36个

promised

mofunzone

全灭

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\��.rar'
C:\Users\morgan\Documents\
  ��.rar
    [0] Archive type: RAR
    --> 7793EF25.DLL
        [DETECTION] Is the Trojan horse TR/Autorun.CA
        [WARNING]   Infected files in archives cannot be repaired!
      --> DCA57A55.EXE
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Contains suspicious code HEUR/Malware
            [WARNING]   Infected files in archives cannot be repaired!
      --> AVPSrv.exE
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> GenProtect.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> Kvsc3.exE
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> mh0618.exe
        [1] Archive type: RSRC
        --> Object
    --> mppds.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
        [WARNING]   Infected files in archives cannot be repaired!
      --> cmdbcs.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> DbgHlp32.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpv
              [WARNING]   Infected files in archives cannot be repaired!
      --> dh0616.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> MsIMMs32.exE
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> MsPrint32D.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> 608769M.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> LotusHlp.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> msccrt.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> upxdnd.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
      --> huaxia.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
      --> 608769L.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/Spy.Gen
              [WARNING]   Infected files in archives cannot be repaired!
    --> msccrt.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Kvsc3.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> AVPSrv.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> mppds.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
        [WARNING]   Infected files in archives cannot be repaired!
    --> cmdbcs.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> NVDispDrv.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> MsPrint32D.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> DbgHlp32.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpv
        [WARNING]   Infected files in archives cannot be repaired!
    --> GenProtect.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
      --> LYLOADER.EXE
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
          --> Object
      --> LYMANGR.DLL
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
            [WARNING]   Infected files in archives cannot be repaired!
      --> MSDEG32.DLL
        [1] Archive type: Runtime Packed
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
            [WARNING]   Infected files in archives cannot be repaired!
    --> LotusHlp.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 608769MM.DLL
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> MsIMMs32.dll
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 608769WL.DLL
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> PTSShell.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年12月7日  19:19
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     37 Files were scanned
     22 viruses and/or unwanted programs were found
     14 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     15 Files not concerned
     17 Archives were scanned
     34 Warnings
      0 Notes

jimmyleo

D:\Download\VirusScan\7793EF25.DLL        infected: Win32.Worm.Winko.I
D:\Download\VirusScan\DCA57A55.EXE        infected: Win32.Worm.Winko.I
D:\Download\VirusScan\AVPSrv.exE        infected: Generic.PWS.Games.4.7050B672
D:\Download\VirusScan\GenProtect.exe        infected: Generic.PWS.Games.4.45224693
D:\Download\VirusScan\Kvsc3.exE        infected: Generic.PWS.Games.4.5CF64E28
D:\Download\VirusScan\mh0618.exe        infected: Dropped:Generic.PWS.Games.3.A295F56A
D:\Download\VirusScan\mppds.exe        infected: Generic.PWS.Games.4.BEE914AB
D:\Download\VirusScan\cmdbcs.exe        infected: Generic.PWS.Games.4.583D5093
D:\Download\VirusScan\DbgHlp32.exe        infected: Generic.PWS.Games.4.8A798B2B
D:\Download\VirusScan\dh0616.exe        infected: Generic.PWS.Games.4.72BA9F3E
D:\Download\VirusScan\MsIMMs32.exE        infected: Generic.PWS.Games.4.17F6B0CF
D:\Download\VirusScan\MsPrint32D.exe        infected: Generic.PWS.Games.4.33704B05
D:\Download\VirusScan\608769M.exe        infected: Trojan.PWS.Lmir.ULP
D:\Download\VirusScan\LotusHlp.exe        infected: Generic.PWS.Games.4.153BF105
D:\Download\VirusScan\msccrt.exe        infected: Generic.PWS.Games.4.C12FDAF6
D:\Download\VirusScan\upxdnd.exe        infected: Generic.PWS.Games.4.F1C18D80
D:\Download\VirusScan\huaxia.exe        infected: Generic.PWS.Games.4.27AD50BF
D:\Download\VirusScan\608769L.exe        infected: DeepScan:Generic.PWS.Games.4.BDBB87C9
D:\Download\VirusScan\msccrt.dll        infected: DeepScan:Generic.PWS.Games.1.4F7FAC14
D:\Download\VirusScan\upxdnd.dll        infected: DeepScan:Generic.PWS.Games.4.F8A6C359
D:\Download\VirusScan\Kvsc3.dll        infected: DeepScan:Generic.PWS.Games.4.D472E745
D:\Download\VirusScan\AVPSrv.dll        infected: DeepScan:Generic.PWS.Games.4.6A6AA1EA
D:\Download\VirusScan\mppds.dll        infected: DeepScan:Generic.PWS.Games.4.36D78BF0
D:\Download\VirusScan\cmdbcs.dll        infected: DeepScan:Generic.PWS.Games.4.00A6AE03
D:\Download\VirusScan\NVDispDrv.dll        infected: DeepScan:Generic.PWS.Games.1.4742F9BA
D:\Download\VirusScan\MsPrint32D.dll        infected: DeepScan:Generic.PWS.Games.4.C468E374
D:\Download\VirusScan\DbgHlp32.dll        infected: DeepScan:Generic.PWS.Games.1.6E1BA3D2
D:\Download\VirusScan\LYLOADER.EXE        infected: Dropped:Generic.PWS.Games.3.A295F56A
D:\Download\VirusScan\MSDEG32.DLL        infected: Generic.PWS.Games.3.A295F56A
D:\Download\VirusScan\LotusHlp.dll        infected: DeepScan:Generic.PWS.Games.1.CA976AC3
D:\Download\VirusScan\608769MM.DLL        infected: Trojan.PWS.OnlineGames.NPH
D:\Download\VirusScan\MsIMMs32.dll        infected: DeepScan:Generic.PWS.Games.1.E38C6C6D
D:\Download\VirusScan\608769WL.DLL        infected: Trojan.PWS.OnlineGames.NQK
D:\Download\VirusScan\PTSShell.dll        infected: DeepScan:Generic.PWS.Games.1.D8851F6D

