继续一dui18个

zane_xzz

[MD5: 7B0D5E 72C810 CB17B7 4C62FF 269A86 6CBD61 23357F 8CF73A BCAD19 853043 75EAD8 A8EAB5 ACD9E5 35CC31 9BD75A AAA603 A6361B B7D661]

平淡

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Hack.Win32.ArpCheater.d  
病毒： Trojan.PSW.Win32.OnlineGames.yka
病毒： Trojan.PSW.Win32.RocOnline.cx
病毒： Trojan.PSW.Win32.OnlineGames.yii
病毒： Trojan.PSW.Win32.OnlineGames.ydk
病毒： Trojan.PSW.Win32.OnlineGames.yjw
病毒： Trojan.PSW.Win32.AskTao.cd
病毒： Trojan.PSW.Win32.TLOnline.at
病毒： Trojan.PSW.Win32.OnlineGames.yda
病毒： Trojan.PSW.Win32.LMir.yev
病毒： Trojan.PSW.Win32.QQPass.tqu
病毒： Trojan.PSW.Win32.QQHX.tps
病毒： Trojan.PSW.Win32.OnlineGames.yhi
病毒： Worm.Nimaya.ef           
病毒： Trojan.PSW.Win32.XYOnline.ho

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.39.62

The EQs

Scan performed at: 2007-9-9 19:28:40
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: C:\Documents and Settings\Don johnson\桌面\桌.rar
Operating memory - is OK

Date: 9.9.2007  Time: 19:28:44
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\桌.rar
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?20.exe - Win32/Agent.NEM trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?3.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?4.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?6.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?7.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?8.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?9.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?10.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?11.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?12.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?13.exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?14.exe - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?15.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?16.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?17.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?19.exe - Win32/Delf.NGD trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\桌.rar ?RAR ?2.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 19
Number of threats found: 17
Number of files cleaned: 1
Time of completion: 19:28:51 Total scanning time: 7 sec (00:00:07)

微点卫士

微点：
蠕虫名称:Worm.Win32.Agent.dew

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\20.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kjg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.byb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dtf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jpd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jyr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dqf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kkp

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kbq

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\16.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.khk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Kolmat.k

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.cen

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\8.EXE
1) C:\DFD17396578.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\8.EXE
1) C:\DFD17396578.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\9.EXE
1) C:\DFD17409062.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\9.EXE
1) C:\DFD17409062.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\10.EXE
1) C:\DFD17420390.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\10.EXE
1) C:\DFD17420390.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\15.EXE
1) C:\DFD17466640.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\桌\15.EXE
1) C:\DFD17466640.BAT
是否删除可疑程序?


1和13是死的么？

The EQs

偶知道每当nod32报那个的时候。。。。。微点大多数都会无法测试出来

曲中求

Starting the file scan:

Begin scan in 'E:\病毒\桌.rar'
E:\病毒\桌.rar
  [0] Archive type: RAR
  --> 20.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agk
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bjn.1
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.bhy.3
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ago
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.abi.3
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bov
  --> 15.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Agent.11800
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy.3
  --> 19.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Kolmat.B.18 Backdoor server programs
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.12853
      [WARNING]   The file was ignored!


End of the scan: 2007年9月9日  19:32
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     15 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

浪滔天

卡巴 7.0.0.125 高启发

17个

已隔离: 病毒 Heur.Invader (变种)        文件: F:\病毒样本\桌\3.exe
已删除: 病毒 Virus.Win32.Virut.o        文件: F:\病毒样本\桌\9.exe
已删除: 木马程序 Backdoor.Win32.Agent.alh        文件: F:\病毒样本\桌\20.exe//UPack
已删除: 木马程序 Backdoor.Win32.Kolmat.b        文件: F:\病毒样本\桌\19.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.Delf.aav        文件: F:\病毒样本\桌\13.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bjn        文件: F:\病毒样本\桌\7.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.blb        文件: F:\病毒样本\桌\4.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bou        文件: F:\病毒样本\桌\16.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bov        文件: F:\病毒样本\桌\14.exe//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件: F:\病毒样本\桌\17.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cdb        文件: F:\病毒样本\桌\11.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cew        文件: F:\病毒样本\桌\15.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cew        文件: F:\病毒样本\桌\8.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.abi        文件: F:\病毒样本\桌\12.exe
已删除: 木马程序 Trojan-Spy.Win32.Delf.agk        文件: F:\病毒样本\桌\6.exe//UPack
已删除: 木马程序 Trojan-Spy.Win32.Delf.ago        文件: F:\病毒样本\桌\10.exe//UPack
已删除: 木马程序 Trojan.Win32.Agent.bhy        文件: F:\病毒样本\桌\1.exe//UPack

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4055
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\20.exe - Infected with PDB-2925 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Infected with PDB-3449 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\6.exe - Infected with PDB-155 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\7.exe - Infected with PDB-172 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\8.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\9.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Infected with PDB-680 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\10.exe - Infected with PDB-54 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\11.exe - Infected with PDB-2000 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\12.exe - Infected with PDB-2089 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\13.exe - Infected with PDB-3609 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\14.exe - Infected with Win32.PDB-2846 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\15.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\16.exe - Infected with PDB-3789 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\17.exe - Infected with PDB-1908 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\19.exe - Infected with Win32.PDB-468 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Suspicious of Trojan-PSW.Game.3

18 Files scanned
13 Infected files found
5 Suspicious files found
0 Files cured
13 Files deleted

Killer_cg

小A拦截