29个更新

微点卫士

木马名称:Trojan-PSW.Win32.OnLineGames.qhs

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\2(2).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qgh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\3(3).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.WOW.bfe

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\8(3).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.QQPass.gbf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\12(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qhf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\14(3).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qjw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\15(3).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qhx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\DH.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qhy

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\MH.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.qgj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\MY.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.czw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\SYS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.eex

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\TL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Wogue.l

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\VIP.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Downloader.an

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\WINDOW.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Agent.hze

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\1(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\0.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SVCHOST.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\1.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\SQMAPI32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\2(3).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\QDSHM.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MSTSC32.DLL
2) C:\WINDOWS.0\SYSTEM32\UAGNXCHMRWB.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\3.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\13(1).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\IGM.EXE
2) C:\WINDOWS.0\215366MM.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\JH.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\CMDBCS.EXE
2) C:\WINDOWS.0\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\MIR.EXE
是否删除木马程序及其衍生物?
木马名称:Trojan-Spy.Win32.Delf.eey

程序:
C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM6.INS
是木马程序!
已成功阻止其运行,是否要删除此文件?
‘程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\PLAYER.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\SYSTEM36.JUP
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\QST.EXE
由
E:\AUTORUN.INF
自启动运行!
并生成以下文件:
1) E:\AUTORUN.EXE
2) E:\AUTORUN.INF
以及可由此INF文件引导自启的文件:
E:\AUTORUN.EXE

是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\WD.EXE
1) C:\DFD590453.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:

1) C:\DFD590453.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\WL.EXE
1) C:\DFD603156.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\ZT.EXE
1) C:\DFD610484.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ONLINEGAME\ZX.EXE
1) C:\DFD617281.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

IllusionWing

29个.扫描到28个.启发27个

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.1
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\0.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\1(1).exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\1.exe 检测到 Packed.Generic.Modified
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\12(1).exe//UPX 检测到 Generic.Binder
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\13(1).exe 检测到 Trojan.WOW.wu
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\14(3).exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\15(3).exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\2(2).exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\2(3).exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\2.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\3(3).exe 检测到 Packed.Generic.UPack
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\3.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\8(3).exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\dh.exe 检测到 Packed.Generic.UPack
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\jh.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\mh.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\mir.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\my.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\player.exe 检测到 Packed.Generic.UPX.Modified.2
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\qst.exe//UPX 检测到 Generic.Binder
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\svcos.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\sys.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\tl.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\wd.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\window.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\wl.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\zt.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\onlinegame\zx.exe 检测到 Packed.Generic.UPack
检测到了 27 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:03:0000，共扫描的文件数量：34，共扫描到的威胁数量：28，威胁率：82.35%，扫描速率： 11.33 文件/秒，扫描速度： 321.38 千字节/秒，共扫描了 964.15 千字节。

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 504
Paranoia Database - 10368
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\0

C:\Documents and Settings\uhthn\Desktop\0\2(2).exe - Infected Generic.Malware.3bf
C:\Documents and Settings\uhthn\Desktop\0\2(3).exe - Suspected Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\0\2.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\0\3(3).exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\3.exe - Suspected MalwareDetector:Win32.Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\0\8(3).exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\12(1).exe - Infected Win32.Trojan-PSW.QQPass.a
C:\Documents and Settings\uhthn\Desktop\0\13(1).exe - Suspected MalwareDetector:Win32.Generic.PSW.8
C:\Documents and Settings\uhthn\Desktop\0\14(3).exe - Infected Trojan-PSW.OnLineGames.am
C:\Documents and Settings\uhthn\Desktop\0\15(3).exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\dh.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\jh.exe - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\0\mh.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\mir.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\0\my.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\player.exe - Infected Win32.Trojan-Downloader.Agent.10
C:\Documents and Settings\uhthn\Desktop\0\qst.exe - Suspected MalwareDetector:Win32.Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\0\svcos.exe - Infected Win32.Trojan-Downloader.Agent.10
C:\Documents and Settings\uhthn\Desktop\0\sys.exe - Suspected MalwareDetector:Generic.PSW.4
C:\Documents and Settings\uhthn\Desktop\0\tl.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\vip.exe - Suspected MalwareDetector:Win32.Generic.PSW.16
C:\Documents and Settings\uhthn\Desktop\0\wd.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\window.exe - Suspected Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\0\wl.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\zt.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\zx.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\0\0.exe - Suspected Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\0\1(1).exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\0\1.exe - Infected Trojan-PSW.OnLineGames.48