34

jimmyleo

D:\Download\VirusScan\7793EF25.DLL - Signature 'Virus.Win32.AutoRun.ic' found
D:\Download\VirusScan\DCA57A55.EXE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\AVPSrv.exE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\GenProtect.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
D:\Download\VirusScan\Kvsc3.exE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\mh0618.exe - Signature 'Virus.Win32.OnLineGames.SR' found
D:\Download\VirusScan\mppds.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\cmdbcs.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\DbgHlp32.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\dh0616.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\MsIMMs32.exE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\MsPrint32D.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\608769M.exe - Signature 'Trojan-PWS.Win32.WOW.vd' found
D:\Download\VirusScan\LotusHlp.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
D:\Download\VirusScan\msccrt.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\upxdnd.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\huaxia.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
D:\Download\VirusScan\608769L.exe - Signature 'Trojan-PWS.Win32.OnLineGames.hfr' found
D:\Download\VirusScan\msccrt.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\upxdnd.dll - Signature 'Trojan-PWS.Win32.OnLineGames.isb' found
D:\Download\VirusScan\Kvsc3.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\AVPSrv.dll - Signature 'Trojan-PWS.Win32.OnLineGames.isb' found
D:\Download\VirusScan\mppds.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\cmdbcs.dll
D:\Download\VirusScan\NVDispDrv.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\MsPrint32D.dll - Signature 'Trojan-PWS.Win32.OnLineGames.isb' found
D:\Download\VirusScan\DbgHlp32.dll - Signature 'Trojan-PWS.Win32.OnLineGames.isb' found
D:\Download\VirusScan\GenProtect.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\Download\VirusScan\LYLOADER.EXE - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\Download\VirusScan\LYMANGR.DLL - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\Download\VirusScan\MSDEG32.DLL - Signature 'Generic.PWS.Games.3' found
D:\Download\VirusScan\LotusHlp.dll - Signature 'Virus.Win32.OnLineGames.BHW' found
D:\Download\VirusScan\608769MM.DLL - Signature 'Trojan-PWS.Win32.OnLineGames.jcr' found
D:\Download\VirusScan\MsIMMs32.dll - Signature 'Trojan-PWS.Win32.OnLineGames.isb' found
D:\Download\VirusScan\608769WL.DLL - Signature 'Trojan-PWS.Win32.OnLineGames.hiy' found
D:\Download\VirusScan\PTSShell.dll - Signature 'Virus.Win32.OnLineGames.BHW' found


