继续18只

欠妳緈諨

AVAST16

微点卫士

木马名称:Trojan-PSW.Win32.OnLineGames.rfx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Agent.exd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\SYSTEM36.JUP
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.AutoRun.dk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST2.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.Cinmus.agw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DOSSSETUP.DLL
是广告软件!
已成功阻止其运行,是否要删除此文件?
广告软件名称:AdWare.Win32.Cinmus.aeh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\ACPIDISK.SYS
是广告软件!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\DOSSSETUP.DLL
是否删除木马程序及其衍生物?
木马名称:Trojan-PSW.Win32.WOW.bgy

程序:
C:\WINDOWS.0\SYSTEM32\QDSHM.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST3.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST4.EXE
1) C:\DFD2354078.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST4.EXE
1) C:\DFD2354078.BAT
是否删除可疑程序?
木马名称:Trojan.Win32.Agent.igd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\WINMOI.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST7.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\QDSHM.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HOST9.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\TLDOOR0.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\RSMYFSP.EXE
1) C:\DFD2388109.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

wangjay1980

15
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fmr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/rsmyfsp.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fft        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host6.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fmi        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host7.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.abh        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host3.exe//PE_Patch//UPack//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fmr        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/rsmyfpm.dll
detected: Trojan program Trojan-PSW.Win32.Agent.ko        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/System36.jup//UPX
detected: virus Worm.Win32.AutoRun.an        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host2.exe//UPX
detected: Trojan program Trojan-PSW.Win32.QQPass.aho        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/SysWin64.Sys
detected: adware not-a-virus:AdWare.Win32.Cinmus.ada        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/1.exe//data0003
detected: adware not-a-virus:AdWare.Win32.Cinmus.adb        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/1.exe//data0004
detected: Trojan program Trojan-Dropper.Win32.Agent.cfj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host8.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fga        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/addrgjhelp.dll//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.abm        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/addrmshelp.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fir        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host9.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.flj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾7.rar/host4.exe//UPack

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\样本.rar'
C:\Users\morgan\Documents\
  样本.rar
    [0] Archive type: RAR
    --> rsmyfsp.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> host6.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> host7.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> host3.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> kvdxema.dll
        [DETECTION] Is the Trojan horse TR/FWDisable.21064
        [WARNING]   Infected files in archives cannot be repaired!
    --> rsmyfpm.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> System36.jup
        [DETECTION] Is the Trojan horse TR/PSW.Steal.28250
        [WARNING]   Infected files in archives cannot be repaired!
    --> System6.ins
        [DETECTION] Is the Trojan horse TR/PSW.Steal.28250
        [WARNING]   Infected files in archives cannot be repaired!
    --> host2.exe
        [DETECTION] Is the Trojan horse TR/PSW.QQpass.aho
        [WARNING]   Infected files in archives cannot be repaired!
    --> SysWin64.Sys
        [DETECTION] Is the Trojan horse TR/PSW.QQpass.aho
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Contains detection pattern of the dropper DR/Cinmus.ada.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> host8.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> qdshm.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> addrgjhelp.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fga
        [WARNING]   Infected files in archives cannot be repaired!
    --> addrz_thelp.dll
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> addrmshelp.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> host9.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fir
        [WARNING]   Infected files in archives cannot be repaired!
    --> host4.exe
        [DETECTION] Is the Trojan horse TR/FWDisable.21064
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年10月19日  09:10
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     16 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
     19 Warnings
      0 Notes

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 598
Paranoia Database - 40889
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\rsmyfsp.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host6.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host7.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host3.exe - Infected Trojan-PSW.OnLineGames.48
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\kvdxema.dll - Infected Win32.Trojan-PSW.OnLineGames.af
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\rsmyfpm.dll - Infected Win32.Trojan-PSW.OnLineGames.af
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\System36.jup - Suspected MalwareDetector:Win32.Generic.PSW.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\System6.ins - Infected Win32.Trojan-PSW.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host2.exe - Infected Win32.Trojan-PSW.OnLineGames.b
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\SysWin64.Sys - Infected Win32.Trojan-PSW.QQPass.a
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\1.exe - Infected Generic.Malware.128543.5e9
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host8.exe - Infected MalwareDetector:Trojan-Downloader.Agent.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\qdshm.dll - Infected Trojan-PSW.OnLineGames.ap
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\addrgjhelp.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\addrz_thelp.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\addrmshelp.dll - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host9.exe - Suspected Trojan-PSW.Small.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\host4.exe - Suspected MalwareDetector:Generic.PSW.3

18 Files scanned
11 Infected files found
7 Suspected files found
0 Files cured
11 Files deleted

平淡

金山11个

IllusionWing

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.3.2
HC0.rlb = 2.9.1
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 C:\Users\干孟泽\Downloads\1.exe>>DoSSSetup.dll 检测到 Adware.Dso
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\addrgjhelp.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\addrmshelp.dll 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\addrz_thelp.dll 检测到 Generic.nFile
[扫描] [捆绑检测] 在 C:\Users\干孟泽\Downloads\host2.exe//UPX 检测到 Generic.Binder
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host3.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host4.exe 检测到 Packed.Generic.UPack
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host6.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host7.exe 检测到 Packed.Generic.Modified
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host8.exe 检测到 Packed.Unknown.2431
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\host9.exe 检测到 Packed.Generic.NSAnti.Possible
[扫描] [Level 2] 在 C:\Users\干孟泽\Downloads\kvdxema.dll 检测到 Trojan.Roast.Hidden
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\qdshm.dll 检测到 Generic.nFile
[扫描] [Level 2] 在 C:\Users\干孟泽\Downloads\rsmyfpm.dll 检测到 Trojan.Roast.Hidden
[扫描] [变形壳检测] 在 C:\Users\干孟泽\Downloads\rsmyfsp.exe 检测到 Packed.Generic.UPack
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\System36.jup 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\System6.ins 检测到 Generic.nFile
[扫描] [nFile Detect 2] 在 C:\Users\干孟泽\Downloads\SysWin64.Sys 检测到 Generic.nFile
检测到了 15 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:04:0961，共扫描的文件数量：25，共扫描到的威胁数量：18，威胁率：72%，扫描速率： 5.04 文件/秒，扫描速度： 190.08 千字节/秒，共扫描了 942.99 千字节。