08.06 105x

qianwenxiang

Kitman

The scan has been done completely.

      1 Scanning directories
    105 Files were scanned
     91 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     89 files were deleted
      0 files were repaired
     89 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     12 Files not concerned
      0 Archives were scanned
      0 Warnings
     89 Notes

醉一生爱妍

UGuard 完成了在 C:\Documents and Settings\Administrator\桌面\0806[1] 上的扫描。
================
'SL.Trojan.20319' 在 '12C8265D' 中被检测到。
'SL.Trojan.29738' 在 '142C2B53' 中被检测到。
'SL.Trojan.2867' 在 '1432D39E' 中被检测到。
'SL.Trojan.23513' 在 '166E2821' 中被检测到。
'Adware.Cinmus.Gen' 在 '17D54F1D' 中被检测到。
'Basic.Virus' 在 '1B0D761B//acpidisk.sys' 中被检测到。
'iGene.Possible.Cinmus' 在 '1B0D761B//dosss11.dll' 中被检测到。
'Binder.Generic' 在 '1B785DF9' 中被检测到。
'Binder.Generic' 在 '1C441F33' 中被检测到。
'SL.Trojan.20319' 在 '1F3250B9' 中被检测到。
'SL.Trojan.20319' 在 '2349B3D3' 中被检测到。
'Adware.Cinmus.Gen' 在 '2390BCAD' 中被检测到。
'Binder.Generic' 在 '282E1DEE' 中被检测到。
'Binder.Generic' 在 '2AD27AB' 中被检测到。
'Binder.Generic' 在 '2F270B22' 中被检测到。
'Binder.Generic' 在 '314766EE' 中被检测到。
'SL.Trojan.26902' 在 '31652C53' 中被检测到。
'SL.Trojan.25230' 在 '3EEA336' 中被检测到。
'Binder.Generic' 在 '419B50B5' 中被检测到。
'SL.Trojan.25230' 在 '425C50B0' 中被检测到。
'SL.Trojan.Small.9910' 在 '42DF55F1' 中被检测到。
'Binder.Generic' 在 '47F8E441' 中被检测到。
'Binder.Generic' 在 '49182E3E' 中被检测到。
'SL.Trojan.Win32.Delf.Gen.27256' 在 '4A1F0074' 中被检测到。
'Binder.Generic' 在 '4C478021' 中被检测到。
'SL.Trojan.1427' 在 '50EC5637' 中被检测到。
'SL.Trojan.26902' 在 '512A4638' 中被检测到。
'Binder.Generic' 在 '5674253C' 中被检测到。
'SL.Trojan.26902' 在 '57CBE947' 中被检测到。
'SL.Trojan.Win32.Agent.Download.11477' 在 '591D66EC' 中被检测到。
'SL.Trojan.26902' 在 '5DA8ED67' 中被检测到。
'SL.Trojan.14220' 在 '621A088C' 中被检测到。
'SL.Trojan.2867' 在 '652D2CB4' 中被检测到。
'Binder.Generic' 在 '68D8FA65' 中被检测到。
'SL.Trojan.5166' 在 '697C40F2' 中被检测到。
'SL.Trojan.20319' 在 '6EC1584A' 中被检测到。
'Binder.Generic' 在 '6F530C81' 中被检测到。
'SL.Trojan.25230' 在 '6F6658C3' 中被检测到。
'Virus.Agent.b' 在 '74937121' 中被检测到。
'SL.Trojan.20319' 在 '78B432B2' 中被检测到。
'SL.Trojan.20319' 在 '7C24B92C' 中被检测到。
'Heur.Downloader' 在 '832EBF51' 中被检测到。
'Binder.Generic' 在 '846AB849' 中被检测到。
'SL.Trojan.26902' 在 '86C47338' 中被检测到。
'Binder.Generic' 在 '89CEBB97' 中被检测到。
'SL.Trojan.1427' 在 '8A9F6A8F' 中被检测到。
'SL.Trojan.Win32.Delf.Gen.27256' 在 '8B9274BE' 中被检测到。
'SL.Trojan.8860' 在 '93C7EEDC' 中被检测到。
'SL.Trojan.Win32.Zlob.Gen&other-One' 在 '958A4BF6' 中被检测到。
'SL.Trojan.26902' 在 '96207B69' 中被检测到。
'SL.Trojan.652' 在 '9869719F' 中被检测到。
'SL.Trojan.25230' 在 '98B4D734' 中被检测到。
'SL.Trojan.25230' 在 '99074400' 中被检测到。
'Packed.Generic.UPack' 在 'AB4F2E65' 中被检测到。
'SL.Trojan.25230' 在 'B2AEBC68' 中被检测到。
'SL.Trojan.25230' 在 'B7EAA4B9' 中被检测到。
'SL.Trojan.25230' 在 'B96F40F7' 中被检测到。
'iGene.Possible.Cinmus' 在 'BD6346E6' 中被检测到。
'SL.Trojan.10905' 在 'BFAE019D' 中被检测到。
'SL.Trojan.3005' 在 'C031493B' 中被检测到。
'SL.Trojan.31858' 在 'C9DFF86F' 中被检测到。
'Binder.Generic' 在 'CA53573B' 中被检测到。
'SL.Trojan.Downloader.Agent.21461' 在 'CAB14814' 中被检测到。
'Heur.Downloader' 在 'CC1AC0E' 中被检测到。
'Binder.Generic' 在 'D4C7F584' 中被检测到。
'SL.Trojan.Win32.Delf.Gen.3188' 在 'D7FF0FB7' 中被检测到。
'Binder.Generic' 在 'DF17E6AB' 中被检测到。
'SL.Trojan.18748' 在 'DFFF8B97' 中被检测到。
'SL.Trojan.26902' 在 'E2380958' 中被检测到。
'SL.Trojan.3894' 在 'E8DD156A' 中被检测到。
'Generic.SODL' 在 'EC8D285D' 中被检测到。
'SL.Trojan.21202' 在 'F49703B' 中被检测到。
'SL.Trojan.20319' 在 'F61C7D04' 中被检测到。
'SL.Trojan.11705' 在 'F782102E' 中被检测到。
'SL.Trojan.25230' 在 'F83EEB65' 中被检测到。
'Trojan.OnLineGames.ad' 在 'FDF05B1E' 中被检测到。
'SL.Trojan.8121' 在 'FE4315AB' 中被检测到。
================
扫描文件数： 115
本次扫描发现了 76 个已知威胁，1 个未知威胁，请及时处理。
实际文件数： 105
扫描时间： 0-00-00 00:00:08:0652
威胁比率： 73.33%