35

jimmyleo

D:\Download\VirusScan\
D:\Download\VirusScan\DCA57A55.EXE : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
D:\Download\VirusScan\AVPSrv.exE : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\GenProtect.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\Kvsc3.exE : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\mh0618.exe : is suspected of Malware.Agent.108 (paranoid heuristics)
D:\Download\VirusScan\mppds.exe : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\cmdbcs.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\DbgHlp32.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\dh0616.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\MsIMMs32.exE : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\MsPrint32D.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\608769M.exe : infected MalwareScope.Trojan-PSW.Game.16
D:\Download\VirusScan\LotusHlp.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\msccrt.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\upxdnd.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\huaxia.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\Download\VirusScan\608769L.exe : infected MalwareScope.Trojan-PSW.Game.16
D:\Download\VirusScan\msccrt.dll : is suspected of MalwareScope.Trojan-PSW.Game.5 (paranoid heuristics)
D:\Download\VirusScan\upxdnd.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\Kvsc3.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\AVPSrv.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\mppds.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\cmdbcs.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\NVDispDrv.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\MsPrint32D.dll : infected MalwareScope.Trojan-PSW.Game.1
D:\Download\VirusScan\DbgHlp32.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\GenProtect.dll : infected MalwareScope.Trojan-PSW.Game.1
D:\Download\VirusScan\LYLOADER.EXE : is suspected of Trojan-PSW.Game.32 (paranoid heuristics)
D:\Download\VirusScan\LYMANGR.DLL : is suspected of Trojan-PSW.Game.38 (paranoid heuristics)
D:\Download\VirusScan\MSDEG32.DLL : is suspected of Trojan-PSW.Game.32 (paranoid heuristics)
D:\Download\VirusScan\LotusHlp.dll : infected MalwareScope.Trojan-PSW.Game.1
D:\Download\VirusScan\608769MM.DLL : infected Trojan-PSW.Win32.OnLineGames.jcr
D:\Download\VirusScan\MsIMMs32.dll : infected MalwareScope.Trojan-PSW.Game.12
D:\Download\VirusScan\608769WL.DLL : infected Trojan-PSW.Win32.OnLineGames.iay
D:\Download\VirusScan\PTSShell.dll : infected MalwareScope.Trojan-PSW.Game.1


29

haol

mcafee found 19 threats

FBAV

MicroVita AntiSpyware 100 C
_____________________________________________
                                          
             风暴微塔反间谍
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]                  
                   http://221.10.254.214/
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\Virus\36\DCA57A55.EXE]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:12662  MD5:3e41e5d06ca4d543a4a0813daa0592f0


[C:\Documents and Settings\Administrator\桌面\Virus\36\AVPSrv.exE]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:16688  MD5:d49a7db64688d61d467b8c978d4ccd6a


[C:\Documents and Settings\Administrator\桌面\Virus\36\GenProtect.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:15399  MD5:6fe74c6c812f6a51a3f7f688dc660c4b


[C:\Documents and Settings\Administrator\桌面\Virus\36\Kvsc3.exE]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:16596  MD5:75ea60b650061f918bcf1b24d156342e


[C:\Documents and Settings\Administrator\桌面\Virus\36\mppds.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:17336  MD5:36681f76045fc92dd37496da4478cf12


[C:\Documents and Settings\Administrator\桌面\Virus\36\cmdbcs.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:17304  MD5:bd7cf5d7a0fae16bae823feac05b7ace


[C:\Documents and Settings\Administrator\桌面\Virus\36\DbgHlp32.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:17308  MD5:0da8f5d2eefc81a8bbfbac7ca28677ca


[C:\Documents and Settings\Administrator\桌面\Virus\36\dh0616.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:15956  MD5:4091bb771b264fd2d4be41dc08a2e0c9


[C:\Documents and Settings\Administrator\桌面\Virus\36\MsIMMs32.exE]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:17988  MD5:c962249be5fd482811056726f24f1509


[C:\Documents and Settings\Administrator\桌面\Virus\36\MsPrint32D.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:15672  MD5:a32bf8eb35b5ef6a22a42d24d02c7ae0