29 Files scanned
8 Infected files found
21 Suspected files found
0 Files cured
8 Files deleted

傻猪猪米走鸡

2007-10-12 20:58:10        Real-time file system protection        file        F:\virus\onlinegame\1(1).exe        Win32/Delf.NHI trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:58:07        Real-time file system protection        file        F:\virus\onlinegame\0.exe        probably unknown NewHeur_PE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:58:02        Real-time file system protection        file        F:\virus\onlinegame\zx.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:59        Real-time file system protection        file        F:\virus\onlinegame\zt.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:57        Real-time file system protection        file        F:\virus\onlinegame\wl.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:53        Real-time file system protection        file        F:\virus\onlinegame\window.exe        Win32/Agent.NCH worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:49        Real-time file system protection        file        F:\virus\onlinegame\wd.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:45        Real-time file system protection        file        F:\virus\onlinegame\vip.exe        a variant of Win32/Delf.NDL worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:42        Real-time file system protection        file        F:\virus\onlinegame\tl.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:40        Real-time file system protection        file        F:\virus\onlinegame\sys.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:36        Real-time file system protection        file        F:\virus\onlinegame\svcos.exe        Win32/PSW.Delf.NIY trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:33        Real-time file system protection        file        F:\virus\onlinegame\qst.exe        probably a variant of Win32/AutoRun.Q worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:30        Real-time file system protection        file        F:\virus\onlinegame\player.exe        a variant of Win32/PSW.Delf.NIY trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:26        Real-time file system protection        file        F:\virus\onlinegame\my.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:21        Real-time file system protection        file        F:\virus\onlinegame\mh.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:19        Real-time file system protection        file        F:\virus\onlinegame\jh.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:17        Real-time file system protection        file        F:\virus\onlinegame\dh.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:15        Real-time file system protection        file        F:\virus\onlinegame\15(3).exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:12        Real-time file system protection        file        F:\virus\onlinegame\14(3).exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:08        Real-time file system protection        file        F:\virus\onlinegame\13(1).exe        probably unknown NewHeur_PE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:03        Real-time file system protection        file        F:\virus\onlinegame\12(1).exe        Win32/AutoRun.BH worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:57:00        Real-time file system protection        file        F:\virus\onlinegame\8(3).exe        a variant of Win32/PSW.WOW.WU trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:56:58        Real-time file system protection        file        F:\virus\onlinegame\3.exe        probably a variant of Win32/AutoRun.Q worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:56:55        Real-time file system protection        file        F:\virus\onlinegame\3(3).exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:56:53        Real-time file system protection        file        F:\virus\onlinegame\2.exe        probably unknown NewHeur_PE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2007-10-12 20:56:47        Real-time file system protection        file        F:\virus\onlinegame\2(2).exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

The EQs

C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 2(2).exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 2.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 3(3).exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 3.exe - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 8(3).exe - a variant of Win32/PSW.WOW.WU trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 12(1).exe - Win32/AutoRun.BH worm
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 13(1).exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 14(3).exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 15(3).exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » dh.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » jh.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » mh.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » my.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » player.exe - a variant of Win32/PSW.Delf.NIY trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » qst.exe - probably a variant of Win32/AutoRun.Q worm
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » svcos.exe - Win32/PSW.Delf.NIY trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » sys.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » tl.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » vip.exe - a variant of Win32/Delf.NDL worm
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » wd.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » window.exe - Win32/Agent.NCH worm
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » wl.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » zt.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » zx.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 0.exe - probably unknown NewHeur_PE virus
C:\Documents and Settings\Don johnson\桌面\onlinegame.rar » RAR » 1(1).exe - Win32/Delf.NHI trojan

欠妳緈諨

KAV引擎全灭
反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.5
双引擎反病毒签名 2007-10-9
开始时间: 2007-10-12 22:21
引擎: KAV 引擎 (AVK 17.8716), BD 引擎 (BD 17.5530)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: 2(2).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.epn (KAV 引擎)
对象: 2(3).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eqj (KAV 引擎)
对象: 2.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.WOW.aas (KAV 引擎)
对象: 3(3).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eqt (KAV 引擎)
对象: 3.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Virus.Win32.AutoRun.ub (KAV 引擎)
对象: 8(3).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.WOW.zs (KAV 引擎)
对象: 12(1).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.QQPass.agr (KAV 引擎)
对象: 13(1).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.Lmir.bnl (KAV 引擎)
对象: 14(3).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eoa (KAV 引擎)
对象: 15(3).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eqr (KAV 引擎)
对象: dh.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eof (KAV 引擎)
对象: jh.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eul (KAV 引擎)
对象: mh.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eof (KAV 引擎)
对象: mir.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.erg (KAV 引擎)
对象: my.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.epn (KAV 引擎)
对象: player.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-Spy.Win32.Delf.akz (KAV 引擎)
对象: qst.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Virus.Win32.AutoRun.ub (KAV 引擎)
对象: svcos.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-Spy.Win32.Delf.alb (KAV 引擎)
对象: sys.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Virus.Win32.AutoRun.tp (KAV 引擎)
对象: tl.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-Spy.Win32.Delf.akx (KAV 引擎)
对象: vip.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Worm.Win32.Wogue.u (KAV 引擎)
对象: wd.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.ezw (KAV 引擎)
对象: window.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Worm.Win32.Downloader.b (KAV 引擎)
对象: wl.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eqr (KAV 引擎)
对象: zt.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eqt (KAV 引擎)
对象: zx.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eys (KAV 引擎)
对象: 0.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Worm.Win32.Downloader.b (KAV 引擎)
对象: 1(1).exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan.Win32.Agent.bxi (KAV 引擎)
对象: 1.exe
        在压缩档案里: D:\病毒测试\未解压样本\onlinegame.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.eop (KAV 引擎)

狂蚂蚁