10个dll,马马生成的的

显示全部楼层 · 发表于 2007-5-26 12:56:40

10个dll,马马生成的的

显示全部楼层 · 发表于 2007-5-26 12:58:59

Begin scan in 'D:\Documents and Settings\dell\桌面\dll.rar'
D:\Documents and Settings\dell\桌面\
  dll.rar
[0] Archive type: RAR
--> dll\packet.dll
--> dll\pthreadVC.dll
--> dll\upxdnd.dll
--> dll\wanpacket.dll
--> dll\winform.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.TE.32
      [WARNING] Infected files in archives cannot be repaired!
--> dll\wpcap.dll
--> dll\Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bjt.4
      [WARNING] Infected files in archives cannot be repaired!
--> dll\msccrt.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2418
      [WARNING] Infected files in archives cannot be repaired!
--> dll\Gjzo0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> dll\fyzo0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-5-26 13:00:32

Scan performed at: 2007-5-26 12:58:47
Scanning Log
NOD32 version 2292 (20070525) NT
Command line: C:\ABC\dll.rar
Operating memory - is OK

Date: 26.5.2007 Time: 12:58:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\ABC\dll.rar
C:\ABC\dll.rar ?RAR ?dll\winform.dll - Win32/PSW.OnLineGames.TE trojan
C:\ABC\dll.rar ?RAR ?dll\Kvsc3.dll - Win32/PSW.Agent.NCC trojan
C:\ABC\dll.rar ?RAR ?dll\msccrt.dll - Win32/PSW.Agent.NEX trojan
C:\ABC\dll.rar ?RAR ?dll\Gjzo0.dll - Win32/Pacex.Gen virus
C:\ABC\dll.rar ?RAR ?dll\fyzo0.dll - probably a variant of Win32/Pacex.Gen virus
Number of scanned files: 12
Number of threats found: 5
Number of active threats: 1
Time of completion: 12:58:56 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-5-26 13:02:24

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2007-5-19
开始时间: 2007-5-26 13:01
引擎: KAV 引擎 (AVK 17.3590), BD 引擎 (BD 17.1375)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: dll\upxdnd.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\dll.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.AUQ (BD 引擎)
对象: dll\winform.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\dll.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.1B512DC7 (BD 引擎)
对象: dll\msccrt.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\dll.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.0E1A765A (BD 引擎)
对象: dll\Gjzo0.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\dll.rar
Status: 已发现病毒
病毒: Trojan.Agent.AABI (BD 引擎)
对象: dll\fyzo0.dll
在压缩档案里: C:\Documents and Settings\Administrator\桌面\dll.rar
Status: 已发现病毒
病毒: Trojan.PWS.LegMir.DLN (BD 引擎)
对象: dll.rar
路径: C:\Documents and Settings\Administrator\桌面
Status: 病毒文件已删除
病毒: Trojan.PWS.OnlineGames.AUQ, Generic.PWS.Games.1B512DC7, Generic.PWS.Games.0E1A765A, Trojan.Agent.AABI, Trojan.PWS.LegMir.DLN (BD 引擎)
扫描完成: 2007-5-26 13:01
已检查 1 个文件
已发现 1 个染毒文件

显示全部楼层 · 发表于 2007-5-26 13:04:01

这么多

显示全部楼层 · 发表于 2007-5-26 13:04:56

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.OnlineGames.brp
病毒： Trojan.PSW.OnlineGames.blg
病毒： Trojan.PSW.OnlineGames.bdh
病毒： Trojan.PSW.OnlineGames.bdn
病毒： Packer.Mian007
病毒： Trojan.PSW.OnlineGames.bfz

用户来源：互联网

软件版本：19.24.42

显示全部楼层 · 发表于 2007-5-26 13:05:00

Dr.Web 一个也没收

显示全部楼层 · 发表于 2007-5-26 13:13:43

2007-5-26 13:12:14 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\UPXDND.DLL PWS-Zhengtu(特洛伊)
2007-5-26 13:12:17 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\WINFORM.DLL PWS-LegMir.dll(特洛伊)
2007-5-26 13:12:17 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\KVSC3.DLL PWS-LegMir.dll(特洛伊)
2007-5-26 13:12:17 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\MSCCRT.DLL PWS-LegMir.dll(特洛伊)
2007-5-26 13:12:17 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\GJZO0.DLL PWS-LegMir.dll(特洛伊)
2007-5-26 13:12:17 未采取操作 Administrator C:\Documents and Settings\Administrator\桌面\dll.rar\FYZO0.DLL PWS-LegMir.dll(特洛伊)

显示全部楼层 · 发表于 2007-5-26 13:18:57

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.tz 文件: C:\Documents and Settings\admin\桌面\dll.rar\dll\upxdnd.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.te 文件: C:\Documents and Settings\admin\桌面\dll.rar\dll\winform.dll
已删除: 木马程序 Trojan-PSW.Win32.Nilage.bjt 文件: C:\Documents and Settings\admin\桌面\dll.rar\dll\Kvsc3.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es 文件: C:\Documents and Settings\admin\桌面\dll.rar\dll\msccrt.dll

卡吧报4个

显示全部楼层 · 发表于 2007-5-26 13:19:18

Starting the file scan:

Begin scan in 'F:\样本\dll.rar'
F:\样本\dll.rar
  [0] Archive type: RAR
  --> dll\winform.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.TE.32
  --> dll\Kvsc3.dll
   [DETECTION] Is the Trojan horse TR/PSW.Nilage.bjt.4
  --> dll\msccrt.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2418
  --> dll\Gjzo0.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> dll\fyzo0.dll
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [INFO]    The file was deleted!

[病毒样本] 10个dll,马马生成的的

本帖子中包含更多资源