14

tracydk

....寒

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\SysWin64.Jmp : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\SysWin64.Sys : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\mssql.dll : infected Trojan.PWS.Gamania.3586


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 14   
- scanned         : 0       -  scanned    : 0       - scanned     : 14   
- contain viruses : 0       -  infected   : 0       - infected    : 3     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0     


繼續  Suspicious
Uhthn Anti-Spyware V3 Alpha

C:\Documents and Settings\uhthn\Desktop\virus\ravztmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\ravztmon.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\SysWin64.Jmp - Suspicious of Trojan-Downloader.Win32.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\SysWin64.Sys - Suspicious of Trojan-PSW.QQPass.1
C:\Documents and Settings\uhthn\Desktop\virus\tlvins.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\tlvpri.dll - Suspicious of Trojan-PSW.Win32.OnLineGames.3
C:\Documents and Settings\uhthn\Desktop\virus\mssock.sys - OK
C:\Documents and Settings\uhthn\Desktop\virus\mssql.dll - Suspicious of Trojan-Downloader.Win32.Small.2
C:\Documents and Settings\uhthn\Desktop\virus\myfins.exe - Suspicious of Trojan-Spy.Win32.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\myfpri.dll - Suspicious of Trojan-PSW.Win32.OnLineGames.3
C:\Documents and Settings\uhthn\Desktop\virus\ravgjmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\ravgjmon.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\ravmsmon.dat - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\ravmsmon.exe - Suspicious of Trojan-PSW.Win32.OnLineGames.2

14 - scanned
0 - infected
13 - suspicious
0 - cured
0 - deleted

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.aqv        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/ravztmon.exe
detected: Trojan program Trojan-Spy.Win32.Delf.yr        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/tlvins.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.yr        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/tlvpri.dll
detected: Trojan program Trojan.Win32.Agent.anj        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/mssock.sys
detected: Trojan program Trojan-PSW.Win32.Agent.nr        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/mssql.dll
detected: Trojan program Trojan-Spy.Win32.Delf.ys        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/myfins.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.ys        File: C:\Documents and Settings\Owner\×ÀÃæ\082805.rar/myfpri.dll

ssy275

esult: 3 malware found
Trojan-PSW.Win32.OnLineGames.aqv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082805.rar\ravztmon.exe
Trojan.Win32.Agent.anj (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082805.rar\mssock.sys
Trojan-PSW.Win32.Agent.nr (virus)
C:\Documents and Settings\ssy\×ÀÃæ\082805.rar\mssql.dll

碧水寒潭

Start of the scan: 2007年8月28日  21:51

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\082805.rar
  [0] Archive type: RAR
  --> ravztmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravztmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> SysWin64.Jmp
      [DETECTION] Is the Trojan horse TR/PSW.Steal.43638
  --> SysWin64.Sys
      [DETECTION] Is the Trojan horse TR/PSW.Steal.43638
  --> tlvins.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tlvpri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> mssock.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.BBF.2
  --> mssql.dll
      [DETECTION] Is the Trojan horse TR/Agent.19600.1
  --> myfins.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.YS
  --> myfpri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> ravmsmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravmsmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年8月28日  21:51
Used time: 00:14 min

The scan has been done completely.

      1 Scanning directories
     15 Files were scanned
     14 viruses and/or unwanted programs were found
      6 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -5 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

onesand

C:\Documents and Settings\XXXXX桌面\082805.rar
  [0] Archive type: RAR
  --> ravztmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravztmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> SysWin64.Jmp
      [DETECTION] Is the Trojan horse TR/PSW.Steal.43638
  --> SysWin64.Sys
      [DETECTION] Is the Trojan horse TR/PSW.Steal.43638
  --> tlvins.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tlvpri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> mssock.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.BBF.2
  --> mssql.dll
      [DETECTION] Is the Trojan horse TR/Agent.19600.1
  --> myfins.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.YS
  --> myfpri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> ravmsmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravmsmon.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was moved to '47063b21.qua'!

微点卫士

驱逐舰

woai_jolin

Scan areas:
F:\v\082805.rar  - recursive

Objects
-------------------
Scanned         15         Disinfected      0
Infected         3         Deleted          0
Suspicious       8         Quarantined      0

Error(s) occurred during the scan: 0

tracydk

IK全灭