help.dll原样本加生成物 40X

显示全部楼层 · 发表于 2009-2-26 18:30:00

真机上提取的，一直没有动，有人需要的话我就发出来啦。

由于论坛限制，我压缩成了7z文件，请将.rar扩展名去掉。
NOD32 Miss 2
brsbox网盘：http://www.brsbox.com/filebox/up ... bed8/dirids/1720918
QQ网盘直接下载
(提取码 9f1cc650)

[ 本帖最后由 qq316107934 于 2009-2-26 18:50 编辑 ]

显示全部楼层 · 发表于 2009-2-26 18:43:20

4 to rs

[ 本帖最后由 Palkia 于 2009-2-26 18:44 编辑 ]

显示全部楼层 · 发表于 2009-2-26 18:45:00

8 MISS to VB

显示全部楼层 · 发表于 2009-2-26 18:57:44

DR.WEB-TO
aliwe32.exe - infected with Trojan.MulDrop.origin
inertne.exe - infected with modification of BackDoor.Generic.1024
jcxrrl.exe - infected with Trojan.DownLoad.3163

SondMan.exe\data002 - infected with BackDoor.Generic.1271
ondMan.exe\data003 - infected with Exploit.MS08-067
Archive contains 2 infected items

sosos.exe - infected with Exploit.MS08-067
System.exe - infected with Trojan.PWS.Wsgame.9901
\userinit.exe - infected with Trojan.DownLoad.8927
xoxo.exe - infected with BackDoor.Generic.1271
csrss.dll - infected with Trojan.PWS.Gamania.17152
HBASKTAO.dll - infected with Trojan.PWS.Wsgame.9897
HBCHIBI.dll - infected with Trojan.PWS.Wsgame.9902
HBDNF.dll - infected with Trojan.PWS.Wsgame.8610
\HBJXSJ.dll - infected with Trojan.PWS.Wsgame.9900
HBKDXY.dll - infected with Trojan.PWS.Wsgame.9919
HBLYFX.dll - infected with Trojan.PWS.Wsgame.9903
HBmhly.dll - infected with Trojan.PWS.Wsgame.9530
HBQQFFO.dll - infected with Trojan.PWS.Wsgame.9985
HBQQSG.dll - infected with Trojan.PWS.Wsgame.9921
HBSHQ.dll - infected with Trojan.PWS.Wsgame.9988
HBTL.dll - infected with Trojan.PWS.Wsgame.9896
HBTW2.dll - infected with Trojan.PWS.Wsgame.9896
HBW2I.dll - infected with Trojan.PWS.Wsgame.9920
\HBWD.dll - infected with Trojan.PWS.Wsgame.9898
HBWULIN2.dll - infected with Trojan.PWS.Wsgame.9949
HBXMJ.dll - infected with Trojan.PWS.Wsgame.8554
\HBXY2.dll - infected with Trojan.PWS.Wsgame.9918
HBYY.dll - infected with Trojan.PWS.Brauz.6
HBZHUXIAN.dll - infected with Trojan.PWS.Wsgame.9922
rpcss.dll - infected with Trojan.PWS.Gamania.17152
WINDOWSjiocs.dll - infected with Trojan.NtRootKit.1874
\b770ca2.sys - infected with Trojan.NtRootKit.1934
SysKetNt.Sys - infected with Trojan.PWS.Gamania.17137

显示全部楼层 · 发表于 2009-2-26 20:37:31

AVIRA
The scan has been done completely.
   1 Scanning directories
   40 Files were scanned
   40 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   37 files were deleted
   0 files were repaired
   37 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   37 Notes

[ 本帖最后由 Elcondorposa 于 2009-2-26 20:46 编辑 ]

