29个快餐

wangjay1980

如题

kp2006

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.702
        病毒库日期 2007-09-23
        更新日期 2007-09-24

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a12.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a14.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a16.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a19.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\down.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\hua.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\player.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1.css

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163a.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163b.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163c.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163e.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163h.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163i.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\163j.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1631.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1632.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1633.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1634.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1636.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1637.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1638.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\1639.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a2.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a4.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a7.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a8.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a9.exe

扫描目标 D:\Documents and Settings\Administrator\桌面\29\a11.exe

开始时间 2007-09-24 11:15:06

在 D:\Documents and Settings\Administrator\桌面\29\a12.exe 中发现 Trojan/PSW.OnLineGames.gov 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a16.exe 中发现 Trojan/PSW.OnLineGames.goy 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a19.exe 中发现 Trojan/PSW.OnLineGames.glq 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\hua.exe 中发现 TrojanDownloader.Agent.ppj 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163b.exe 中发现 Trojan/PSW.OnLineGames.gop 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163e.exe 中发现 Trojan/PSW.OnLineGames.eeb 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163c.exe 中发现 Trojan/PSW.OnLineGames.goy 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163i.exe 中发现 Worm/Agent.hc 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163h.exe 中发现 Trojan/PSW.GamePass.txo 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1631.exe 中发现 Trojan/PSW.OnLineGames.gql 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\163j.exe 中发现 Trojan/PSW.GamePass.txo 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1632.exe 中发现 Trojan/PSW.OnLineGames.glq 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1634.exe 中发现 Trojan/PSW.GamePass.yqx 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1636.exe 中发现 Trojan/PSW.GamePass.xxa 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1638.exe 中发现 Trojan/PSW.OnLineGames.glq 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\1637.exe 中发现 Trojan/PSW.OnLineGames.gjc 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a2.exe 中发现 Trojan/PSW.OnLineGames.gqb 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a7.exe 中发现 Trojan/PSW.OnLineGames.gqk 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a9.exe 中发现 Trojan/PSW.OnLineGames.gop 病毒, 已删除
在 D:\Documents and Settings\Administrator\桌面\29\a11.exe 中发现 Trojan/PSW.GamePass.zea 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :549                                 病毒体 :20        
                   删除 :20                                    解毒 :0         
    扫描速度(千字节/秒) :15684                             扫描时间 :00:00:10
    扫描文件速度(个/秒) :54

king6808

F:\9.24\29.zip >>ZIP >>player.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>163a.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\9.24\29.zip >>ZIP >>163b.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>163c.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>163e.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>163h.exe - Win32/Agent.NEM 木马
F:\9.24\29.zip >>ZIP >>163i.exe - Win32/Delf.NGD 木马
F:\9.24\29.zip >>ZIP >>163j.exe - Win32/Agent.NEM 木马
F:\9.24\29.zip >>ZIP >>1631.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>1632.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>1633.exe - 可能是 Win32/AutoRun.Q 蠕虫 的一个变种
F:\9.24\29.zip >>ZIP >>1634.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\9.24\29.zip >>ZIP >>1636.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>1637.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>1638.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>1639.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>a2.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a4.exe - Win32/PSW.Legendmir.NEP 木马的变种
F:\9.24\29.zip >>ZIP >>a7.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a8.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a9.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a11.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a12.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>a14.exe - 可能是 Win32/PSW.OnLineGames.NEP 木马 的一个变种
F:\9.24\29.zip >>ZIP >>a16.exe - Win32/PSW.OnLineGames.YA 木马的变种
F:\9.24\29.zip >>ZIP >>a19.exe - 可能是 Win32/Genetik 木马 的一个变种
F:\9.24\29.zip >>ZIP >>down.exe - 可能是 Win32/PSW.Delf.NHI 木马 的一个变种

小邪邪

AVK杀29

aziok

[0] Archive type: ZIP
  --> player.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4390
  --> 1.css
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 163a.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> 163b.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dfs
  --> 163c.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 163e.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 163h.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.38 Backdoor server programs
  --> 163i.exe
      [DETECTION] Is the Trojan horse TR/Agent.12288.D
  --> 163j.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.38 Backdoor server programs
  --> 1631.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1632.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.bxi
  --> 1633.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.46697
  --> 1634.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cnf.1
  --> 1636.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bjj.1
  --> 1637.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dcu
  --> 1638.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ddw
  --> 1639.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> a4.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> a7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dkh
  --> a8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> a9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dfs
  --> a11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dda
  --> a12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dfk.1
  --> a14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.TF.1
  --> a16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.dfx
  --> a19.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.deg
  --> down.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> hua.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was deleted!