[ 本帖最后由 spicalhook 于 2008-8-6 14:05 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.owf
病毒： Trojan.PSW.Win32.GameOL.oyz
病毒： Trojan.PSW.Win32.GameOL.pbv
病毒： Trojan.PSW.Win32.GameOL.pam
病毒： Trojan.PSW.Win32.ZhengTu.yob
病毒： Trojan.PSW.Win32.GameOL.paj
病毒： Trojan.PSW.Win32.XYOnline.ago
病毒： Trojan.PSW.Win32.GameOL.owf
病毒： Trojan.PSW.Win32.GameOL.pal
病毒： Trojan.PSW.Win32.GameOL.ott
病毒： Trojan.Win32.DNSChanger.drb
病毒： Trojan.PSW.Win32.GameOL.ovi
病毒： Trojan.PSW.Win32.GameOL.ovp
病毒： Trojan.PSW.Win32.GameOL.paq
病毒： RootKit.Win32.Undef.kk   
病毒： Trojan.PSW.Win32.GameOL.ozi
病毒： Trojan.PSW.Win32.GameOL.oek
病毒： Trojan.DL.Win32.Dluca.db
病毒： Trojan.PSW.Win32.GameOL.pbz
病毒： Trojan.PSW.Win32.GameOL.ozq
病毒： Trojan.PSW.Win32.GameOL.paq
病毒： Trojan.DL.Win32.VB.ffp   
病毒： Trojan.PSW.Win32.GameOL.ozp
病毒： Trojan.DL.Win32.Undef.afx
病毒： Trojan.PSW.Win32.LMir.bsn
病毒： Trojan.Win32.Mnless.suk  
病毒： Trojan.PSW.Win32.GameOL.pak
病毒： Trojan.PSW.Win32.GameOL.ozv
病毒： Trojan.PSW.Win32.GameOL.pcl
病毒： Trojan.PSW.Win32.GameOL.pbh
病毒： Trojan.Win32.Undef.kff   
病毒： Worm.Win32.Magistr.c     