[C:\Documents and Settings\Administrator\桌面\Virus\36\608769M.exe]
                    …………发现Spy！报告: [4] [2]
文件信息:  大小:42289  MD5:423f8315457f376d735b4ecd7885f5d3


[C:\Documents and Settings\Administrator\桌面\Virus\36\LotusHlp.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:16140  MD5:84b8df033092e38b6f35bd9d7961eb99


[C:\Documents and Settings\Administrator\桌面\Virus\36\msccrt.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:16644  MD5:5113c5b0ed5cde8c6b61af5a42d3d60b


[C:\Documents and Settings\Administrator\桌面\Virus\36\upxdnd.exe]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:16148  MD5:d0c0b52a2729106177770703a0b80ded


[C:\Documents and Settings\Administrator\桌面\Virus\36\huaxia.exe]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:16192  MD5:62f89bd701f4e07797ee051a2c47d179


[C:\Documents and Settings\Administrator\桌面\Virus\36\608769L.exe]
                    …………发现Spy！报告: [4]
文件信息:  大小:52529  MD5:4ddcd734f1301ddee716d7ae074dc8e5


[C:\Documents and Settings\Administrator\桌面\Virus\36\msccrt.dll]
                    …………发现Spy！报告:[8] HOOK者
文件信息:  大小:27136  MD5:b79c27b52934cdcbf6dfd123b4fef0a9


[C:\Documents and Settings\Administrator\桌面\Virus\36\upxdnd.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:26112  MD5:f9ae355837215e9872ca1051e3a5f427


[C:\Documents and Settings\Administrator\桌面\Virus\36\Kvsc3.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:26624  MD5:e26f87caa83e5d7cf5162c9f6c4ccd06


[C:\Documents and Settings\Administrator\桌面\Virus\36\AVPSrv.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:26624  MD5:a7265b9cde8a5012f9a9d0a32e49ef1c


[C:\Documents and Settings\Administrator\桌面\Virus\36\mppds.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:28160  MD5:05f2c3021278c18bbdb9fcdcf2b3f388


[C:\Documents and Settings\Administrator\桌面\Virus\36\cmdbcs.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:27648  MD5:7d78ba54c1306ad875bd0213bb2cb005


[C:\Documents and Settings\Administrator\桌面\Virus\36\NVDispDrv.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:25088  MD5:37f11c192d4d1b35a6f579c0403ccf15


[C:\Documents and Settings\Administrator\桌面\Virus\36\MsPrint32D.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:25088  MD5:6b684cea97e20d69695711124355a918


[C:\Documents and Settings\Administrator\桌面\Virus\36\DbgHlp32.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:28160  MD5:95a2b3a4c69fb05a7afb9b6e7404f49a


[C:\Documents and Settings\Administrator\桌面\Virus\36\LYLOADER.EXE]
                    …………发现Spy！报告:[1] Win32.Unknow
文件信息:  大小:12028  MD5:0442eaa30f4914e44fd00c2b82801184


[C:\Documents and Settings\Administrator\桌面\Virus\36\LYMANGR.DLL]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:3566  MD5:c66e4e86a98b09e4d9dfe3a43ef76f88


[C:\Documents and Settings\Administrator\桌面\Virus\36\MSDEG32.DLL]
                    …………发现Spy！报告:[1] Win32.F/S.ByDwing
文件信息:  大小:6014  MD5:ce7cc361ba9a44b40363d0725656be46


[C:\Documents and Settings\Administrator\桌面\Virus\36\LotusHlp.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:25088  MD5:15359ce661ab8ea7c4d00613d37c1fbc


[C:\Documents and Settings\Administrator\桌面\Virus\36\608769MM.DLL]
                    …………发现Spy！报告: [4]
文件信息:  大小:47409  MD5:922432848a0b921ff265c0962dff0854


[C:\Documents and Settings\Administrator\桌面\Virus\36\MsIMMs32.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:28672  MD5:b74803ae930be0f7d0ad400517c0f875


[C:\Documents and Settings\Administrator\桌面\Virus\36\PTSShell.dll]
                    …………发现Spy！报告:[1] Win32.Badsoft.RX[8] HOOK者
文件信息:  大小:25088  MD5:d0c0a4d6e332dd73a05771ba40949cd2


