养鸽使我致富

碧水寒潭

Start of the scan: 2007年8月29日  12:52

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\virus backup[1].part1.rar
  [0] Archive type: RAR
  --> virus backup\myplayer.com
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\RAVDHMON.DAT
      [DETECTION] Is the Trojan horse TR/Agent.8180.1
  --> virus backup\jhapri.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.15929.1
  --> virus backup\jzipri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.129
  --> virus backup\myepri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.124
  --> virus backup\qhdpri.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.agw
  --> virus backup\tlupri.dll
      [DETECTION] Is the Trojan horse TR/Agent.16431.1
  --> virus backup\wgfpri.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.182
  --> virus backup\winow.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus backup\winsys16_070818.dll
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\winsys32_070818.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus backup\wlhpri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.128
  --> virus backup\xyipri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.66
  --> virus backup\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bkl.21
  --> virus backup\3.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\4.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\6.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [INFO]      The file was deleted!
H:\AV-TEST\virus backup[1].part2.rar
  [0] Archive type: RAR
  --> virus backup\AlxRes070818.exe
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\AutoRun.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\E01D01FC.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus backup\internat.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> virus backup\MsIMMs32.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\my_70145.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHel.rb.46
  --> virus backup\my_70164.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHel.rb.46
  --> virus backup\QQ2007¦Â3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> virus backup\RAV009B.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.rwa
  --> virus backup\RAV00B2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.rwa
  --> virus backup\RAVDHMON.exe
      [DETECTION] Is the Trojan horse TR/Drop.Faemon
      [INFO]      The file was deleted!
H:\AV-TEST\virus backup[1].part3.rar
  [0] Archive type: RAR
  --> virus backup\rising635.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\svchost.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus backup\SysAuto.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
      [INFO]      The file was deleted!
H:\AV-TEST\virus backup[1].part4.rar
  [0] Archive type: RAR
  --> virus backup\WinForm.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\winow.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> virus backup\xyiins.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.70
      [INFO]      The file was deleted!
H:\AV-TEST\virus backup[1].part5.rar
  [0] Archive type: RAR
  --> virus backup\system42.rar
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\SysWin64.Sys
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\SysWin64.Tao
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\SysInfo.yer
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
      [INFO]      The file was deleted!


End of the scan: 2007年8月29日  12:52
Used time: 00:46 min

The scan has been done completely.

      1 Scanning directories
     53 Files were scanned
     39 viruses and/or unwanted programs were found
      1 classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     13 Files not concerned
      5 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

The EQs

Scan performed at: 2007-8-29 14:21:46
Scanning Log
NOD32 version 2490 (20070829) NT
Command line: C:\Documents and Settings\Don johnson\桌面\virus_backup
Operating memory - is OK

Date: 29.8.2007  Time: 14:21:50
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\virus_backup\
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\3.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\4.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\6.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\8.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\AlxRes070818.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\AutoRun.exe - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\E01D01FC.EXE - probably a variant of Win32/Agent.NEO trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\internat.exe - a variant of Win32/Drowor virus
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\jhapri.dll - a variant of Win32/PSW.OnLineGames.NDA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\jzipri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\MsIMMs32.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\myepri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\myplayer.com - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\my_70164.exe - probably a variant of Win32/TrojanDownloader.QQHelper trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\qhdpri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\QQ2007β3.exe - Win32/Drowor.C virus - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\RAV009B.exe - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\RAV00B2.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\RAVDHMON.DAT - a variant of Win32/PSW.OnLineGames.NCU trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\RAVDHMON.exe - a variant of Win32/PSW.OnLineGames.NEP trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\rising635.exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\svchost.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\SysAuto.exe - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\SysInfo.yer - a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\system42.rar - probably a variant of Win32/PSW.Delf.NHI trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\SysWin64.Jmp - a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\SysWin64.Sys - Win32/AutoRun.Q worm - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\SysWin64.Tao - Win32/AutoRun.Q worm - quarantined - unable to clean - deleted
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\tlupri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\wgfpri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\windows.exe - a variant of Win32/Hupigon trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\WinForm.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\winow.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\winsys32_070818.dll - probably a variant of Win32/Spy.Delf.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\wlhpri.dll - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\xyiins.exe - a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\virus_backup\virus backup\xyipri.dll - a variant of Win32/PSW.OnLineGames.NEN trojan
Number of scanned files: 52
Number of threats found: 38
Number of files cleaned: 38
Time of completion: 14:21:57 Total scanning time: 7 sec (00:00:07)

Notes:
[7] File is probably infected with an unknown virus.

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.8.29 14:37:24

文件:F:\070824\virus backup[1]\virus backup\myplayer.com | 感染:virus [287>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\RAVDHMON.DAT | 感染:Trojan.PWS.Gamania.3423 [126>20070819_ny0008.axx]2(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\qhdpri.dll | 感染:Trojan.PWS.Gamania.3430 [200>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\winsys16_070818.dll | 感染:Trojan.Hitpop [130>20070819_ny0008.axx]3(2.2)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\winsys32_070818.dll | 感染:Trojan.Hitpop [61>20070822_ny0010.axx]3(1.2)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\2.exe | 感染:Trojan.PWS.Lineage [24>20070816_ny0006.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\3.exe | 感染:Trojan.PWS.Wsgame [25>20070816_ny0006.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\4.exe | 感染:Trojan.PWS.Gamania.2450 [6958>20070726_dw0001.axx]3(2.2)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\6.exe | 感染:virus [63>20070820_ny0009.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\8.exe | 感染:Trojan.PSW.OnLineGames.dio [593>20070729_ny0001.axx]3(3.3)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\AlxRes070818.exe | 感染:virus [287>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\internat.exe | 感染:virus [366>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\MsIMMs32.exe | 感染:Trojan.PSW.OnLineGames.dio [593>20070729_ny0001.axx]3(3.3)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\QQ2007β3.exe | 感染:Win32.HLLW.Dao[PE0002]
操作:修复
文件:F:\070824\virus backup[1]\virus backup\RAV009B.exe | 感染:Trojan.PSW.GamePass.ubd [304>20070729_ny0001.axx]2(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\RAV00B2.exe | 感染:Trojan.PWS.Wsgame [29>20070816_ny0006.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\RAVDHMON.exe | 感染:BACKDOOR.Trojan [28>20070816_ny0006.axx]3(1.2)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\rising635.exe | 感染:virus [250>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\SysAuto.exe | 感染:virus [250>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\upxdnd.exe | 感染:Trojan.PWS.Gamania.2450 [6958>20070726_dw0001.axx]3(2.2)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\WinForm.exe | 感染:Trojan.PWS.Wsgame [25>20070816_ny0006.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\winow.exe | 感染:virus [63>20070820_ny0009.axx]3(1.1)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\xyiins.exe | 感染:virus [626>20070816_ny0006.axx]3(1.3)
操作:删除文件
文件:F:\070824\virus backup[1]\virus backup\system42.rar | 感染:virus [250>20070822_ny0010.axx]3(1.1)
操作:删除文件

扫描完成|病毒:24 文件:52|耗时:10766
----------

nkevin

兄台，盗版我的帖子啊。。。。。。。。。。。嘿嘿～

onesand

C:\Documents and Settings\huaxun\桌面\virus
  [0] Archive type: RAR
  --> virus backup\myplayer.com
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\RAVDHMON.DAT
      [DETECTION] Is the Trojan horse TR/Agent.8180.1
  --> virus backup\jhapri.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.15929.1
  --> virus backup\jzipri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.129
  --> virus backup\myepri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.124
  --> virus backup\qhdpri.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.agw
  --> virus backup\tlupri.dll
      [DETECTION] Is the Trojan horse TR/Agent.16431.1
  --> virus backup\wgfpri.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.182
  --> virus backup\winow.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus backup\winsys16_070818.dll
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\winsys32_070818.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus backup\wlhpri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.128
  --> virus backup\xyipri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.66
  --> virus backup\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bkl.21
  --> virus backup\3.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\4.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\6.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus(2)'
C:\Documents and Settings\huaxun\桌面\virus(2)
  [0] Archive type: RAR
  --> virus backup\AlxRes070818.exe
      [DETECTION] Is the Trojan horse TR/KillAV.JU
  --> virus backup\AutoRun.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\E01D01FC.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus backup\internat.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> virus backup\MsIMMs32.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\my_70145.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHel.rb.46
  --> virus backup\my_70164.exe
      [DETECTION] Is the Trojan horse TR/Dldr.QQHel.rb.46
  --> virus backup\QQ2007¦Â3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> virus backup\RAV009B.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.rwa
  --> virus backup\RAV00B2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.rwa
  --> virus backup\RAVDHMON.exe
      [DETECTION] Is the Trojan horse TR/Drop.Faemon
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus(3)'
C:\Documents and Settings\huaxun\桌面\virus(3)
  [0] Archive type: RAR
  --> virus backup\rising635.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\svchost.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus backup\SysAuto.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus(4)'
C:\Documents and Settings\huaxun\桌面\virus(4)
  [0] Archive type: RAR
  --> virus backup\WinForm.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> virus backup\winow.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> virus backup\xyiins.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.70
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus(5)'
C:\Documents and Settings\huaxun\桌面\virus(5)
  [0] Archive type: RAR
  --> virus backup\system42.rar
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
  --> virus backup\SysWin64.Sys
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\SysWin64.Tao
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> virus backup\SysInfo.yer
      [DETECTION] Is the Trojan horse TR/PSW.Steal.26754
      [INFO]      The file was deleted!

