一包9个[MD5: B73D5A 9DFCCA 134CE4 1058CB 080049 FCC6E8 82E45D 4DD86A B41431]

欠妳緈諨

AVAST7只

tracydk

7个

微点卫士

微点：
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\2.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\3.EXE
1) C:\DFD7846609.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\3.EXE
1) C:\DFD7846609.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\5.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\KVSC3.EXE
2) C:\WINDOWS.0\SYSTEM32\KVSC3.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\6.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\MPPDS.EXE
2) C:\WINDOWS.0\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?
木马名称:Trojan-PSW.Win32.OnLineGames.iyg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\7.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
4) C:\WINDOWS.0\SYSTEM32\LYMANGR.DLL
是否删除木马程序及其衍生物?
木马名称:Trojan-PSW.Win32.OnLineGames.iyg

程序:
C:\WINDOWS.0\SYSTEM32\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\8.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\UPXDND.EXE
2) C:\WINDOWS.0\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\9.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\AVPZX.EXE
2) C:\PROGRAM FILES\INTERNET EXPLORER\AVPZX.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\12.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\FOXRAR.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\89.DLL
是否删除木马程序及其衍生物?

4怎么运行后消失了，

aziok

Begin scan in
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\12.exe
      [DETECTION] Contains code of the Windows virus W32/Small.e
  --> н¨Îļþ¼Ð\2.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> н¨Îļþ¼Ð\3.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\4.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> н¨Îļþ¼Ð\5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> н¨Îļþ¼Ð\6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð\7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> н¨Îļþ¼Ð\8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> н¨Îļþ¼Ð\9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
      [INFO]      The file was deleted!

taihuxian

检测到病毒: Win32:NSanti-BG [Trj], Win32:Steal-H [Trj], Win32:Delf-FNI [Trj], Win32:Onlinegames-ALS [Trj], Win32:Onlinegames-AKC [Trj], Win32:OnLineGames-SR [Trj], Win32:Small-HKX [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

woai_jolin

碧水寒潭

Start of the scan: 2007年8月23日  21:57

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\新建文件夹.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\12.exe
      [DETECTION] Contains code of the Windows virus W32/Small.e
  --> н¨Îļþ¼Ð\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.NE
  --> н¨Îļþ¼Ð\3.exe
      [DETECTION] Is the Trojan horse TR/Agent.12978.1
  --> н¨Îļþ¼Ð\4.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> н¨Îļþ¼Ð\5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> н¨Îļþ¼Ð\6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> н¨Îļþ¼Ð\7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> н¨Îļþ¼Ð\8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> н¨Îļþ¼Ð\9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
      [INFO]      The file was deleted!


End of the scan: 2007年8月23日  21:57
Used time: 00:18 min

The scan has been done completely.

      1 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

红心王子

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.700
        病毒库日期 2007-08-23
        更新日期 2007-08-23

扫描目标 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar

开始时间 2007-08-23 22:47:51

在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\12.exe 中发现 Backdoor/Agent.ptm 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\4.exe 中发现 Trojan/PSW.OnLineGames.etv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\6.exe 中发现 Trojan/PSW.OnLineGames.euu 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\7.exe 中发现 Trojan/PSW.OnLineGames.ewc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\8.exe 中发现 Trojan/PSW.GamePass.xkh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\新建文件夹.rar->新建文件夹\9.exe 中发现 Trojan/PSW.GamePass.wxl 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :450                                 病毒体 :6         
                   删除 :6                                     解毒 :0         
    扫描速度(千字节/秒) :59972                             扫描时间 :00:00:02
    扫描文件速度(个/秒) :225

    - - - - -   - - - - - - -   - - - - - - -    - - - - - - -    - - - - - - -     - - - - - - -   - - - - -

ssy275

Result: 5 malware found
Packed.Win32.NSAnti.b (virus)
C:\Documents and Settings\ssy\×ÀÃæ\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\12.exe
Trojan-PSW.Win32.OnLineGames.adn (virus)
C:\Documents and Settings\ssy\×ÀÃæ\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\4.exe
Trojan-PSW.Win32.OnLineGames.aip (virus)
C:\Documents and Settings\ssy\×ÀÃæ\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\5.exe
Trojan-PSW.Win32.OnLineGames.wt (virus)
C:\Documents and Settings\ssy\×ÀÃæ\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\6.exe
Trojan-PSW.Win32.OnLineGames.aih (virus)
C:\Documents and Settings\ssy\×ÀÃæ\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\7.exe

woai_jolin