16

liunanyuan

...........................

HC303

毒霸12个，瑞星9个，红伞12+1.

HC303

红伞没报的已上报。

HC303

Filename Result
MicroSoft.vbs  CLEAN

The file 'MicroSoft.vbs' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/DbgHlp32.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kix        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/kawdfaz.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/MsPrint32D.exe
detected: Trojan program Backdoor.Win32.PcClient.ie        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/rarjetl.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/WinForm.exE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kbj        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/wsmseax.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kho        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/11SvTh.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.jpc        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/avwghst.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.iys        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/avzxjst.exe//UPack
detected: virus Virus.Win32.AutoRun.akt        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/TxHMoU.Exe//PE_Patch.UPX//UPX
detected: virus Virus.Win32.AutoRun.akk        File: C:\Documents and Settings\Owner\×ÀÃæ\16g.rar/ntldr.exe//UPack
11

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\16g.rar'
C:\Documents and Settings\Administrator\桌面\16g.rar
  [0] Archive type: RAR
  --> DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> kawdfaz.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
  --> MsPrint32D.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> rarjetl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jal
  --> WinForm.exE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> wsmseax.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kas
  --> 11SvTh.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyg.7
  --> avwghst.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpc
  --> avzxjst.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.24932
  --> TxHMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> FSEc.com
      [DETECTION] Contains suspicious code HEUR/Exploit.HTML
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
  --> ntldr.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [INFO]      The file was deleted!


End of the scan: 星期四 2007年12月13日  09:23
Used time: 00:07 min

The scan has been done completely.

      0 Scanning directories
     18 Files were scanned
     12 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:

啊弥陀佛

木马名称:Backdoor.Win32.PcClient.bel
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\RARJETL.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OLGames.yx
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\WSMSEAX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.uv
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\AVWGHST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.zio
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\AVZXJST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.QQShou.bnm
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\SVCHOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\DBGHLP32.EXE
木马程序生成以下文件:
1) C:\WINDOWS\DBGHLP32.EXE
2) C:\WINDOWS\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\KAWDFAZ.EXE
1) C:\DFD1608703.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\NTLDR.EXE
木马程序生成以下文件:
1) C:\WINDOWS\FONTS\SYSTEM\ATI2EVXX.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\WINFORM.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WINFORM.EXE
2) C:\WINDOWS\SYSTEM32\WINFORM.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\TXHMOU.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\TXHMOU.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16G\MSPRINT32D.EXE
木马程序生成以下文件:
1) C:\WINDOWS\MSPRINT32D.EXE
2) C:\WINDOWS\SYSTEM32\MSPRINT32D.DLL
是否删除木马程序及其衍生物?

ＭＳ还有１６位文件

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GamesOnline.j
病毒： Trojan.PSW.Win32.QQSG.bd
病毒： Trojan.PSW.Win32.XYOnline.ui
病毒： Trojan.PSW.Win32.XYOnline.wf
病毒： Trojan.PSW.Win32.SunOnline.iy
病毒： Trojan.PSW.Win32.QQPass.yzl
病毒： Trojan.PSW.Win32.SunOnline.in
病毒： Trojan.PSW.Win32.GameOnline.arq
病毒： Win32.Logogo.o           

用户来源：互联网

软件版本：20.22.22

残缺的唯美

G:\Users\Administrator\Desktop\16g.rar » RAR » DbgHlp32.exe - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » kawdfaz.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » MsPrint32D.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » rarjetl.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » WinForm.exE - Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » wsmseax.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » 11SvTh.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » avwghst.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » avzxjst.exe - Win32/PSW.OnLineGames.FDY trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » TxHMoU.Exe - a variant of Win32/AutoRun.K worm
G:\Users\Administrator\Desktop\16g.rar » RAR » svchost.exe - probably a variant of Win32/PSW.QQShou trojan
G:\Users\Administrator\Desktop\16g.rar » RAR » ntldr.exe - Win32/Mypis.Q virus
12

挪威的冬天

信息        2007-12-13  12:20:30        您此次查毒共查出12个病毒以及危险代码                       
信息        2007-12-13  12:20:30        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件21个                       
信息        2007-12-13  12:20:30        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\ntldr.exe        Win32.Troj.AutoRuns.ak.151552        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\svchost.exe        Win32.Packed.MaskPE        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\TxHMoU.Exe        Win32.TrojDownloader.Agent.90112        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\avzxjst.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\avwghst.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\11SvTh.exe        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\wsmseax.exe        Win32.Troj.OnLineGamesT.gp.15597        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\WinForm.exE        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\rarjetl.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\MsPrint32D.exe        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\kawdfaz.exe        Win32.Troj.AgentT.fm.14452        跳过，未处理       
病毒        2007-12-13  12:20:30        C:\Documents and Settings\Norways Winter\桌面\16g.rar\DbgHlp32.exe        Win32.Troj.OnLineGamesT.gr.2637        跳过，未处理