包

tonger2003

dericyeoh

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.irq        File: F:\Virus\×ÀÃæ.rar/5.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.iqo        File: F:\Virus\×ÀÃæ.rar/6.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ivy        File: F:\Virus\×ÀÃæ.rar/7.exe//UPack
deleted: virus Heur.Invader (modification)        File: F:\Virus\×ÀÃæ.rar/9.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.iuw        File: F:\Virus\×ÀÃæ.rar/10.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.iux        File: F:\Virus\×ÀÃæ.rar/11.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.iub        File: F:\Virus\×ÀÃæ.rar/12.exe//PE_Patch//UPack
deleted: virus Heur.Trojan.Generic (modification)        File: F:\Virus\×ÀÃæ.rar/1.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ikj        File: F:\Virus\×ÀÃæ.rar/2.exe//UPack
deleted: virus Heur.Trojan.Generic (modification)        File: F:\Virus\×ÀÃæ.rar/3.exe//UPack
deleted: virus Heur.Trojan.Generic (modification)        File: F:\Virus\×ÀÃæ.rar/4.exe//UPack

漏1个

nosferatu

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面.rar'
C:\Documents and Settings\Administrator\桌面\桌面.rar
  [0] Archive type: RAR
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.24416.1
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.23380
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!


End of the scan: 星期三 2007年11月28日  00:18
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     14 Files were scanned
     11 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted

duandxxi

mcafee 2008 3in1 报了

scottxzt

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\1.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\OKMHAZY.DLL
2) C:\WINDOWS\SYSTEM32\OKMHAAZ.EXE
是否删除木马程序及其衍生物?程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\10.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\AVWGGMN.DLL
2) C:\WINDOWS\SYSTEM32\AVWGGST.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\11.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KVDXSJMA.DLL
2) C:\WINDOWS\SYSTEM32\KVDXSJIS.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\3.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KVDXJMA.DLL
2) C:\WINDOWS\SYSTEM32\KVDXJIS.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\SIDJEZY.DLL
2) C:\WINDOWS\SYSTEM32\SIDJEAZ.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\9.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS\SYSTEM32\LYLOADER.EXE
3) C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\LYMANGR.DLL
4) C:\WINDOWS\SYSTEM32\LYMANGR.DLL
5) C:\DOCUMENTS AND SETTINGS\DELL\LOCAL SETTINGS\TEMP\MSDEG32.DLL
6) C:\WINDOWS\SYSTEM32\MSDEG32.DLL

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\8.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KAQHKZY.DLL
2) C:\WINDOWS\SYSTEM32\KAQHKAZ.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KAWDFZY.DLL
2) C:\WINDOWS\SYSTEM32\IISMG.DLL
3) C:\WINDOWS\SYSTEM32\INETINFO.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\6.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RATBLPI.DLL
2) C:\WINDOWS\SYSTEM32\RATBLTL.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\5.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RSZTMPM.DLL
2) C:\WINDOWS\SYSTEM32\RSZTMSP.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\RSMYHPM.DLL
2) C:\WINDOWS\SYSTEM32\RSMYHSP.EXE
是否删除木马程序及其衍生物?

[ 本帖最后由 scottxzt 于 2007-11-28 01:05 编辑 ]

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\����.rar'
C:\Users\morgan\Documents\
  ����.rar
    [0] Archive type: RAR
      --> 5.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/FWDisable.24416.1
              [WARNING]   Infected files in archives cannot be repaired!
      --> 6.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iso
              [WARNING]   Infected files in archives cannot be repaired!
      --> 7.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: OVL
          --> Object
            [3] Archive type: OVL
            --> Object
                [DETECTION] Contains suspicious code HEUR/Malware
                [WARNING]   Infected files in archives cannot be repaired!
      --> 8.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> 9.exe
        [1] Archive type: RSRC
        --> Object
      --> 10.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iuw
              [WARNING]   Infected files in archives cannot be repaired!
      --> 11.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iux
              [WARNING]   Infected files in archives cannot be repaired!
      --> 12.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      --> 1.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> 2.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/FWDisable.23380
              [WARNING]   Infected files in archives cannot be repaired!
      --> 3.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> 4.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      [WARNING]   The file was ignored!


End of the scan: 2007年11月27日  11:42
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
      5 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
     14 Archives were scanned
     11 Warnings
      0 Notes

Graybird

Starting the file scan:

Begin scan in 'E:\桌面.rar'
E:\桌面.rar
  [0] Archive type: RAR
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.24416.1
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iso
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ijx.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iuw
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.iux
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.23380
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月28日  06:27
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     13 Files were scanned
     12 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

will

"Win32:Delf-FVM [Trj]" has been found in "10.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "11.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BBH [Trj]" has been found in "12.exe\[Upack]\[Embedded#5060]\[Upack]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "2.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "3.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "4.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "6.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "7.exe\[Upack]\[Embedded#2784]" file.  
"Win32:OnLineGames-BGD [Trj]" has been found in "8.exe\[Upack]\[Embedded#MUSIC]" file.  
"Win32:OnLineGames-BIV [Trj]" has been found in "9.exe\[Embedded#0c80]\[Upack]\[Embedded#5158]\[Upack]" file.  
"Win32:OnLineGames-SR [Trj]" has been found in "9.exe" file.

xzy1982

小a报
Win32:OnLineGames-BGD [Trj]

欠妳緈諨

D:\病毒测试\未解压样本\桌面.rar » RAR » 5.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 6.exe - Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 7.exe - probably unknown NewHeur_PE virus
D:\病毒测试\未解压样本\桌面.rar » RAR » 8.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 9.exe - a variant of Win32/PSW.Agent.NEC trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 10.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 11.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 12.exe - Win32/PSW.OnLineGames.NIT trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 1.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 2.exe - Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\桌面.rar » RAR » 4.exe - a variant of Win32/PSW.OnLineGames.FDY trojan