一堆

zane_xzz

[MD5: DF3DA2 806F93 0F3D9A 415E20 4BD17E 438CD0 4C9D1A 89651D 5066F2 B37D10 9D0EFA]

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\11.zip'
F:\病毒样本\11.zip
  [0] Archive type: ZIP
  --> 11/dh.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkq
  --> 11/mh.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjk
  --> 11/ms.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.csd
  --> 11/my.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bki
  --> 11/qj.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bko
  --> 11/rx.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PC
  --> 11/tj.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lineage.mz.5
  --> 11/tl.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
  --> 11/wd.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkr
  --> 11/zt.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjm
  --> 11/zx.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bdv
      [INFO]      The file was deleted!

wangjay1980

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bkq        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/dh.exe//PE_Patch//UPack
deleted: Trojan program Trojan-Downloader.Win32.Small.fjk        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/mh.exe//PE_Patch//UPack
deleted: Trojan program Trojan-Downloader.Win32.Agent.csd        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/ms.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bki        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/my.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/qj.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Agent.pc        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/rx.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Delf.up        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/tj.exe//UPack
deleted: Trojan program Backdoor.Win32.WinterLove.bi        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/tl.exe//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bkr        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/wd.exe//PE_Patch//UPack
deleted: Trojan program Trojan-Downloader.Win32.Small.fjm        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/zt.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.bgc        File: C:\Documents and Settings\Owner\×ÀÃæ\11.zip/11/zx.exe

ssy275

FS 全部砍掉

sdbsky

来源这个帖子：
http://bbs.kafan.cn/viewthread.p ... mp%3Bascdesc%3DDESC

capsshift

红伞报了。

Starting the file scan:

Begin scan in 'C:\BOOT\11.zip'
C:\BOOT\11.zip
  [0] Archive type: ZIP
  --> 11/dh.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkq
  --> 11/mh.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjk
  --> 11/ms.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.csd
  --> 11/my.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bki
  --> 11/qj.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bko
  --> 11/rx.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PC
  --> 11/tj.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lineage.mz.5
  --> 11/tl.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
  --> 11/wd.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkr
  --> 11/zt.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjm
  --> 11/zx.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bdv
      [INFO]      The file was moved to '4709990b.qua'!

gho

咖啡杀得只剩一个

gho

C:\Documents and Settings\gho\桌面\11\my.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种

扫描开始时间: 2007-9-3 15:11:03
扫描日志
NOD32 版本 2498 (20070902) NT
命令行: F:\virus\11.zip

日期: 2007年9月3日  时间: 15:11:04
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\11.zip
F:\virus\11.zip ?ZIP ?11/dh.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/mh.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/ms.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/my.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/qj.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/tj.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\virus\11.zip ?ZIP ?11/tl.exe<病毒 - Win32/AutoRun.Q 蠕虫 变种>
F:\virus\11.zip ?ZIP ?11/wd.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/zt.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\11.zip ?ZIP ?11/zx.exe<病毒 - Win32/PSW.OnLineGames.NEP 木马 变种>
已扫描文件数量: 11
已发现病毒数量: 10
完成时间: 15:11:07 总共扫描时间: 3 秒 (00:00:03)

注意:
[7] 文件可能感染了未知病毒。

1688388728

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.bkq        URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch//UPack