文件数:36   病毒数:32  比重:0.8888888888889
OK  扫描完毕！

  ***日志解释
[4] 集中有害分析引擎
[3] 全局系统判断引擎   
[2] 文件特征码引擎
[1] 文件启发式引擎

[ 本帖最后由 FBAV 于 2007-12-8 11:26 编辑 ]

promised

C:\ABC\样本\608769L.exe
        C:\ABC\样本\608769L.exe\FILE:0000
>>> File "C:\ABC\样本\608769L.exe\FILE:0000" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\608769L.exe\FILE:0000
>>> File "C:\ABC\样本\608769L.exe\FILE:0000" has been identified as suspicious 'Sus/Malware-A'.
>>> Virus 'Mal/Behav-053' found in file C:\ABC\样本\608769L.exe
        C:\ABC\样本\608769M.exe
        C:\ABC\样本\608769M.exe\FILE:0000
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\样本\608769M.exe\FILE:0000
        C:\ABC\样本\608769M.exe\FILE:0000
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\样本\608769M.exe\FILE:0000
>>> Virus 'Mal/Behav-031' found in file C:\ABC\样本\608769M.exe
        C:\ABC\样本\608769MM.DLL
>>> Virus 'Mal/Heuri-E' found in file C:\ABC\样本\608769MM.DLL
>>> Virus 'Mal/Behav-010' found in file C:\ABC\样本\608769MM.DLL
        C:\ABC\样本\608769WL.DLL
>>> File "C:\ABC\样本\608769WL.DLL" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\7793EF25.DLL
>>> Virus 'Mal/Heuri-E' found in file C:\ABC\样本\7793EF25.DLL
>>> Virus 'Mal/Behav-010' found in file C:\ABC\样本\7793EF25.DLL
        C:\ABC\样本\AVPSrv.dll
>>> File "C:\ABC\样本\AVPSrv.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本\AVPSrv.exE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\AVPSrv.exE
        C:\ABC\样本\cmdbcs.dll
>>> File "C:\ABC\样本\cmdbcs.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本\cmdbcs.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\cmdbcs.exe
        C:\ABC\样本\DbgHlp32.dll
>>> File "C:\ABC\样本\DbgHlp32.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本\DbgHlp32.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\DbgHlp32.exe
        C:\ABC\样本\DCA57A55.EXE
        C:\ABC\样本\DCA57A55.EXE\FILE:0000
>>> Virus 'Mal/Behav-010' found in file C:\ABC\样本\DCA57A55.EXE\FILE:0000
>>> Virus 'Mal/Behav-151' found in file C:\ABC\样本\DCA57A55.EXE
        C:\ABC\样本\dh0616.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\dh0616.exe
        C:\ABC\样本\GenProtect.dll
>>> File "C:\ABC\样本\GenProtect.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\GenProtect.exe
>>> Virus 'Mal/EncPk-BW' found in file C:\ABC\样本\GenProtect.exe
        C:\ABC\样本\huaxia.exe
>>> Virus 'Mal/EncPk-BW' found in file C:\ABC\样本\huaxia.exe
        C:\ABC\样本\Kvsc3.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本\Kvsc3.dll
        C:\ABC\样本\Kvsc3.exE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\Kvsc3.exE
        C:\ABC\样本\LotusHlp.dll
>>> File "C:\ABC\样本\LotusHlp.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\LotusHlp.exe
>>> Virus 'Mal/EncPk-BW' found in file C:\ABC\样本\LotusHlp.exe
        C:\ABC\样本\LYLOADER.EXE
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\LYLOADER.EXE
        C:\ABC\样本\LYMANGR.DLL
>>> Virus 'Mal/EncPk-BW' found in file C:\ABC\样本\LYMANGR.DLL
        C:\ABC\样本\mh0618.exe
        C:\ABC\样本\mh0618.exe\FILE:0000
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\mh0618.exe\FILE:0000
>>> Virus 'Mal/PWS-N' found in file C:\ABC\样本\mh0618.exe
        C:\ABC\样本\mppds.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本\mppds.dll
        C:\ABC\样本\mppds.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\mppds.exe
        C:\ABC\样本\msccrt.dll
>>> Virus 'Mal/Gampass-A' found in file C:\ABC\样本\msccrt.dll
        C:\ABC\样本\msccrt.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\msccrt.exe
        C:\ABC\样本\MSDEG32.DLL
>>> Virus 'Mal/EncPk-BW' found in file C:\ABC\样本\MSDEG32.DLL
        C:\ABC\样本\MsIMMs32.dll
>>> Virus 'Mal/WOWPWS-A' found in file C:\ABC\样本\MsIMMs32.dll
        C:\ABC\样本\MsIMMs32.exE
>>> Virus 'Mal/Behav-156' found in file C:\ABC\样本\MsIMMs32.exE
        C:\ABC\样本\MsPrint32D.dll
>>> File "C:\ABC\样本\MsPrint32D.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\MsPrint32D.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\MsPrint32D.exe
        C:\ABC\样本\NVDispDrv.dll
>>> File "C:\ABC\样本\NVDispDrv.dll" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\样本\PTSShell.dll
>>> File "C:\ABC\样本\PTSShell.dll" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\样本\upxdnd.dll
>>> File "C:\ABC\样本\upxdnd.dll" has been identified as suspicious 'Sus/Zhengtu-A'.
        C:\ABC\样本\upxdnd.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\样本\upxdnd.exe