ssy275

Result: 32 malware found
Trojan-PSW.Win32.Nilage.bkl (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\2.exe
Trojan-PSW.Win32.OnLineGames.acf (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\3.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\WinForm.exe
Trojan.Win32.Agent.bl (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\4.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\upxdnd.exe
Trojan-PSW.Win32.WOW.ro (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\6.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\winow.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\winow.exe
Trojan-PSW.Win32.OnLineGames.zq (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\8.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\MsIMMs32.exe
Trojan-Spy.Win32.Agent.pn (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\AlxRes070818.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\myplayer.com
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\winsys16_070818.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\winsys32_070818.dll
Virus.Win32.AutoRun.en (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\AutoRun.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\SysWin64.Sys
Trojan-Downloader.Win32.Agent.buv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\internat.exe
Trojan-PSW.Win32.OnLineGames.uo (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\jhapri.dll
Trojan-Spy.Win32.Delf.uv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\jzipri.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\myepri.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\tlupri.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\wlhpri.dll
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\xyiins.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\xyipri.dll
Trojan-PSW.Win32.OnLineGames.agw (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\qhdpri.dll
Virus.Win32.Delf.bz (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\QQ2007¦Â3.exe
Trojan-PSW.Win32.OnLineGames.aci (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\RAV009B.exe
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\RAVDHMON.exe
Trojan-PSW.Win32.OnLineGames.nn (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\RAV00B2.exe
Backdoor.Win32.Hupigon.fgx (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\rejoice2007.exe
Virus.Win32.AutoRun.go (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\svchost.exe
Trojan-PSW.Win32.OnLineGames.yn (virus)
C:\Documents and Settings\ssy\×ÀÃæ\virus backup\wgfpri.dll

[ 本帖最后由 ssy275 于 2007-8-29 17:34 编辑 ]

woai_jolin

===================================================================================================
NVCOD On Demand Scanner 5.80.02