显示全部楼层 · 发表于 2009-2-26 22:39:51

2009/2/26 22:36:35 已删除风险软件 not-a-virus:WebToolbar.Win32.VB.a G:\Temp\Virus\Virus\可疑文件\api.exe
2009/2/26 22:36:35 已删除风险软件 not-a-virus:WebToolbar.Win32.VB.a G:\Temp\Virus\Virus\可疑文件\api.exe//PE_Patch//NSPack
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bt G:\Temp\Virus\Virus\可疑文件\HBTW2.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bp G:\Temp\Virus\Virus\可疑文件\HBSHQ.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bl G:\Temp\Virus\Virus\可疑文件\HBW2I.dll
2009/2/26 22:36:35 已删除木马程序 Trojan.Win32.SmallGame.bk G:\Temp\Virus\Virus\可疑文件\HBKDXY.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bi G:\Temp\Virus\Virus\可疑文件\HBZHUXIAN.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bh G:\Temp\Virus\Virus\可疑文件\HBWULIN2.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.SmallGame.bf G:\Temp\Virus\Virus\可疑文件\HBXY2.dll
2009/2/26 22:36:35 已删除木马程序 Trojan.Win32.SmallGame.bb G:\Temp\Virus\Virus\可疑文件\HBCHIBI.dll
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.Agent2.dwt G:\Temp\Virus\Virus\可疑文件\svchost.exe
2009/2/26 22:36:36 已删除木马程序 Trojan.Win32.Agent.avwc G:\Temp\Virus\Virus\可疑文件\HBYY.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-Spy.Win32.Agent.gna G:\Temp\Virus\Virus\可疑文件\SysKetNt.Sys
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.ubhh G:\Temp\Virus\Virus\可疑文件\rpcss.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.ubhh G:\Temp\Virus\Virus\可疑文件\csrss.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.tzaf G:\Temp\Virus\Virus\可疑文件\HBWD.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.tyhc G:\Temp\Virus\Virus\可疑文件\HBDNF.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.tvrn G:\Temp\Virus\Virus\可疑文件\HBmhly.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.tcsz G:\Temp\Virus\Virus\可疑文件\jcxrrl.exe
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.MultiFirst.ac G:\Temp\Virus\Virus\可疑文件\System.exe
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.Magania.asie G:\Temp\Virus\Virus\可疑文件\HBQQFFO.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.Magania.aqor G:\Temp\Virus\Virus\可疑文件\HBBO.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.Magania.aqko G:\Temp\Virus\Virus\可疑文件\HBQQSG.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.Magania.apty G:\Temp\Virus\Virus\可疑文件\HBJXSJ.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.Magania.aoys G:\Temp\Virus\Virus\可疑文件\HBXMJ.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-GameThief.Win32.Magania.anwz G:\Temp\Virus\Virus\可疑文件\HBTL.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-GameThief.Win32.Magania.annh G:\Temp\Virus\Virus\可疑文件\b770ca2.sys
2009/2/26 22:36:36 已删除木马程序 Trojan-Dropper.Win32.Agent.zve G:\Temp\Virus\Virus\可疑文件\xoxo.exe
2009/2/26 22:36:36 已删除木马程序 Trojan-Downloader.Win32.VB.jgw G:\Temp\Virus\Virus\可疑文件\inertne.exe
2009/2/26 22:36:35 已删除木马程序 Trojan-Downloader.Win32.Agent.avmv G:\Temp\Virus\Virus\可疑文件\HBLYFX.dll
2009/2/26 22:36:36 已删除木马程序 Trojan-Downloader.Win32.Agent.albp G:\Temp\Virus\Virus\可疑文件\userinit.exe
2009/2/26 22:36:36 已删除木马程序 Trojan-Downloader.Win32.Agent.albp G:\Temp\Virus\Virus\可疑文件\userinit.exe//PE_Patch//UPack
2009/2/26 22:36:36 已删除木马程序 Trojan-Downloader.Win32.ACVE.ba G:\Temp\Virus\Virus\可疑文件\WINDOWSjiocs.dll
2009/2/26 22:36:35 已删除木马程序 Trojan-Downloader.VBS.Agent.lg G:\Temp\Virus\Virus\可疑文件\bai.VBS
2009/2/26 22:36:36 已删除木马程序 Exploit.Win32.MS08-067.t G:\Temp\Virus\Virus\可疑文件\SondMan.exe
2009/2/26 22:36:36 已删除木马程序 Exploit.Win32.MS08-067.i G:\Temp\Virus\Virus\可疑文件\sosos.exe
2009/2/26 22:36:35 已删除木马程序 Backdoor.Win32.Small.hay G:\Temp\Virus\Virus\可疑文件\aliwe32.exe
2009/2/26 22:36:35 已删除木马程序 Backdoor.Win32.Small.hay G:\Temp\Virus\Virus\可疑文件\aliwe32.exe//PE_Patch//UPack
2009/2/26 22:36:35 已删除木马程序 Backdoor.Win32.Agent.vzr G:\Temp\Virus\Virus\可疑文件\HBASKTAO.dll

Miss 4,To KL

显示全部楼层 · 发表于 2009-2-27 00:27:50

Hello,

bai.bat_, help.dll

No malicious code were found in these files.

jh2.exe_ - Trojan-Downloader.Win32.VB.kuk

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-2-27 13:20:08

尊敬的用户，您好！

bai.BAT
help.dll

以上文件中不包含恶意代码。

sysdll.dll

以上文件为0字节文件。

非常感谢您向我们提供可疑文件样本，有了您的支持我们将做得更好。
　　

感谢您对卡巴斯基的信任与支持！
我们诚恳地希望您来电或来信寻求关于产品的技术支持服务，如果您有关于卡巴斯基公司的合理化建议也希望您与我们联系。
24小时技术支持热线400-611-6633
中文主页：http://www.kaspersky.com.cn/
技术支持邮箱：support@kaspersky.com.cn
病毒上报邮箱：virus@kaspersky.com.cn

