19个【MD5略】

wangjay1980

如题

detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/xue.exe//PE_Patch//UPack
detected: virus Heur.Invader (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/1(1)(3).exe
detected: virus Heur.Invader (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/1(3).exe
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/3(1)(1)(1).exe
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/3(1)(2).exe
detected: virus Heur.Invader (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/3(2)(1).exe
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/4(1)(2)(1).exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/4(2)(1).exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/8(1).exe//NSPack//PE_Patch.MaskPE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.drq File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/12tl.exe//PE_Patch//UPack//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.drz File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/13cq.exe//PE_Patch//UPack//#
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/14.exe//PE_Patch.UPX
detected: virus Heur.Invader (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/1630.exe
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/1639.exe//PE_Patch.UPX
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/a5.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.drp File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/a13.exe//PE_Patch//UPack//#
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/hua.exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/moon.exe//ASPack
detected: virus Heur.Trojan.Generic (modification) File: E:\ÏÂÔØ»ùµØ\ÏÂÔØ»ùµØ.rar/qq.exe

The EQs

Scan performed at: 2007-9-28 10:22:15
Scanning Log
NOD32 version 2556 (20070928) NT
Command line: C:\Documents and Settings\Don johnson\桌面\19.rar
Operating memory - is OK

Date: 28.9.2007  Time: 10:22:20
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\19.rar
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?xue.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?1(1)(3).exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?1(3).exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?3(1)(1)(1).exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?3(1)(2).exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?3(2)(1).exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?4(1)(2)(1).exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?4(2)(1).exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?8(1).exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?14.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?1630.exe - a variant of Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?1639.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?a5.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?hua.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?moon.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\19.rar ?RAR ?qq.exe - probably a variant of Win32/AutoRun.Q worm
Number of scanned files: 20
Number of threats found: 16
Number of files cleaned: 1
Time of completion: 10:22:22 Total scanning time: 2 sec (00:00:02)

Notes:
[7] File is probably infected with an unknown virus.

红心王子

小a 13个

2007-9-28        10:32:35        1190946755        Administrator        2236        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1(1)(3).exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:OnLineGames-SR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1(1)(3).exe" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1(3).exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:OnLineGames-SR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1(3).exe" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:Small-HKX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\3(1)(1)(1).exe" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:Small-HKX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\3(1)(2).exe" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\3(2)(1).exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:OnLineGames-SR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\3(2)(1).exe" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:Nilage-JY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\4(1)(2)(1).exe\[Upack]\[Embedded#4068]" file.  
2007-9-28        10:32:38        1190946758        Administrator        2236        Sign of "Win32:Nilage-JY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\4(2)(1).exe\[Upack]\[Embedded#4068]" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:Agent-HUT [Wrm]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\8(1).exe\[NsPack]" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:Agent-KKN [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\12tl.exe\[Upack]\[Embedded#9ca8]" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1630.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:OnLineGames-SR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\1630.exe" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:Small-HKX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\a5.exe\[Upack]" file.  
2007-9-28        10:32:39        1190946759        Administrator        2236        Sign of "Win32:Agent-HFX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\moon.exe\[ASPack]" file.  
2007-9-28        10:32:40        1190946760        Administrator        2236        Sign of "Win32:Delf-FZG [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\19.rar\qq.exe\[UPX]\[Embedded#05ef8]" file.