End of the scan: 2007年9月24日  11:25
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     31 Files were scanned
     27 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

欠妳緈諨

AVAST24

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.9.24 12:30:40

文件:F:\070922\29\player.exe | 感染:DLOADER.Trojan [112>20070920_ny0021.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\163b.exe | 感染:virus [246>20070921_ny0022.axx]3(6.8)
操作:删除文件
文件:F:\070922\29\163c.exe | 感染:virus [245>20070921_ny0022.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\163e.exe | 感染:virus [161>20070802_ny0003.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\163h.exe | 感染:virus [12631>20070726_dw0001.axx]3(1.2)
操作:删除文件
文件:F:\070922\29\163i.exe | 感染:Worm.Agent.hc [1066>20070726_kv0001.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\163j.exe | 感染:virus [12631>20070726_dw0001.axx]3(1.2)
操作:删除文件
文件:F:\070922\29\1632.exe | 感染:Trojan.PWS.Gamania.4314 [84>20070921_ny0022.axx]3(6.6)
操作:删除文件
文件:F:\070922\29\1634.exe | 感染:virus [629>20070910_ny0015.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\1636.exe | 感染:BINARYRES [464>20070830_ny0012.axx]3(1.1)
操作:删除文件
文件:F:\070922\29\1637.exe | 感染:Trojan.PWS.Gamania.4214 [79>20070921_ny0022.axx]3(16.16)
操作:删除文件
文件:F:\070922\29\1638.exe | 感染:virus [493>20070920_ny0021.axx]3(1.5)
操作:删除文件
文件:F:\070922\29\a11.exe | 感染:Trojan.PWS.Gamania.4198 [311>20070920_ny0021.axx]3(5.5)
操作:删除文件

扫描完成|病毒:13 文件:29|耗时:15742
----------

平淡

jhtl

nod32 27个

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 233
Paranoia Database - 5757
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\player.exe - Suspicious of Trojan.Dialer.1
C:\Documents and Settings\uhthn\Desktop\New Folder\1.css - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\163a.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\163b.exe - Infected with SDB:Trojan-PSW.OnLineGames.dfs - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\163c.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\163e.exe - Infected with PDB:8a6 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\163h.exe - Infected with PDB:572 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\163i.exe - Infected with PDB:Win32.1f4 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\163j.exe - Infected with PDB:572 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1631.exe - Infected with SDB:Trojan-PSW.OnLineGames.rt - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1632.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\1633.exe - Infected with SDB:Win32.Trojan-PSW.QQPass.bam - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1634.exe - Infected with PDB:d07 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1636.exe - Infected with PDB:a09 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1637.exe - Infected with SDB:Trojan-PSW.OnLineGames.dcu - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1638.exe - Infected with SDB:Trojan-PSW.OnLineGames.ddw - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1639.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\a2.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\a4.exe - Infected with SDB:Win32.Trojan-PSW.OnLineGames.czg - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\a7.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\a8.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\a9.exe - Infected with SDB:Trojan-PSW.OnLineGames.dfs - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\a11.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\a12.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\a14.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\a16.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\a19.exe - Infected with SDB:Trojan-Dropper.Agent.bxi - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\down.exe - Infected with SDB:Win32.Trojan-PSW.Delf.wh - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\hua.exe - Infected with SDB:Trojan-Dropper.Small.ayg - Deleted

29 Files scanned
16 Infected files found
13 Suspicious files found
0 Files cured
16 Files deleted