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.56.12

无尽藏海

Scan Log
Version of virus signature database: 3331 (20080806)
Date: 2008-8-6  Time: 14:07:14
Scanned disks, folders and files: F:\VIRUS\0806
F:\VIRUS\0806\1C441F33 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\1F3250B9 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\2AD27AB - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\2F270B22 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\3EEA336 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\4A1F0074 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\4C478021 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\6EC1584A - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\6F530C81 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\6F6658C3 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\7C24B92C - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\8A9F6A8F - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\8B9274BE - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\8E3B9AAA - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\9D83D54F - a variant of Win32/DNSChanger.NAI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\12C8265D - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\17BA543C - a variant of Win32/TrojanDownloader.FakeAlert.FG trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\17D54F1D - a variant of Win32/Adware.Cinmus application - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\20B8477B - Win32/TrojanDownloader.Zlob.CEW trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\42DF55F1 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\47F8E441 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\50EC5637 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\57CBE947 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\68D8FA65 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\78B432B2 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\86C47338 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\88B61E94 - Win32/Adware.Antivirus2008 application - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\89CEBB97 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\93C7EEDC - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\98B4D734 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\142C2B53 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\282E1DEE - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\419B50B5 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\425C50B0 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\512A4638 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\524C42C2 » NSIS » inst1.exe - a variant of Win32/DNSChanger.NAI trojan - was a part of the deleted object
F:\VIRUS\0806\524C42C2 » NSIS » inst2.exe - a variant of Win32/DNSChanger.NAI trojan - was a part of the deleted object
F:\VIRUS\0806\524C42C2 » NSIS » inst3.exe - a variant of Win32/DNSChanger.NAI trojan - was a part of the deleted object
F:\VIRUS\0806\591D66EC - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\621A088C - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\652D2CB4 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\770E70AA - a variant of Win32/TrojanDownloader.FakeAlert.FL trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\832EBF51 - a variant of Win32/TrojanDownloader.Dluca trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\846AB849 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\1432D39E - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\2349B3D3 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\2390BCAD - probably a variant of Win32/Adware.Cinmus application - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\4165D19E - a variant of Win32/Agent.ETH trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\31652C53 - probably unknown NewHeur_PE virus [7] - deleted - quarantined
F:\VIRUS\0806\49182E3E - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\96207B69 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\314766EE - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\2523198E - a variant of Win32/Agent.ETH trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\5674253C - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\9869719F - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\99074400 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\A3C3A2D4 - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\A6DCEC0D - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\A80EA936 - Win32/Agent.OAA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\A49648B7 - a variant of Win32/DNSChanger.NAI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\A093262E - Win32/TrojanDownloader.Zlob.CEW trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\AB4F2E65 - a variant of Win32/PSW.Legendmir.NFY trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\B2AEBC68 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\B7EAA4B9 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\B96F40F7 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\B52687D6 - Win32/Agent.ETH trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\BD787394 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\BFAE019D - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\C0A1DF99 - Win32/Spy.Banker.OXF trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\C2CDA0B - a variant of Win32/TrojanDownloader.FakeAlert.FG trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\C9DFF86F - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\C031493B - Win32/Agent.NZZ trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\CA53573B - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\CAB14814 - Win32/Alman.NAD virus - deleted - quarantined
F:\VIRUS\0806\CC1AC0E - a variant of Win32/TrojanDownloader.Dluca trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\D4C7F584 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\D7FF0FB7 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\DF17E6AB - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\DFFF8B97 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\E8DD156A - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\E80571C2 - a variant of Win32/DNSChanger.NAI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\E2380958 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\EC8D285D - Win32/Agent.QNW trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\EE561FEC - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\F61C7D04 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\F83EEB65 - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\F49703B - a variant of Win32/TrojanDownloader.Agent.OBQ trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\F782102E - Win32/Alman.NAD virus - deleted - quarantined
F:\VIRUS\0806\FE4315AB - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\1A107EC9 - a variant of Win32/TrojanDownloader.FakeAlert.FG trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\0806\1B0D761B » NSIS » acpidisk.sys - probably a variant of Win32/Adware.Cinmus application - was a part of the deleted object
F:\VIRUS\0806\1B785DF9 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 118
Number of threats found: 92
Number of cleaned objects: 92
Time of completion: 14:08:39  Total scanning time: 85 sec (00:01:25)

Notes:
[1] Object has been deleted as it only contained the virus body.
[7] Object is probably infected with an unknown virus.

kkgh

费尔79个


瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.pco
病毒： Trojan.PSW.Win32.GameOL.oyz
病毒： Trojan.PSW.Win32.GameOL.pam
病毒： Trojan.PSW.Win32.ZhengTu.yob
病毒： Trojan.PSW.Win32.XYOnline.ago
病毒： Trojan.PSW.Win32.GameOL.owf
病毒： Trojan.PSW.Win32.GameOL.pal
病毒： Trojan.PSW.Win32.GameOL.ott
病毒： Trojan.PSW.Win32.GameOL.pcs
病毒： Trojan.Win32.DNSChanger.drb
病毒： Trojan.PSW.Win32.GameOL.ovi
病毒： Trojan.PSW.Win32.GameOL.ovp
病毒： Trojan.PSW.Win32.GameOL.pcx
病毒： RootKit.Win32.Undef.kk   
病毒： Trojan.PSW.Win32.GameOL.ozi
病毒： Trojan.PSW.Win32.GameOL.oek
病毒： Trojan.DL.Win32.Dluca.db
病毒： Trojan.PSW.Win32.GameOL.ozq
病毒： Trojan.PSW.Win32.GameOL.paq
病毒： Trojan.Win32.QHost.arn   
病毒： Trojan.DL.Win32.VB.ffp   
病毒： Trojan.PSW.Win32.GameOL.ozp
病毒： Trojan.DL.Win32.Undef.afx
病毒： Trojan.PSW.Win32.LMir.bsn
病毒： Trojan.Win32.Mnless.suk  
病毒： Trojan.PSW.Win32.GameOL.pak
病毒： Trojan.PSW.Win32.GameOL.pcl
病毒： Trojan.PSW.Win32.GameOL.pbh
病毒： Trojan.Win32.Undef.kff   
病毒： Worm.Win32.Magistr.c     

用户来源：互联网

软件版本：20.56.20

73个

Palkia

bd miss 29
金山 miss 31

金山+bd=miss 20

小邪邪

趋势科技发现潜在威胁 80

已通过FTP专用通道上传趋势科技

傻猪猪米走鸡

剩下15个文件