一大包，都是自己抓得。

PPwangS

单位电脑装了红伞兰屏，卸载之后突然就有了。全部抓出来。。


___________________________
系统文件和关键exe都给感染了，这回玩大了。。

偶去杀毒。。

[ 本帖最后由 PPwangS 于 2007-9-7 13:28 编辑 ]

平淡

驱逐舰弄了两个

PPwangS

等一下，又抓了俩。。

wangjay1980

detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\bingdu\AutoRun.exe
detected: virus Virus.Win32.Hala.a        File: E:\Ñù±¾\bingdu\yb\udkp.exe
detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\bingdu\yb\yb\123.exe
detected: Trojan program Trojan-PSW.Win32.WOW.vq        File: E:\Ñù±¾\bingdu\yb\yb\125.exe//FSG//#//UPack
detected: Trojan program Trojan-PSW.Win32.Delf.zn        File: E:\Ñù±¾\bingdu\yb\yb\avzxast.exe//UPack
detected: virus Virus.Win32.Hala.a        File: E:\Ñù±¾\bingdu\yb\yb\d3d8xof.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bwr        File: E:\Ñù±¾\bingdu\yb\yb\DbgHlp32.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cay        File: E:\Ñù±¾\bingdu\yb\yb\DiskMan32.exe//PE_Patch.UPX//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bou        File: E:\Ñù±¾\bingdu\yb\yb\kaqhczy.dll
detected: Trojan program Trojan-Spy.Win32.Delf.aci        File: E:\Ñù±¾\bingdu\yb\yb\kawdazy.dll
detected: Trojan program Trojan-Spy.Win32.Delf.agk        File: E:\Ñù±¾\bingdu\yb\yb\kvdxbma.dll
detected: Trojan program Trojan-PSW.Win32.Delf.zm        File: E:\Ñù±¾\bingdu\yb\yb\kvmxbma.dll
detected: virus Virus.Win32.Hala.a        File: E:\Ñù±¾\bingdu\yb\yb\mshta.exe
detected: Trojan program Trojan-Spy.Win32.Delf.acg        File: E:\Ñù±¾\bingdu\yb\yb\rsztapm.dll
detected: Trojan program Trojan-PSW.Win32.Agent.po        File: E:\Ñù±¾\bingdu\yb\yb\rxavpw0.dll
detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\bingdu\yb\yb\WinFormA9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bof        File: E:\Ñù±¾\bingdu\yb\yb\xyupri0.dll

平淡

驱逐舰直接不让下载了。。。

自由

木马名称:Trojan.Win32.Genetik.cbq

程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\AVZXAST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
恶意程序名称:Malware.Win32.agent.h

程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\D3D8XOF.DLL
是恶意程序!
已成功阻止其运行,是否要删除此文件?
恶意程序名称:Malware.Win32.agent.h

程序:
C:\WINDOWS\SYSTEM32\D3D8XOF.DLL
是恶意程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\UDKP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\D9DX.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\KULIONQJ.EXE
2) C:\WINDOWS\KULIONQJ.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\123.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE
程序:
C:\WINDOWS\SYSTEM32\KQKJALDUMR.DLL
是否删除木马程序?
程序:
C:\WINDOWS\SYSTEM32\KQKJALDUMR.DLL
删除失败!

延迟删除文件!
要删除此类病毒需要重启系统,您是否需要重启机器?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\DBGHLP32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\DISKMAN32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DISKMAN32.EXE
2) C:\WINDOWS\SYSTEM32\DISKMAN32.DLL
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\WINDOWS\SYSTEM32\D9DX.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\WINFORMA9.EXE
1) C:\DFD3442234.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\WINGCHEN\桌面\YB\YB\YB\WINFORMA9.EXE
1) C:\DFD3442234.BAT
木马名称:未知木马
程序:
C:\WINDOWS\SYSTEM32\D9DX.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

是否删除可疑程序?
126死的。
微点就点这么多。
里面有一个，貌似干掉我的微点了，，，，

[ 本帖最后由 自由 于 2007-9-7 13:59 编辑 ]