chow2006

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 263
Paranoia Database - 5870
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\xue.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\1(1)(3).exe - Infected with SDB:Trojan-PSW.OnLineGames.u - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1(3).exe - Infected with SDB:Trojan-PSW.OnLineGames.u - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3(1)(1)(1).exe - Infected with SDB:Trojan-PSW.OnLineGames.8 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3(1)(2).exe - Infected with SDB:Trojan-PSW.OnLineGames.8 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3(2)(1).exe - Infected with SDB:Trojan-PSW.OnLineGames.u - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\4(1)(2)(1).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\4(2)(1).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\8(1).exe - Infected with SDB:MalwareSpy.Win32.Trojan-Downloader.Agent.3 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\12tl.exe - Infected with SDB:Trojan-Spy.Delf.2 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\13cq.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\14.exe - Infected with SDB:Trojan-PSW.OnLineGames.20 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1630.exe - Infected with SDB:Trojan-PSW.OnLineGames.u - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1639.exe - Infected with SDB:Trojan-PSW.OnLineGames.20 - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\a5.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\a13.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\hua.exe - Suspicious of Trojan-PSW.Game.4
C:\Documents and Settings\uhthn\Desktop\New Folder\moon.exe - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\qq.exe - Infected with SDB:Win32.Trojan-PSW.QQPass.a - Deleted

19 Files scanned
11 Infected files found
8 Suspicious files found
0 Files cured
11 Files deleted

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\19.rar'
C:\Users\morgan\Documents\
  19.rar
    [0] Archive type: RAR
    --> xue.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1(1)(3).exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1(3).exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3(1)(1)(1).exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3(1)(2).exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3(2)(1).exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4(1)(2)(1).exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4(2)(1).exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8(1).exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 12tl.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 13cq.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 14.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1630.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1639.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> a5.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> a13.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> hua.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> moon.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> qq.exe
        [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月27日  21:24
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     16 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
     20 Warnings
      0 Notes

king6808

已删除：木马程序 Trojan-Downloader.Win32.Small.fvw        文件: F:\9.28\19.rar/xue.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dse        文件: F:\9.28\19.rar/1(1)(3).exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dse        文件: F:\9.28\19.rar/1(3).exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsm        文件: F:\9.28\19.rar/3(1)(1)(1).exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsm        文件: F:\9.28\19.rar/3(1)(2).exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dse        文件: F:\9.28\19.rar/3(2)(1).exe
已删除：木马程序 Trojan-PSW.Win32.Nilage.bqh        文件: F:\9.28\19.rar/4(1)(2)(1).exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Nilage.bqh        文件: F:\9.28\19.rar/4(2)(1).exe//PE_Patch//UPack
已删除：病毒 Virus.Win32.AutoRun.pp        文件: F:\9.28\19.rar/8(1).exe//NSPack//PE_Patch.MaskPE
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsb        文件: F:\9.28\19.rar/12tl.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.Lmir.bms        文件: F:\9.28\19.rar/13cq.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsf        文件: F:\9.28\19.rar/14.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dse        文件: F:\9.28\19.rar/1630.exe
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsf        文件: F:\9.28\19.rar/1639.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsq        文件: F:\9.28\19.rar/a5.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.dsp        文件: F:\9.28\19.rar/a13.exe//PE_Patch//UPack
已删除：木马程序 Trojan-Downloader.Win32.Injecter.o        文件: F:\9.28\19.rar/hua.exe//PE_Patch//UPack
已删除：木马程序 Backdoor.Win32.Agent.bxb        文件: F:\9.28\19.rar/moon.exe//ASPack
已删除：病毒 Virus.Win32.AutoRun.pq        文件: F:\9.28\19.rar/qq.exe//UPX

PlayWill

怎么我的小A发现了17个

碧水寒潭

Start of the scan: 2007年9月28日  22:00

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\19.rar
  [0] Archive type: RAR
  --> xue.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Banload.CDL.9
  --> 1(1)(3).exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 1(3).exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 3(1)(1)(1).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3(1)(2).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3(2)(1).exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4(1)(2)(1).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4(2)(1).exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 8(1).exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 12tl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 13cq.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 1630.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 1639.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> hua.exe
      [DETECTION] Is the Trojan horse TR/Agent.930816
  --> moon.exe
      [DETECTION] Is the Trojan horse TR/PWS.Banker.631826
  --> qq.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年9月28日  22:00
Used time: 00:13 min

The scan has been done completely.

      1 Scanning directories
     20 Files were scanned
     19 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

NobleT

~~