18个dll.rar

qqq000@qq.com

18个dll.rar

红心王子

费尔报了四个全是木马

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\1打dll.rar'
C:\Documents and Settings\morgan\My Documents\
  1打dll.rar
    [0] Archive type: RAR
    --> moyu102.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.AUC
        [WARNING]   Infected files in archives cannot be repaired!
    --> MSDEG32.DLL
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> Msxo0.dll
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwizAsktao.dll
        [DETECTION] Is the Trojan horse TR/Agent.8192.136
        [WARNING]   Infected files in archives cannot be repaired!
    --> Packet.dll
    --> ps_mirr.dll
    --> qjzo0.dll
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> sijbjo.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> srhxvn.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2499
        [WARNING]   Infected files in archives cannot be repaired!
    --> tongji_cnnic.dll
    --> upxdnd.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SX.43
        [WARNING]   Infected files in archives cannot be repaired!
    --> WanPacket.dll
    --> Winhttps.dll
    --> wpcap.dll
    --> cmdbcs.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> dh2103.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SY.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> jnavavm.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2499
        [WARNING]   Infected files in archives cannot be repaired!
    --> LYMANGR.DLL
        [DETECTION] Is the Trojan horse TR/Agent.nma.1
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月22日  23:25
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     12 viruses and/or unwanted programs were found
      4 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
     13 Warnings
      0 Notes
      0 Hidden objects were found

扫描日志
NOD32版本 2285 (20070522) NT
命令行： C:\Documents and Settings\morgan\My Documents\ ?
?1打dll.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 22.5.2007  时间：23:26:05
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?morgan\My Documents\1打dll.rar
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>moyu102.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>MSDEG32.DLL - Win32/PSW.Agent.NEC 木马的变种
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>Msxo0.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>nwizAsktao.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>Packet.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>ps_mirr.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>qjzo0.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>sijbjo.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>srhxvn.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>tongji_cnnic.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>upxdnd.dll - Win32/PSW.OnLineGames.SX 木马
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>WanPacket.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>Winhttps.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>wpcap.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>cmdbcs.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>dh2103.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>jnavavm.dll - 是正常的
C:\Documents and Settings\morgan\My Documents\1打dll.rar  ?
?>>RAR >>LYMANGR.DLL - Win32/PSW.Agent.NEC 木马的变种
已扫描的文件数目：19
已发现的病毒数目：3
活动的病毒数目：1
完成时间： 23:26:07 总扫描时间：2 秒 (00:00:02)


[Scan path] C:\Documents and Settings\morgan\My Documents\1打dll.rar
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\moyu102.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\1打dll.rar\MSDEG32.DLL - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Msxo0.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\nwizAsktao.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Packet.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\ps_mirr.dll probably infected with WIN.WORM.Virus
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\qjzo0.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\sijbjo.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\srhxvn.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\tongji_cnnic.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\upxdnd.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\WanPacket.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Winhttps.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\wpcap.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\cmdbcs.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\dh2103.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\jnavavm.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\1打dll.rar\LYMANGR.DLL - Ok
C:\Documents and Settings\morgan\My Documents\1打dll.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 20
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 278 Kb/s
Scan time: 00:00:03

KAV-Longhorn

卡巴7 9个

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/MSDEG32.DLL//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ox        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/Msxo0.dll
deleted: Trojan program Trojan-PSW.Win32.WOW.qp        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/nwizAsktao.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.qo        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/qjzo0.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/srhxvn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sx        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/upxdnd.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sy        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/dh2103.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/jnavavm.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Heur-Emulator\My Documents\Downloads\Compressed\1´òdll.rar/LYMANGR.DLL//UPack

kp2006

kv报了5个

zlq7zj

avast 报7个 不知道有没有误报

fanrubin

总共实际上有多少个？卡6报9个

qwerasdf123

结果如下

moonsilver

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.RocOnline.bcv
病毒： Packer.Mian007           
病毒： Trojan.PSW.Asktao.h.dll  
病毒： Trojan.PSW.CabalOnline.aie
病毒： Trojan.PSW.OnlineGames.boi
病毒： Trojan.PSW.OnlineGames.bjr
病毒： Trojan.PSW.LMir.mlo      
病毒： Trojan.PSW.XYOnline.oq   

用户来源：互联网

软件版本：19.24.22

11个

onesand

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\MSDEG32.DLL/UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ox        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\Msxo0.dll
deleted: Trojan program Trojan-PSW.Win32.WOW.qp        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\nwizAsktao.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.qo        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\qjzo0.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\srhxvn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sx        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\upxdnd.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sy        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\dh2103.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\jnavavm.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\huaxun\桌面\1打dll.rar\LYMANGR.DLL/UPack