啊弥陀佛

木马名称:Trojan-PSW.Win32.Lmir.com
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\608769M.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.yod
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\608769L.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.zgo
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\608769WL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\AVPSRV.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\CMDBCS.EXE
木马程序生成以下文件:
1) C:\WINDOWS\CMDBCS.EXE
2) C:\WINDOWS\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\CMDBCS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DBGHLP32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DBGHLP32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DCA57A55.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\792405C6.EXE
2) C:\WINDOWS\SYSTEM32\1707E7B.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\7793EF25.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\DH0616.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NVDISPDRV.EXE
2) C:\WINDOWS\SYSTEM32\NVDISPDRV.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\GENPROTECT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\GENPROTECT.EXE
2) C:\WINDOWS\SYSTEM32\GENPROTECT.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\HUAXIA.EXE
木马程序生成以下文件:
1) C:\WINDOWS\PTSSHELL.EXE
2) C:\WINDOWS\SYSTEM32\PTSSHELL.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\KVSC3.EXE
木马程序生成以下文件:
1) C:\WINDOWS\KVSC3.EXE
2) C:\WINDOWS\SYSTEM32\KVSC3.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\GENPROTECT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\KVSC3.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\LOTUSHLP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\LOTUSHLP.EXE
2) C:\WINDOWS\SYSTEM32\LOTUSHLP.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\LOTUSHLP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MPPDS.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MPPDS.EXE
2) C:\WINDOWS\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSCCRT.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSCCRT.EXE
2) C:\WINDOWS\SYSTEM32\MSCCRT.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSDEG32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSCCRT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MPPDS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSIMMS32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSIMMS32.EXE
2) C:\WINDOWS\SYSTEM32\MSIMMS32.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSIMMS32.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\PTSSHELL.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\NVDISPDRV.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSPRINT32D.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSPRINT32D.EXE
2) C:\WINDOWS\SYSTEM32\MSPRINT32D.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\MSPRINT32D.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\UPXDND.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\UPXDND.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

Graybird

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> 7793EF25.DLL
      [DETECTION] Is the Trojan horse TR/Autorun.CA
  --> DCA57A55.EXE
      [DETECTION] Contains suspicious code HEUR/Malware
  --> AVPSrv.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> GenProtect.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> Kvsc3.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> mh0618.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> mppds.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpv
  --> dh0616.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> MsIMMs32.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> MsPrint32D.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 608769M.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> LotusHlp.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> msccrt.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> huaxia.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 608769L.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> msccrt.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> upxdnd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> AVPSrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> mppds.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.iqw
  --> cmdbcs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> NVDispDrv.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> MsPrint32D.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> DbgHlp32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpv
  --> GenProtect.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> LotusHlp.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 608769MM.DLL
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> MsIMMs32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 608769WL.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> PTSShell.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!


End of the scan: 2007年12月8日  11:36
Used time: 00:32 min

The scan has been done completely.

      0 Scanning directories
     37 Files were scanned
     29 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes