exe
http://www.gogodown.com.cn/on/jss08.exe
http://www.gogodown.com.cn/on/jss09.exe
http://www.gogodown.com.cn/on/jss10.exe
http://ww1.gogodown.com.cn/on/jss11.exe
http://ww1.gogodown.com.cn/on/jss12.exe
http://ww1.gogodown.com.cn/on/jss13.exe
http://ww1.gogodown.com.cn/on/jss14.exe
http://ww1.gogodown.com.cn/on/jss15.exe
http://ww1.gogodown.com.cn/on/jss16.exe
http://ww1.gogodown.com.cn/on/jss17.exe
http://ww1.gogodown.com.cn/on/jss18.exe
http://ww1.gogodown.com.cn/on/jss19.exe
http://ww1.gogodown.com.cn/on/jss20.exe
http://ww2.gogodown.com.cn/on/jss21.exe
http://ww2.gogodown.com.cn/on/jss22.exe
http://ww2.gogodown.com.cn/on/jss23.exe
http://ww2.gogodown.com.cn/on/jss24.exe
http://ww2.gogodown.com.cn/on/jss25.exe
http://ww2.gogodown.com.cn/on/jss26.exe
http://ww2.gogodown.com.cn/on/jss27.exe
http://ww2.gogodown.com.cn/on/jss28.exe
http://ww2.gogodown.com.cn/on/jss29.exe
http://ww2.gogodown.com.cn/on/jss30.exe
http://ww3.gogodown.com.cn/on/jss31.exe
http://ww3.gogodown.com.cn/on/jss32.exe
http://ww3.gogodown.com.cn/on/jss33.exe
http://ww3.gogodown.com.cn/on/jss34.exe
http://ww3.gogodown.com.cn/on/jss35.exe

复制代码

地址：
http://www.fs2you.com/files/3f59cae1-5eec-11dd-bdd6-0014221b798a/

PW:virus

[ 本帖最后由电影结束了于 2008-7-31 18:37 编辑 ]

显示全部楼层 · 发表于 2008-7-31 18:03:32

等着

显示全部楼层 · 发表于 2008-7-31 18:23:18

您提取的文件不存在或已被删除。

显示全部楼层 · 发表于 2008-7-31 18:29:25

原帖由 hj5abc 于 2008-7-31 18:23 发表
您提取的文件不存在或已被删除。

不是吧。。。~
等等

显示全部楼层 · 发表于 2008-7-31 19:12:38

Scan Log
Version of virus signature database: 3313 (20080731)
Date: 2008-7-31 Time: 19:12:31
Scanned disks, folders and files: G:\v\X56
G:\v\X56\adsntzt.dll - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\bndfxdh.dll - is OK
G:\v\X56\certmgrkd.dll - probably a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\cliconfgzx.dll - probably a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\ddserh.dll - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\ghjsw.dll - is OK
G:\v\X56\jss00.exe - a variant of Win32/Delf.NMX trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss01.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss02.exe - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss03.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss04.exe - Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss05.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss06.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss07.exe - probably a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss08.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss09.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss10.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss11.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss12.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss13.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss14.exe - Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss15.exe - probably a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss16.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss17.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss18.exe - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss19.exe - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss20.exe - Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss21.exe - is OK
G:\v\X56\jss22.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss23.exe - Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss24.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss25.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss26.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss27.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss28.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss29.exe - is OK
G:\v\X56\jss30.exe - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss31.exe - Win32/PSW.QQPass.NDO trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss32.exe - a variant of Win32/PSW.OnLineGames.MUG trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss33.exe - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss34.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\jss35.exe - Win32/Agent.NZY trojan - cleaned by deleting - quarantined [1]
G:\v\X56\ksuserfy.dll - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\lweurqhx.dll - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\mttwfh.dll - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\olecli32pt.dll - Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\sgdewg.dll - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\slbiopfs2.dll - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\srpcss.dll - Win32/TrojanDropper.Agent.NMA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\sys07002.dll - Win32/TrojanDropper.Agent.NMA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\tdggrz.dll - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
G:\v\X56\teamozy.dll - Win32/Agent.NZY trojan - cleaned by deleting - quarantined [1]
G:\v\X56\tscfgwmijxsj.dll - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\usbmonjx2.dll - probably a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\X56\ytfa.dll - is OK
G:\v\X56\zycdex.dll - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 56
Number of threats found: 51
Number of cleaned objects: 51
Time of completion: 19:12:36 Total scanning time: 5 sec (00:00:05)

Notes:
[1] Object has been deleted as it only contained the virus body.

显示全部楼层 · 发表于 2008-7-31 19:13:52

2008-7-31 19:13:09 Kernel File  'G:\v\X56\ytfa.dll' was sent to ESET for analysis.
2008-7-31 19:13:07 Kernel File  'G:\v\X56\ghjsw.dll' was sent to ESET for analysis.
2008-7-31 19:13:04 Kernel File  'G:\v\X56\bndfxdh.dll' was sent to ESET for analysis.

显示全部楼层 · 发表于 2008-7-31 19:16:37

已扫描文件: 56
含有检测项的文件: 41

显示全部楼层 · 发表于 2008-7-31 19:30:01

金山 52

显示全部楼层 · 发表于 2008-7-31 19:59:48

IK 49

D:\病毒测试\临时解压\adsntzt.dll
D:\病毒测试\临时解压\bndfxdh.dll - 特征码 'Virus.Win32.Onlinegames.BBH' 被发现
D:\病毒测试\临时解压\certmgrkd.dll - 特征码 'Trojan-Spy' 被发现
D:\病毒测试\临时解压\cliconfgzx.dll
D:\病毒测试\临时解压\ddserh.dll - 特征码 'Backdoor.Win32.NetCrack.13.b' 被发现
D:\病毒测试\临时解压\ghjsw.dll - 特征码 'Trojan-GameThief.Win32.OnLineGames.sdgf' 被发现
D:\病毒测试\临时解压\jss00.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss01.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss02.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss03.exe
D:\病毒测试\临时解压\jss04.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss05.exe
D:\病毒测试\临时解压\jss06.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss07.exe - 可疑代码段被发现 (Level: 105)
D:\病毒测试\临时解压\jss08.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shig' 被发现
D:\病毒测试\临时解压\jss09.exe - 特征码 'Trojan-PWS.Lmir.UMH' 被发现
D:\病毒测试\临时解压\jss10.exe - 特征码 'Virus.Win32.Agent.ZRP' 被发现
D:\病毒测试\临时解压\jss11.exe - 特征码 'Trojan-PWS.Lmir.UMH' 被发现
D:\病毒测试\临时解压\jss12.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss13.exe - 特征码 'Virus.Win32.Agent.ZRP' 被发现
D:\病毒测试\临时解压\jss14.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss15.exe - 可疑代码段被发现 (Level: 75)
D:\病毒测试\临时解压\jss16.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss17.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss18.exe - 特征码 'Trojan-PWS.OnlineGames.ZAY' 被发现
D:\病毒测试\临时解压\jss19.exe - 特征码 'Trojan-GameThief.Win32.OnLineGames.shhv' 被发现
D:\病毒测试\临时解压\jss20.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss21.exe - 可疑代码段被发现 (Level: 90)
D:\病毒测试\临时解压\jss22.exe - 可疑代码段被发现 (Level: 125)
D:\病毒测试\临时解压\jss23.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss24.exe - 可疑代码段被发现 (Level: 75)
D:\病毒测试\临时解压\jss25.exe - 特征码 'Virus.Win32.Agent.ZRP' 被发现
D:\病毒测试\临时解压\jss26.exe - 特征码 'Virus.Win32.Agent.ZRP' 被发现
D:\病毒测试\临时解压\jss27.exe - 可疑代码段被发现 (Level: 75)
D:\病毒测试\临时解压\jss28.exe - 可疑代码段被发现 (Level: 125)
D:\病毒测试\临时解压\jss29.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\jss30.exe - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.shhw' 被发现
D:\病毒测试\临时解压\jss31.exe - 特征码 'Trojan.Copiet.B.1' 被发现
D:\病毒测试\临时解压\jss32.exe - 特征码 'Trojan-GameThief.Win32.OnLineGames.sdaf' 被发现
D:\病毒测试\临时解压\jss33.exe - 特征码 'Virus.Trojan.Win32.Agent.udd' 被发现
D:\病毒测试\临时解压\jss34.exe - 可疑代码段被发现 (Level: 75)
D:\病毒测试\临时解压\jss35.exe - 特征码 'Trojan.Undef.I' 被发现
D:\病毒测试\临时解压\ksuserfy.dll - 特征码 'Virus.Win32.Nilage.NP' 被发现
D:\病毒测试\临时解压\lweurqhx.dll - 特征码 'Trojan-Spy' 被发现
D:\病毒测试\临时解压\mttwfh.dll - 特征码 'Backdoor.Win32.NetCrack.13.b' 被发现
D:\病毒测试\临时解压\olecli32pt.dll - 特征码 'Virus.Win32.Nilage.NP' 被发现
D:\病毒测试\临时解压\sgdewg.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.alrf' 被发现
D:\病毒测试\临时解压\slbiopfs2.dll
D:\病毒测试\临时解压\srpcss.dll
D:\病毒测试\临时解压\sys07002.dll - 特征码 'Virus.Trojan.GameThief.Win32.OnLineGames.slia' 被发现
D:\病毒测试\临时解压\tdggrz.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.alrf' 被发现
D:\病毒测试\临时解压\teamozy.dll - 特征码 'Trojan-Downloader.Win32.Agent.xru' 被发现
D:\病毒测试\临时解压\tscfgwmijxsj.dll
D:\病毒测试\临时解压\usbmonjx2.dll - 特征码 'Virus.Win32.Nilage.NP' 被发现
D:\病毒测试\临时解压\ytfa.dll - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
D:\病毒测试\临时解压\zycdex.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.alrf' 被发现

56 文件被扫描
(0 压缩档 0 文件)
41 特征码被侦测
8 可疑代码段被发现
耗时: 0:10.696

显示全部楼层 · 发表于 2008-7-31 20:01:17

avast! 51

[病毒样本] list*56

MCAFEE