平淡

1报了
2没有报

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\新建文件夹'
C:\Documents and Settings\dell\桌面\新建文件夹\新建文件夹\yb.rar
  [0] Archive type: RAR
  --> yb\123.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> yb\125.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yb\126.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> yb\4.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> yb\AutoRun.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> yb\avzxast.exe
      [DETECTION] Is the Trojan horse TR/Agent.13023
  --> yb\DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yb\DiskMan32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yb\dlweb[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> yb\mshta.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> yb\RE[1].exe
      [DETECTION] Is the Trojan horse TR/Conime.8192
  --> yb\udkp.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> yb\WinFormA9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\avwlamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\avzxamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\d3d8xof.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A.1
  --> yb\gnublrxdjp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yb\kapjazy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kaqhczy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kawdazy.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.aci.1
  --> yb\kvdxbma.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kvmxbma.dll
      [DETECTION] Is the Trojan horse TR/Agent.19530
  --> yb\rsjzapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rsmyapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rsztapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rxavpw0.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinFormA9.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\wmsjxx1kml.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\xyupri0.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinSys64.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinSys64.Tao
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> SysWin64.Jmp
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> msmsgs.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4122
  --> ravmsmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravztmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.8850
  --> ravmsmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Alcmtr.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> ChCfg.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> SoundMan.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> hypertrm.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> kulionqj.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 7s7ac.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> avwlast.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> d3d8xof.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A.1
  --> d9dx.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> DiskMan32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!


End of the scan: 2007年9月7日  14:00
Used time: 01:02 min

The scan has been done completely.

      2 Scanning directories
     64 Files were scanned
     29 viruses and/or unwanted programs were found
     21 Files were classified as suspicious:

曲中求

33个已知，20个启发......

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb'
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\7s7ac.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\Alcmtr.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\AlxRes070905.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\avwlast.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ChCfg.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\d3d8xof.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\d9dx.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\DiskMan32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\hypertrm.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\kulionqj.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\msmsgs.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\myplayer.com
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravgjmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.8850
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4122
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravmsmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravmsmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravztmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\ravztmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\Setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\SoundMan.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\SysWin64.Jmp
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\123.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\125.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\126.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\4.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\AutoRun.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\avwlamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\avzxamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\avzxast.exe
      [DETECTION] Is the Trojan horse TR/Agent.13023
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\d3d8xof.dll
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\DiskMan32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\dlweb[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\gnublrxdjp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\kapjazy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\kaqhczy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bou
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\kawdazy.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.aci.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\kvdxbma.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\kvmxbma.dll
      [DETECTION] Is the Trojan horse TR/Agent.19530
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\mshta.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\RE[1].exe
      [DETECTION] Is the Trojan horse TR/Conime.8192
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\rsjzapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\rsmyapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\rsztapm.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.acg.2
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\rxavpw0.dll
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PO.1
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\udkp.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
      [WARNING]   The file was not repaired as requested!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\WinFormA9.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\WinFormA9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\WinSys64.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\WinSys64.Tao
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\wmsjxx1kml.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\新建文件夹[1].part1\新建文件夹\yb\yb\xyupri0.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bof.3
      [WARNING]   The file was ignored!


End of the scan: 2007年9月7日  14:00
Used time: 00:13 min

The scan has been done completely.

      2 Scanning directories
     64 Files were scanned
     33 viruses and/or unwanted programs were found
     20 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     31 Files not concerned
      0 Archives were scanned
     53 Warnings
      0 Notes

红心王子

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹'
C:\Documents and Settings\Administrator\桌面\新建文件夹\新建文件夹\yb.rar
  [0] Archive type: RAR
  --> yb\123.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> yb\125.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yb\126.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> yb\4.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> yb\AutoRun.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> yb\avzxast.exe
      [DETECTION] Is the Trojan horse TR/Agent.13023
  --> yb\DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yb\DiskMan32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yb\dlweb[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> yb\mshta.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> yb\RE[1].exe
      [DETECTION] Is the Trojan horse TR/Conime.8192
  --> yb\udkp.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> yb\WinFormA9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\avwlamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\avzxamn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\d3d8xof.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A.1
  --> yb\gnublrxdjp.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yb\kapjazy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kaqhczy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kawdazy.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.aci.1
  --> yb\kvdxbma.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\kvmxbma.dll
      [DETECTION] Is the Trojan horse TR/Agent.19530
  --> yb\rsjzapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rsmyapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rsztapm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\rxavpw0.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinFormA9.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\wmsjxx1kml.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\xyupri0.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinSys64.Sys
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yb\WinSys64.Tao
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Setup.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> SysWin64.Jmp
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> msmsgs.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> ravgjmon.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4122
  --> ravmsmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravztmon.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ravgjmon.dat
      [DETECTION] Is the Trojan horse TR/PSW.8850
  --> ravmsmon.dat
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Alcmtr.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> ChCfg.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> SoundMan.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Rectix.A
  --> hypertrm.exe
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> kulionqj.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 7s7ac.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> avwlast.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> d3d8xof.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A.1
  --> d9dx.dll
      [DETECTION] Contains code of the Windows virus W32/Rectix.A
  --> DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> DiskMan32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年9月7日  14:03
Used time: 00:23 min

The scan has been done completely.

      2 Scanning directories
     64 Files were scanned
     29 viruses and/or unwanted programs were found
     21 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     35 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes