一 包

tonger2003

        

[MD5: 484D03 6BCBB9 0E84EF 213912 13F958 206AC9 5C20DD ED9331 612C94 AE2027 C60F04 F3300D 5C2AE4 DC7538 5E5710 FB4CF4 457C6B 260FF1 A679DB 1E327D FA6CBB]

21个

hahacomcn

Start of the scan: 2007年9月14日  09:24

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\tonger2003.part2.rar'
C:\Documents and Settings\Administrator\桌面\tonger2003.part2.rar
  [0] Archive type: RAR
  --> tonger2003\ysy11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cok.1
Begin scan in 'C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar'
C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar
  [0] Archive type: RAR
  --> tonger2003\ysy12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tonger2003\ysy13.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
  --> tonger2003\ysy14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.afu.2
  --> tonger2003\ysy15.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> tonger2003\ysy16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> tonger2003\ysy17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cew.1
  --> tonger2003\ysy18.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> tonger2003\ysy19.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tonger2003\ysy2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agy
  --> tonger2003\ysy20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> tonger2003\ysy3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cew.2
  --> tonger2003\ysy4.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> tonger2003\ysy5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tonger2003\ysy6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tonger2003\ysy7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> tonger2003\ysy8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> tonger2003\ysy9.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> tonger2003\ysydown.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> tonger2003\ysy1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen


End of the scan: 2007年9月14日  09:24
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     18 viruses and/or unwanted programs were found

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.cpf        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy12.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.WOW.xa        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy13.exe//PE_Patch//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.afu        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy14.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.czl        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy16.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cew        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy17.exe//UPack
detected: Trojan program Trojan.Win32.Agent.bly        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy18.exe//ASPack
detected: Trojan program Trojan-Spy.Win32.Delf.agy        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy2.exe//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy20.exe//FSG//PEPatch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cew        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy3.exe//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.aez        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy4.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cdv        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy5.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cpo        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy6.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cdb        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy7.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cpm        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy9.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cuv        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy1.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.cgd        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy10.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.coz        File: C:\Documents and Settings\Owner\×ÀÃæ\tonger2003\ysy11.exe//PE_Patch.UPX//UPX
17

kidaaaa

NOD32 通杀21个！

红心王子

2007-9-14        9:37:36        1189733856        Administrator        2840        Sign of "Win32:Onlinegames-BBR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy12.exe\[UPX]\[Embedded#2060]" file.  
2007-9-14        9:37:48        1189733868        Administrator        2840        Sign of "Win32:Onlinegames-BBH [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy13.exe\[Upack]\[Embedded#9060]\[Upack]" file.  
2007-9-14        9:37:51        1189733871        Administrator        2840        Sign of "Win32:Onlinegames-ALS [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy15.exe\[ASPack]\[Embedded#ABCDE]" file.  
2007-9-14        9:37:53        1189733873        Administrator        2840        Sign of "Win32:Crypt-VA" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy16.exe" file.  
2007-9-14        9:37:57        1189733877        Administrator        2840        Sign of "Win32:Delf-FVM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy17.exe\[Upack]\[Embedded#MUSIC]" file.  
2007-9-14        9:38:00        1189733880        Administrator        2840        Sign of "Win32:Agent-JOF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy18.exe\[ASPack]\[Embedded#4010]" file.  
2007-9-14        9:38:02        1189733882        Administrator        2840        Sign of "Win32:Agent-GJB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy20.exe" file.  
2007-9-14        9:38:04        1189733884        Administrator        2840        Sign of "Win32:Delf-FVM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy3.exe\[Upack]\[Embedded#MUSIC]" file.  
2007-9-14        9:38:06        1189733886        Administrator        2840        Sign of "Win32:Autorun-BS [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy4.exe\[UPX]\[Embedded#05ef8]" file.  
2007-9-14        9:38:11        1189733891        Administrator        2840        Sign of "Win32:Onlinegames-BBU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy5.exe\[UPX]\[Embedded#2060]" file.  
2007-9-14        9:38:13        1189733893        Administrator        2840        Sign of "Win32:Onlinegames-BBV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy6.exe\[UPX]" file.  
2007-9-14        9:38:15        1189733895        Administrator        2840        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysydown.exe\[UPX]\[Embedded#2af0]\[UPX]" file.  
2007-9-14        9:38:19        1189733899        Administrator        2840        Sign of "Win32:Onlinegames-BBZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy1.exe\[Embedded#1c60]" file.  
2007-9-14        9:38:21        1189733901        Administrator        2840        Sign of "Win32:Onlinegames-BBZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part1.rar\tonger2003\ysy1.exe" file.  
2007-9-14        9:38:29        1189733909        Administrator        2840        Sign of "Win32:Onlinegames-BBR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\tonger2003.part2.rar\tonger2003\ysy11.exe\[UPX]\[Embedded#2060]" file.

mofunzone

全灭

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\tonger2003'
C:\Documents and Settings\Administrator\My Documents\tonger2003\
  ysy1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  ysy10.exe
      [DETECTION] Is the Trojan horse TR/Agent.12665
      [INFO]      The file was deleted!
  ysy11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cok.1
      [INFO]      The file was deleted!
  ysy12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  ysy13.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.9463.B
      [INFO]      The file was deleted!
  ysy14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.afu.2
      [INFO]      The file was deleted!
  ysy15.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
  ysy16.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
  ysy17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cew.1
      [INFO]      The file was deleted!
  ysy18.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
      [INFO]      The file was deleted!
  ysy19.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4762e85f.qua'!
  ysy2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agy
      [INFO]      The file was deleted!
  ysy20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [INFO]      The file was deleted!
  ysy3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cew.2
      [INFO]      The file was deleted!
  ysy4.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
  ysy5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  ysy6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  ysy7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
      [INFO]      The file was deleted!
  ysy8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46c07990.qua'!
  ysy9.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
  ysydown.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年9月13日  18:46
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     21 Files were scanned
     19 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     19 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

kp2006

瑞星2008报13

主动防御报3

[ 本帖最后由 kp2006 于 2007-9-14 10:00 编辑 ]

taihuxian

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.

tracydk

瑞星的主动防御里还带启发。。。

欠妳緈諨

金山12