卡巴斯基中国技术服务中心 399号工程师为您服务

显示全部楼层 · 发表于 2009-2-27 13:23:33

2009-2-27 13:22:41 1235712161 Administrator 3240 Sign of "BV:Malware-gen" has been found in "d:\我的文档\桌面\threats\可疑文件\bai.BAT" file.
2009-2-27 13:22:48 1235712168 Administrator 3240 Sign of "VBS:Agent-BP [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\bai.VBS" file.
2009-2-27 13:22:48 1235712168 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\aliwe32.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\inertne.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\threats\可疑文件\jcxrrl.exe\[Embedded_I#2a00]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\jcxrrl.exe\[Embedded_I#3700]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Small-AMI [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\SondMan.exe\[Embedded_R#13894]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\SondMan.exe\[Embedded_R#16304]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\SondMan.exe\[Embedded_R#1a304]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\SondMan.exe\[Embedded_R#22304]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\sosos.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\svchost.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\threats\可疑文件\System.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\userinit.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\threats\可疑文件\xoxo.exe" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FGL [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\csrss.dll\[Embedded_I#2860]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBASKTAO.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBBO.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBCHIBI.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBDNF.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBJXSJ.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBKDXY.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBLYFX.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBmhly.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBQQFFO.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBQQSG.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBSHQ.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBTL.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBTW2.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBW2I.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBWD.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBWULIN2.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBXMJ.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBXY2.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBYY.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\HBZHUXIAN.dll" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:OnLineGames-FGL [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\rpcss.dll\[Embedded_I#2860]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:KillAV-JG [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\WINDOWSjiocs.dll\[Embedded_Ix#6e30]" file.
2009-2-27 13:22:49 1235712169 Administrator 3240 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\threats\可疑文件\b770ca2.sys" file.
2009-2-27 13:22:50 1235712170 Administrator 3240 Sign of "Win32:Delf-FZG [Trj]" has been found in "d:\我的文档\桌面\threats\可疑文件\SysKetNt.Sys" file.

显示全部楼层 · 发表于 2009-2-28 00:18:37

2009-2-28 0:18:05 未处理: Trojan-Downloader.VBS.Agent.lg C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/bai.VBS 延期
2009-2-28 0:18:05 检测到威胁: Backdoor.Win32.Small.hay C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/aliwe32.exe/PE_Patch/UPack
2009-2-28 0:18:05 未处理: Backdoor.Win32.Small.hay C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/aliwe32.exe/PE_Patch/UPack 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.Agent.bexi C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/api.exe/PE_Patch/NSPack
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.Agent.bexi C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/api.exe/PE_Patch/NSPack 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.VB.jgw C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/inertne.exe
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.VB.jgw C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/inertne.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tcsz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jcxrrl.exe
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.tcsz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jcxrrl.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.VB.kuk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jh2.exe
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.VB.kuk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jh2.exe 延期
2009-2-28 0:18:06 检测到威胁: Exploit.Win32.MS08-067.t C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SondMan.exe
2009-2-28 0:18:06 未处理: Exploit.Win32.MS08-067.t C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SondMan.exe 延期
2009-2-28 0:18:06 检测到威胁: Exploit.Win32.MS08-067.i C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/sosos.exe
2009-2-28 0:18:06 未处理: Exploit.Win32.MS08-067.i C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/sosos.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.Agent2.dwt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/svchost.exe
2009-2-28 0:18:06 未处理: Trojan.Win32.Agent2.dwt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/svchost.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.MultiFirst.ac C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/System.exe
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.MultiFirst.ac C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/System.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.Agent.albp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/userinit.exe/PE_Patch/UPack
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.Agent.albp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/userinit.exe/PE_Patch/UPack 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Dropper.Win32.Agent.zve C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/xoxo.exe
2009-2-28 0:18:06 未处理: Trojan-Dropper.Win32.Agent.zve C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/xoxo.exe 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/csrss.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/csrss.dll 延期
2009-2-28 0:18:06 检测到威胁: Backdoor.Win32.Agent.vzr C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBASKTAO.dll
2009-2-28 0:18:06 未处理: Backdoor.Win32.Agent.vzr C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBASKTAO.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.aqor C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBBO.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.aqor C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBBO.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bb C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBCHIBI.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bb C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBCHIBI.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tyhc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBDNF.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.tyhc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBDNF.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.apty C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBJXSJ.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.apty C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBJXSJ.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBKDXY.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBKDXY.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.Agent.avmv C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBLYFX.dll
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.Agent.avmv C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBLYFX.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tvrn C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBmhly.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.tvrn C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBmhly.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.asie C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQFFO.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.asie C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQFFO.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.aqko C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQSG.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.aqko C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQSG.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBSHQ.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBSHQ.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.anwz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTL.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.anwz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTL.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTW2.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTW2.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bl C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBW2I.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bl C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBW2I.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tzaf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWD.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.tzaf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWD.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWULIN2.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWULIN2.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.aoys C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXMJ.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.aoys C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXMJ.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXY2.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXY2.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.Agent.avwc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBYY.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.Agent.avwc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBYY.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan.Win32.SmallGame.bj C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBZHUXIAN.dll
2009-2-28 0:18:06 未处理: Trojan.Win32.SmallGame.bj C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBZHUXIAN.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/rpcss.dll
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/rpcss.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.Win32.ACVE.ba C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/WINDOWSjiocs.dll
2009-2-28 0:18:06 未处理: Trojan-Downloader.Win32.ACVE.ba C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/WINDOWSjiocs.dll 延期
2009-2-28 0:18:06 检测到威胁: Trojan-GameThief.Win32.Magania.annh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/b770ca2.sys
2009-2-28 0:18:06 未处理: Trojan-GameThief.Win32.Magania.annh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/b770ca2.sys 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Spy.Win32.Agent.gna C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SysKetNt.Sys
2009-2-28 0:18:06 未处理: Trojan-Spy.Win32.Agent.gna C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SysKetNt.Sys 延期
2009-2-28 0:18:06 检测到威胁: Trojan-Downloader.VBS.Agent.lg C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/bai.VBS
2009-2-28 0:18:11 检测到威胁: Backdoor.Win32.Small.hay C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/aliwe32.exe/PE_Patch/UPack
2009-2-28 0:18:11 检测到威胁: Trojan-Downloader.Win32.Agent.bexi C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/api.exe/PE_Patch/NSPack
2009-2-28 0:18:11 检测到威胁: Trojan-Downloader.Win32.VB.jgw C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/inertne.exe
2009-2-28 0:18:11 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tcsz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jcxrrl.exe
2009-2-28 0:18:11 检测到威胁: Trojan-Downloader.Win32.VB.kuk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/jh2.exe
2009-2-28 0:18:11 检测到威胁: Exploit.Win32.MS08-067.t C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SondMan.exe
2009-2-28 0:18:11 检测到威胁: Exploit.Win32.MS08-067.i C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/sosos.exe
2009-2-28 0:18:11 检测到威胁: Trojan.Win32.Agent2.dwt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/svchost.exe
2009-2-28 0:18:11 检测到威胁: Trojan-GameThief.Win32.MultiFirst.ac C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/System.exe
2009-2-28 0:18:12 检测到威胁: Trojan-Downloader.Win32.Agent.albp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/userinit.exe/PE_Patch/UPack
2009-2-28 0:18:12 检测到威胁: Trojan-Dropper.Win32.Agent.zve C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/xoxo.exe
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/csrss.dll
2009-2-28 0:18:12 检测到威胁: Backdoor.Win32.Agent.vzr C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBASKTAO.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.aqor C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBBO.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bb C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBCHIBI.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tyhc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBDNF.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.apty C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBJXSJ.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bk C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBKDXY.dll
2009-2-28 0:18:12 检测到威胁: Trojan-Downloader.Win32.Agent.avmv C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBLYFX.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tvrn C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBmhly.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.asie C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQFFO.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.aqko C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBQQSG.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bp C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBSHQ.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.anwz C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTL.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bt C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBTW2.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bl C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBW2I.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tzaf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWD.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBWULIN2.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.aoys C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXMJ.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bf C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBXY2.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.Agent.avwc C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBYY.dll
2009-2-28 0:18:12 检测到威胁: Trojan.Win32.SmallGame.bj C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/HBZHUXIAN.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.OnLineGames.ubhh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/rpcss.dll
2009-2-28 0:18:12 检测到威胁: Trojan-Downloader.Win32.ACVE.ba C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/WINDOWSjiocs.dll
2009-2-28 0:18:12 检测到威胁: Trojan-GameThief.Win32.Magania.annh C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/b770ca2.sys
2009-2-28 0:18:12 检测到威胁: Trojan-Spy.Win32.Agent.gna C:\Documents and Settings\Administrator\桌面\Virus.7z.rar/飸圅/SysKetNt.Sys
2009-2-28 0:18:12 已删除: Trojan-Spy.Win32.Agent.gna C:\Documents and Settings\Administrator\桌面\virus.7z.rar

[病毒样本] help.dll原样本加生成物 40X

本帖子中包含更多资源