qqfzl.com样本，dll文件包2[MD5: 2C1BA8 C9E210 12AA2D 0A5115 0A478E]

allenhippo

dll文件包2

5个文件。

[ 本帖最后由 allenhippo 于 2007-6-9 14:37 编辑 ]

kp2006

Win32:Wow-HV [Trj]

红心王子

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bs        文件: C:\Documents and Settings\Administrator\桌面\virus1.rar/tlso0.dll
已删除: 木马程序 Trojan-PSW.Win32.WOW.qo        文件: C:\Documents and Settings\Administrator\桌面\virus1.rar/woso0.dll

promised

?           Copyright (c) 1993-2007 by VBA Ltd.            ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\virus.rar:<RAR>\woso0.dll : infected Trojan.PWS.Wsgame
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 5       - total       : 19
- scanned         : 1       -  scanned    : 5       - scanned     : 18
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 14:32:00 09-06-2007
End        : 14:32:03 09-06-2007
Total time : 00:00:03
终止批处理操作吗(Y/N)?

The EQs

Scan performed at: 2007-6-9 14:33:36
Scanning Log
NOD32 version 2320 (20070609) NT
Command line: C:\Documents and Settings\EQ2\桌面\virus.rar
Operating memory - is OK

Date: 9.6.2007  Time: 14:33:41
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\virus.rar
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?tlso0.dll - Win32/Pacex.Gen virus
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?upxdnd.dll - Win32/PSW.OnLineGames.NBG trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\virus.rar ?RAR ?woso0.dll - a variant of Win32/PSW.WOW.NCD trojan
Number of scanned files: 6
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 14:33:41 Total scanning time: 0 sec (00:00:00)

rasis

virus.rar
  [0] Archive type: RAR
  --> tlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> upxdnd.dll
      [DETECTION] Is the Trojan horse TR/Rahao
  --> woso0.dll
      [DETECTION] Is the Trojan horse TR/Agent.10752.23

mofunzone

WanPacket.dll
wpcap.dll
见过多次，非病毒

woai_jolin

ESS报3个
剩下上报

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

http://www.bitdefender.com/vfind/?q=Trojan.PWS.Onlinegames.AXK
http://www.bitdefender.com/vfind/?q=Trojan.Spy.Agent.NFA

onesand

Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus.rar'
C:\Documents and Settings\huaxun\桌面\virus.rar
  [0] Archive type: RAR
  --> tlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> upxdnd.dll
      [DETECTION] Is the Trojan horse TR/Rahao
  --> woso0.dll
      [DETECTION] Is the Trojan horse TR/Agent.10752.23
      [WARNING]   The file was ignored!


End of the scan: 2007年6月9日  17:15
Used time: 00:08 min