NSE revision 5.91.04
nvcbin.def revision 5.90.00 of 2007/08/28 08:03:58 (863955 variants)
nvcmacro.def revision 5.90.00 of 2007/08/27 15:12:22 (20360 variants)
Total number of variants: 884315
Command line: "@C:\DOCUME~1\ADMINI~1\LOCALS~1\Temp\~OD1D.tmp"
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------
- Scanning files in the directory: F:\v\virus backup\
       78 ms F:\v\virus backup\2.exe                                      Security Risk W32/Suspicious_U.gen ()
       16 ms F:\v\virus backup\2.exe:Zone.Identifier                     
       31 ms F:\v\virus backup\20.exe                                    
        0 ms F:\v\virus backup\20.exe:Zone.Identifier                    
       16 ms F:\v\virus backup\21.exe                                    
        0 ms F:\v\virus backup\21.exe:Zone.Identifier                    
       47 ms F:\v\virus backup\3.exe                                      Trojan OnLineGames.gen26 ()
        0 ms F:\v\virus backup\3.exe:Zone.Identifier                     
       31 ms F:\v\virus backup\4.exe                                      Trojan W32/Agent.BVPV ()
        0 ms F:\v\virus backup\4.exe:Zone.Identifier                     
        0 ms F:\v\virus backup\6.exe                                      Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\virus backup\6.exe:Zone.Identifier                     
        0 ms F:\v\virus backup\6to4svc.dll                              
        0 ms F:\v\virus backup\6to4svc.dll:Zone.Identifier               
       16 ms F:\v\virus backup\7.exe                                    
        0 ms F:\v\virus backup\7.exe:Zone.Identifier                     
       16 ms F:\v\virus backup\8.exe                                      Trojan W32/OnLineGames.ICV ()
        0 ms F:\v\virus backup\8.exe:Zone.Identifier                     
        0 ms F:\v\virus backup\8a88F0kg.dll                              
        0 ms F:\v\virus backup\8a88F0kg.dll:Zone.Identifier              
        0 ms F:\v\virus backup\AlxRes070818.exe                           Security Risk W32/Suspicious_U.gen ()
       47 ms F:\v\virus backup\AutoRun.exe                                Trojan W32/Malware.ABFX ()
        0 ms F:\v\virus backup\AutoRun.exe:Zone.Identifier               
       16 ms F:\v\virus backup\E01D01FC.EXE                               Trojan Hupigon.gen66 ()
        0 ms F:\v\virus backup\E01D01FC.EXE:Zone.Identifier              
        0 ms F:\v\virus backup\gjj.exe                                   
        0 ms F:\v\virus backup\gjj.exe:Zone.Identifier                  
        0 ms F:\v\virus backup\internat.exe                               Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\virus backup\internat.exe:Zone.Identifier              
       47 ms F:\v\virus backup\jhapri.dll                                 Trojan W32/OnLineGames.JBE ()
        0 ms F:\v\virus backup\jhapri.dll:Zone.Identifier               
       16 ms F:\v\virus backup\jzipri.dll                                 Trojan W32/Delf.AMGO ()
        0 ms F:\v\virus backup\jzipri.dll:Zone.Identifier               
        0 ms F:\v\virus backup\MsIMMs32.exe                               Trojan W32/OnLineGames.ICV ()
        0 ms F:\v\virus backup\MsIMMs32.exe:Zone.Identifier              
        0 ms F:\v\virus backup\myepri.dll                                 Trojan W32/Delf.AMGS ()
        0 ms F:\v\virus backup\myepri.dll:Zone.Identifier               
        0 ms F:\v\virus backup\myplayer.com                               Security Risk W32/Suspicious_U.gen ()
       31 ms F:\v\virus backup\my_70145.exe                               Trojan W32/DLoader.DEYW ()
        0 ms F:\v\virus backup\my_70145.exe:Zone.Identifier              
        0 ms F:\v\virus backup\my_70164.exe                               Trojan W32/DLoader.DEYZ ()
        0 ms F:\v\virus backup\my_70164.exe:Zone.Identifier              
        0 ms F:\v\virus backup\nw16.exe                                 
        0 ms F:\v\virus backup\nw16.exe:Zone.Identifier                  
       16 ms F:\v\virus backup\qhdpri.dll                                 Trojan W32/OnLineGames.JUP ()
        0 ms F:\v\virus backup\qhdpri.dll:Zone.Identifier               
     1266 ms F:\v\virus backup\QQ2007β3.exe                             
        0 ms F:\v\virus backup\QQ2007β3.exe:Zone.Identifier            
