16只毒网产物

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4831
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\18.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\11(1).exe - Infected with PDB-42d Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\12(1).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\3(1).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\7(1).exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder\19(1).exe - Suspicious of Win32.Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Suspicious of MalwareSpy.Win32.Trojan-Downloader.Delf.1
C:\Documents and Settings\uhthn\Desktop\New Folder\14(1).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\15(1).exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\20(1).exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder\5.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\9(1).exe - Infected with PDB-24e Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\6.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\8.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\1(1).exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder\17.exe - Infected with PDB-2fe Malware program - Deleted

16 Files scanned
3 Infected files found
13 Suspicious files found
0 Files cured
3 Files deleted

微点卫士

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.kgh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kls

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\11(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kxc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\12(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.ciw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\7(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.chm

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Dropper.Win32.Killav.g

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kha

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\1(1).EXE
修改注册表项:
HKCU\Software\Microsoft\Internet Explorer\Main\stArT paGe
是否阻止?
木马名称:Trojan-PSW.Win32.OnLineGames.kqw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\3(1).EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
4) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\6.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\8.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVMSMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVMSMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\9(1).EXE
1) C:\DFD691296.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\9(1).EXE
1) C:\DFD691296.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\14(1).EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVZXMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVZXMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\15(1).EXE
1) C:\DFD713156.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ABC\15(1).EXE
1) C:\DFD713156.BAT
是否删除可疑程序?

上报19和20

小邪邪

AVK全杀16个

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\ABC.rar'
C:\Documents and Settings\Administrator\My Documents\
  ABC.rar
    [0] Archive type: RAR
    --> 18.exe
        [DETECTION] Is the Trojan horse TR/Agent.11936
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11(1).exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cew
        [WARNING]   Infected files in archives cannot be repaired!
    --> 12(1).exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3(1).exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7(1).exe
        [DETECTION] Is the Trojan horse TR/PSW.12288.121
        [WARNING]   Infected files in archives cannot be repaired!
    --> 19(1).exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/PSW.Steal.38400.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 14(1).exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 15(1).exe
        [DETECTION] Is the Trojan horse TR/Agent.12868
        [WARNING]   Infected files in archives cannot be repaired!
    --> 20(1).exe
        [DETECTION] Is the Trojan horse TR/Spy.Hacko.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Zlob.cix
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9(1).exe
        [DETECTION] Is the Trojan horse TR/Spy.Delf.agk
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1(1).exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 17.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月14日  07:48
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     17 Files were scanned
     15 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
     17 Warnings
      0 Notes

wcaonima007

扫描报告
2007年9月15日 星期六 14:10:26 - 14:10:27
计算机名称: C62B0AD74DE04C6
扫描类型: 扫描目标
目标: C:\Documents and Settings\Administrator\桌面\ABC.rar


--------------------------------------------------------------------------------

结果: 找到 16 恶意软件
Trojan-PSW.Win32.OnLineGames.cex (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\18.exe
Trojan-PSW.Win32.OnLineGames.cew (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\11(1).exe
Trojan-PSW.Win32.OnLineGames.cwk (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\12(1).exe
Trojan-PSW.Win32.OnLineGames.cny (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\3(1).exe
Trojan-PSW.Win32.OnLineGames.cwo (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\7(1).exe
Trojan-PSW.Win32.OnLineGames.cwm (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\19(1).exe
Trojan-PSW.Win32.OnLineGames.cwn (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\4.exe
Trojan-PSW.Win32.OnLineGames.cwl (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\14(1).exe
Trojan-Spy.Win32.Delf.bbm (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\15(1).exe
Backdoor.Win32.Delf.bts (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\20(1).exe
Trojan-Dropper.Win32.Killav.e (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\5.exe
Trojan-Spy.Win32.Delf.agk (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\9(1).exe
Trojan-PSW.Win32.QQPass.ban (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\6.exe
Trojan-PSW.Win32.WOW.xb (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\8.exe
Trojan.Win32.StartPage.bac (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\1(1).exe
Trojan-PSW.Win32.OnLineGames.bwr (病毒)
C:\Documents and Settings\Administrator\桌面\ABC.rar\17.exe

Killer_cg

全杀