某帖挖的36个

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\样本.rar'
C:\Users\morgan\Documents\
  样本.rar
    [0] Archive type: RAR
    --> win18.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> win19.exe
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> win20.exe
        [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> window.exe
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> wlatl.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> wpcap.dll
    --> zhanshenms.dll
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> zhjtrx.dll
        [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> zxatl.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 88X600.nmp
    --> 608769MM.DLL
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> djatl.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.feg
        [WARNING]   Infected files in archives cannot be repaired!
    --> gjatl.dll
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> IGM.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> mszs.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> NinSys74.Sys
        [DETECTION] Is the Trojan horse TR/PSW.Steal.45178.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> NvWin75.Jmp
        [DETECTION] Is the Trojan horse TR/PSW.Steal.45178.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> Packet.dll
    --> scvhost.exe
        [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> sqmapi32.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fjs
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fjs
        [WARNING]   Infected files in archives cannot be repaired!
    --> WanPacket.dll
    --> win1.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.flr
        [WARNING]   Infected files in archives cannot be repaired!
    --> win3.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win4.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> win5.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win6.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win7.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win8.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win9.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win11.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> win13.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> win14.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> win16.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.czr
        [WARNING]   Infected files in archives cannot be repaired!
    --> win17.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fei
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年10月19日  09:01
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     37 Files were scanned
     30 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      1 Archives were scanned
     33 Warnings
      0 Notes

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 598
Paranoia Database - 40889
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win18.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win19.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win20.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\window.exe - Suspected Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\wlatl.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\wpcap.dll - Infected Generic.Malware.82512.8c5
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\zhanshenms.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\zhjtrx.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\zxatl.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\88X600.nmp - OK
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\608769MM.DLL - Infected Win32.Generic.Malware.6
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\djatl.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\gjatl.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IGM.exe - Suspected MalwareDetector:Win32.Generic.PSW.8
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\mszs.dll - Infected Trojan-PSW.OnLineGames.ap
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\NinSys74.Sys - Infected Win32.Trojan-PSW.QQPass.a
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\NvWin75.Jmp - Infected Win32.Trojan-PSW.QQPass.a
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\Packet.dll - Infected Generic.Malware.26956.3af
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\scvhost.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\sqmapi32.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\upxdnd.dll - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\upxdnd.exe - Infected Trojan-PSW.OnLineGames.8
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\WanPacket.dll - Infected Generic.Malware.21745.cc3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win1.exe - Suspected MalwareDetector:Generic.PSW.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win3.exe - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win4.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win5.exe - Suspected MalwareDetector:Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win6.exe - Suspected Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win7.exe - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win8.exe - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win9.exe - Suspected Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win11.exe - Infected Trojan-PSW.OnLineGames.43
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win13.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win14.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win16.exe - Infected Win32.Trojan-PSW.OnLineGames.f
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\win17.exe - Infected Trojan-PSW.OnLineGames.48

36 Files scanned
19 Infected files found
16 Suspected files found
0 Files cured
19 Files deleted