       16 ms F:\v\virus backup\RAV009B.exe                                Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\virus backup\RAV009B.exe:Zone.Identifier               
        0 ms F:\v\virus backup\RAV00B2.exe                                Security Risk W32/Suspicious_U.gen ()
       16 ms F:\v\virus backup\RAV00B2.exe:Zone.Identifier               
        0 ms F:\v\virus backup\RAVDHMON.DAT                               Security Risk W32/Suspicious_U.gen ()
       15 ms F:\v\virus backup\RAVDHMON.DAT:Zone.Identifier              
        0 ms F:\v\virus backup\RAVDHMON.exe                               Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\virus backup\RAVDHMON.exe:Zone.Identifier              
       47 ms F:\v\virus backup\rejoice2007.exe                            Trojan Hupigon.gen114 ()
        0 ms F:\v\virus backup\rejoice2007.exe:Zone.Identifier           
       15 ms F:\v\virus backup\rising635.exe                              Trojan W32/Malware.AHHX ()
        0 ms F:\v\virus backup\rising635.exe:Zone.Identifier            
       15 ms F:\v\virus backup\svchost.exe                                Trojan Hupigon.gen66 ()
        0 ms F:\v\virus backup\svchost.exe:Zone.Identifier               
        0 ms F:\v\virus backup\SysAuto.exe                                Trojan W32/Malware.AHHX ()
       16 ms F:\v\virus backup\SysAuto.exe:Zone.Identifier               
        0 ms F:\v\virus backup\SysInfo.yer                              
       15 ms F:\v\virus backup\SysInfo.yer:Zone.Identifier               
        0 ms F:\v\virus backup\system42.rar                               Trojan W32/Malware.AHHX ()
        0 ms F:\v\virus backup\system42.rar:Zone.Identifier              
        0 ms F:\v\virus backup\SysWin64.Jmp                               Trojan W32/Malware.ABFX ()
        0 ms F:\v\virus backup\SysWin64.Jmp:Zone.Identifier              
        0 ms F:\v\virus backup\SysWin64.Sys                               Trojan W32/AutoRun.DP ()
        0 ms F:\v\virus backup\SysWin64.Sys:Zone.Identifier              
       16 ms F:\v\virus backup\SysWin64.Tao                               Trojan W32/AutoRun.DP ()
        0 ms F:\v\virus backup\SysWin64.Tao:Zone.Identifier              
       16 ms F:\v\virus backup\tlupri.dll                                 Trojan W32/Delf.ALJM ()
       16 ms F:\v\virus backup\tlupri.dll:Zone.Identifier               
        0 ms F:\v\virus backup\upxdnd.exe                                 Trojan W32/Agent.BVPV ()
        0 ms F:\v\virus backup\upxdnd.exe:Zone.Identifier               
        0 ms F:\v\virus backup\wgfpri.dll                                 Trojan W32/OnLineGames.JZA ()
        0 ms F:\v\virus backup\wgfpri.dll:Zone.Identifier               
     6094 ms F:\v\virus backup\windows.exe                              
        0 ms F:\v\virus backup\WinForm.exe                                Trojan OnLineGames.gen26 ()
        0 ms F:\v\virus backup\WinForm.exe:Zone.Identifier               
       16 ms F:\v\virus backup\winow.dll                                  Trojan W32/Wow.BJJ ()
        0 ms F:\v\virus backup\winow.dll:Zone.Identifier                 
        0 ms F:\v\virus backup\winow.exe                                  Security Risk W32/Suspicious_U.gen ()
        0 ms F:\v\virus backup\winow.exe:Zone.Identifier                 
        0 ms F:\v\virus backup\winsys16_070818.dll                        Trojan W32/Agent.CBBL ()
       15 ms F:\v\virus backup\winsys32_070818.dll                        Trojan W32/Agent.CASE ()
        0 ms F:\v\virus backup\wlgini.dll                                
        0 ms F:\v\virus backup\wlgini.dll:Zone.Identifier               
        0 ms F:\v\virus backup\wlhpri.dll                                 Trojan W32/Delf.AMGP ()
        0 ms F:\v\virus backup\wlhpri.dll:Zone.Identifier               
        0 ms F:\v\virus backup\xyiins.exe                                 Trojan W32/Delf.ALGD ()
        0 ms F:\v\virus backup\xyiins.exe:Zone.Identifier               
        0 ms F:\v\virus backup\xyipri.dll                                 Trojan W32/Delf.ALFO ()
        0 ms F:\v\virus backup\xyipri.dll:Zone.Identifier               
        0 ms F:\v\virus backup\ZCGLPUXCFKNSVA.DLL                        
