3个

电影结束了

应该都可以杀了吧...........
同学发给我的

promised

[Found possible virus] < (damaged, not disinfectable)>         C:\ABC\WINDOWS.rar->upxdnd.exe->(UPack)
[Found possible virus] < (damaged, not disinfectable)>         C:\ABC\WINDOWS.rar->DbgHlp32.exe->(UPack)
[Found possible virus] < (damaged, not disinfectable)>         C:\ABC\WINDOWS.rar->cmdbcs.exe->(UPack)

微点卫士

木马名称:Trojan-PSW.Win32.OnLineGames.lhn

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\UPXDND.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kwy

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DBGHLP32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.kwz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\CMDBCS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
都可以杀的

IllusionWing

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.1.1
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\新建文件夹\WINDOWS.rar>>cmdbcs.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\新建文件夹\WINDOWS.rar>>DbgHlp32.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Documents and Settings\Administrator\桌面\新建文件夹\WINDOWS.rar>>upxdnd.exe 检测到 Packed.Generic.Modified
检测到了 3 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0109，共扫描的文件数量：4，共扫描到的威胁数量：3，威胁率：0.75

woai_jolin

===================================================================================================
On-demand scanner 7.0.0.9

NSE revision 5.91.07
nvcbin.def revision 5.90.00 of 2007/09/28 15:46:54 (967863 variants)
nvcmacro.def revision 5.90.00 of 2007/09/25 15:36:51 (20411 variants)
Total number of variants: 988274
===================================================================================================

       Time  Filename                                                     Virus name
---------------------------------------------------------------------------------------------------

- Scanning drive: G:\
- Scanning system areas of drive: G:\
- Scanning files matching: G:\v\cmdbcs.exe
       16 ms G:\v\cmdbcs.exe                                              Security Risk W32/Suspicious_U.gen ()
- File G:\v\cmdbcs.exe quarantined.
- File G:\v\cmdbcs.exe deleted.
- Scanning files matching: G:\v\DbgHlp32.exe
        0 ms G:\v\DbgHlp32.exe                                            Security Risk W32/Suspicious_U.gen ()
- File G:\v\DbgHlp32.exe quarantined.
- File G:\v\DbgHlp32.exe deleted.
- Scanning files matching: G:\v\upxdnd.exe
       15 ms G:\v\upxdnd.exe                                              Security Risk W32/Suspicious_U.gen ()
- File G:\v\upxdnd.exe quarantined.
- File G:\v\upxdnd.exe deleted.

===================================================================================================

The scanning started: 2007/10/02 13:26:48
               ended: 2007/10/02 13:26:49
Logged on as        : Administrator
on hostname         : C3EF58622174424

Scanning results:
   Total number of files found..............................:       3
   Number of files scanned..................................:       3
   Number of files/directories skipped due to exclude list..:       0
   Number of files that could not be opened.................:       0
   Number of archive files unpacked.........................:       0
   Number of archive files not unpacked.....................:       0
   Number of infections.....................................:       3

Copyright (c) 1993-2005 Norman ASA.

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\WINDOWS.rar'
C:\Users\morgan\Documents\
  WINDOWS.rar
    [0] Archive type: RAR
    --> upxdnd.exe
        [DETECTION] Contains detection pattern of the dropper DR/Cinmus.RJ
        [WARNING]   Infected files in archives cannot be repaired!
    --> DbgHlp32.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.bws.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> cmdbcs.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.cdv.5
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

浪滔天

卡巴 7.0.0.125

已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cyw        文件: F:\病毒样本\WINDOWS.rar/upxdnd.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件: F:\病毒样本\WINDOWS.rar/DbgHlp32.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.bgr        文件: F:\病毒样本\WINDOWS.rar/cmdbcs.exe//PE_Patch//UPack

dolphin

瑞星08
Trojan.PSW.Win32.OnlineGames.yrs  WINDOWS.rar>>upxdnd.exe>>upack0.39
Trojan.PSW.Win32.OnlineGames.yim  WINDOWS.rar>>DbgHlp32.exe>>upack0.39
Trojan.PSW.Win32.OnlineGames.ybl  WINDOWS.rar>>cmdbcs.exe>>upack0.39

The EQs

Scan performed at: 2007-10-2 14:39:42
Scanning Log
NOD32 version 2564 (20071002) NT
Command line: C:\Documents and Settings\Don johnson\桌面\WINDOWS.rar
Operating memory - is OK

Date: 2.10.2007  Time: 14:39:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\WINDOWS.rar
C:\Documents and Settings\Don johnson\桌面\WINDOWS.rar ?RAR ?upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\WINDOWS.rar ?RAR ?DbgHlp32.exe - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\WINDOWS.rar ?RAR ?cmdbcs.exe - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 4
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 14:39:46 Total scanning time: 1 sec (00:00:01)

gaara1983168

Heur/Susp.Trojan-Dropper.Win32.Agent.00003CE8
Trojan-PSW.Win32.OnLineGames.bwr
Trojan-PSW.Win32.OnLineGames.bgr
杀马报的，呵呵。