        0 ms F:\v\virus backup\ZCGLPUXCFKNSVA.DLL:Zone.Identifier        
- File F:\v\virus backup\2.exe quarantined.
- File F:\v\virus backup\2.exe deleted.
- File F:\v\virus backup\3.exe quarantined.
- File F:\v\virus backup\3.exe deleted.
- File F:\v\virus backup\4.exe quarantined.
- File F:\v\virus backup\4.exe deleted.
- File F:\v\virus backup\6.exe quarantined.
- File F:\v\virus backup\6.exe deleted.
- File F:\v\virus backup\8.exe quarantined.
- File F:\v\virus backup\8.exe deleted.
- File F:\v\virus backup\AlxRes070818.exe quarantined.
- File F:\v\virus backup\AlxRes070818.exe deleted.
- File F:\v\virus backup\AutoRun.exe quarantined.
- File F:\v\virus backup\AutoRun.exe deleted.
- File F:\v\virus backup\E01D01FC.EXE quarantined.
- File F:\v\virus backup\E01D01FC.EXE deleted.
- File F:\v\virus backup\internat.exe quarantined.
- File F:\v\virus backup\internat.exe deleted.
- File F:\v\virus backup\jhapri.dll quarantined.
- File F:\v\virus backup\jhapri.dll deleted.
- File F:\v\virus backup\jzipri.dll quarantined.
- File F:\v\virus backup\jzipri.dll deleted.
- File F:\v\virus backup\MsIMMs32.exe quarantined.
- File F:\v\virus backup\MsIMMs32.exe deleted.
- File F:\v\virus backup\myepri.dll quarantined.
- File F:\v\virus backup\myepri.dll deleted.
- File F:\v\virus backup\myplayer.com quarantined.
- File F:\v\virus backup\myplayer.com deleted.
- File F:\v\virus backup\my_70145.exe quarantined.
- File F:\v\virus backup\my_70145.exe deleted.
- File F:\v\virus backup\my_70164.exe quarantined.
- File F:\v\virus backup\my_70164.exe deleted.
- File F:\v\virus backup\qhdpri.dll quarantined.
- File F:\v\virus backup\qhdpri.dll deleted.
- File F:\v\virus backup\RAV009B.exe quarantined.
- File F:\v\virus backup\RAV009B.exe deleted.
- File F:\v\virus backup\RAV00B2.exe quarantined.
- File F:\v\virus backup\RAV00B2.exe deleted.
- File F:\v\virus backup\RAVDHMON.DAT quarantined.
- File F:\v\virus backup\RAVDHMON.DAT deleted.
- File F:\v\virus backup\RAVDHMON.exe quarantined.
- File F:\v\virus backup\RAVDHMON.exe deleted.
- File F:\v\virus backup\rejoice2007.exe quarantined.
- File F:\v\virus backup\rejoice2007.exe deleted.
- File F:\v\virus backup\rising635.exe quarantined.
- File F:\v\virus backup\rising635.exe deleted.
- File F:\v\virus backup\svchost.exe quarantined.
- File F:\v\virus backup\svchost.exe deleted.
- File F:\v\virus backup\SysAuto.exe quarantined.
- File F:\v\virus backup\SysAuto.exe deleted.
- File F:\v\virus backup\system42.rar quarantined.
- File F:\v\virus backup\system42.rar deleted.
- File F:\v\virus backup\SysWin64.Jmp quarantined.
- File F:\v\virus backup\SysWin64.Jmp deleted.
- File F:\v\virus backup\SysWin64.Sys quarantined.
- File F:\v\virus backup\SysWin64.Sys deleted.
- File F:\v\virus backup\SysWin64.Tao quarantined.
- File F:\v\virus backup\SysWin64.Tao deleted.
- File F:\v\virus backup\tlupri.dll quarantined.
- File F:\v\virus backup\tlupri.dll deleted.
- File F:\v\virus backup\upxdnd.exe quarantined.
- File F:\v\virus backup\upxdnd.exe deleted.
- File F:\v\virus backup\wgfpri.dll quarantined.
- File F:\v\virus backup\wgfpri.dll deleted.
- File F:\v\virus backup\WinForm.exe quarantined.
- File F:\v\virus backup\WinForm.exe deleted.
- File F:\v\virus backup\winow.dll quarantined.
- File F:\v\virus backup\winow.dll deleted.
- File F:\v\virus backup\winow.exe quarantined.
- File F:\v\virus backup\winow.exe deleted.
- File F:\v\virus backup\winsys16_070818.dll quarantined.
- File F:\v\virus backup\winsys16_070818.dll deleted.
- File F:\v\virus backup\winsys32_070818.dll quarantined.
- File F:\v\virus backup\winsys32_070818.dll deleted.
- File F:\v\virus backup\wlhpri.dll quarantined.
- File F:\v\virus backup\wlhpri.dll deleted.
- File F:\v\virus backup\xyiins.exe quarantined.
- File F:\v\virus backup\xyiins.exe deleted.
- File F:\v\virus backup\xyipri.dll quarantined.
- File F:\v\virus backup\xyipri.dll deleted.

===================================================================================================

The scanning started: 2007/08/29 17:27:31
               ended: 2007/08/29 17:27:40
Logged on as        : Administrator
on hostname         : 2FF87FC2B9AB46F

Scanning results:
   Total number of files found..............................:      99
   Number of files scanned..................................:      99
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:      40

Copyright (c) 1993-2005 Norman ASA.