16

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GamesOnline.j
病毒： Trojan.PSW.Win32.XYOnline.ui
病毒： Trojan.PSW.Win32.SunOnline.iy
病毒： Trojan.PSW.Win32.SunOnline.in
病毒： Trojan.PSW.Win32.GameOnline.arq
病毒： Win32.Logogo.o           

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.22.31

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 1081
Paranoia Database - 50126
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\DbgHlp32.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\kawdfaz.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MsPrint32D.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\rarjetl.exe - Infected MALWARE.925.3CAA - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\WinForm.exE - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\wsmseax.exe - Infected MALWARE.B07.43F5 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\11SvTh.exe - Infected TROJAN-PSW.GAME.59 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\13SvTh.exe - Infected TROJAN-DOWNLOADER.JS.PSYME.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\avwghst.exe - Infected MALWARE.878.3FF6 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\avzxjst.exe - Infected MALWARE.E5A.3F05 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\TxHMoU.Exe - Infected WIN32.TROJAN-DOWNLOADER.JS.PSYME.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\FSEc.COM - Infected TROJAN-DOWNLOADER.JS.PSYME.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\MicroSoft.vbs - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\microsofts.vbs - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\svchost.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\ntldr.exe - Infected TROJAN-DOWNLOADER.JS.PSYME.1 - Deleted

16 Files scanned
9 Infected files found
5 Suspected files found
0 Files disinfected
9 Files deleted

曲中求

咖啡10，NOD 12

Graybird

Starting the file scan:

Begin scan in 'E:\16g.rar'
E:\16g.rar
  [0] Archive type: RAR
  --> DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpw
  --> kawdfaz.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
  --> MsPrint32D.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpu
  --> rarjetl.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jal
  --> WinForm.exE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpt
  --> wsmseax.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kas
  --> 11SvTh.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyg.7
  --> avwghst.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jpc
  --> avzxjst.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.24932
  --> TxHMoU.Exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> FSEc.com
      [DETECTION] Contains detection pattern of the HTML script virus HTML/IFrame.gcc
  --> svchost.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ajo
  --> ntldr.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [WARNING]   The file was ignored!


End of the scan: 2007年12月14日  11:20
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
     17 Files were scanned
     13 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

gho

C:\Documents and Settings\gho\桌面\怀疑病毒\DbgHlp32.exe        PWS-OnlineGames.a (Trojan)
2007-12-14        11:19:31        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\kawdfaz.exe        PWS-OnlineGames.i (Trojan)
2007-12-14        11:19:31        Not scanned  (scan timed out)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\kawdfaz.exe         (Virus)
2007-12-14        11:19:34        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\MsPrint32D.exe        New Malware.aj (Trojan)
2007-12-14        11:19:34        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\rarjetl.exe        PWS-OnlineGames.q.dll (Trojan)
2007-12-14        11:19:34        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\WinForm.exE        PWS-OnlineGames.a (Trojan)
2007-12-14        11:19:34        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\wsmseax.exe        New Malware.n (Trojan)
2007-12-14        11:19:35        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\11SvTh.exe        New Malware.aj (Trojan)
2007-12-14        11:19:41        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\avwghst.exe        PWS-OnlineGames.i (Trojan)
2007-12-14        11:19:41        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\avzxjst.exe        New Malware.n (Trojan)
2007-12-14        11:19:42        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\TxHMoU.Exe        W32/Gexin.a (Virus)
2007-12-14        11:19:42        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\svchost.exe        New Malware.n (Trojan)
2007-12-14        11:19:42        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\桌面\怀疑病毒\ntldr.exe        New Malware.n (Trojan)

gho

才13个，剩下的3个文件到哪里去了

sam.to

Home / Scan for Virus
Kaspersky Virus Scanner


Scanned file:   170339.rar - Infected
170339.rar/DbgHlp32.exe - infected by Trojan-PSW.Win32.OnLineGames.isb
170339.rar/kawdfaz.exe - infected by Trojan-PSW.Win32.OnLineGames.kix
170339.rar/MsPrint32D.exe - infected by Trojan-PSW.Win32.OnLineGames.isb
170339.rar/rarjetl.exe - infected by Backdoor.Win32.PcClient.ie
170339.rar/WinForm.exE - infected by Trojan-PSW.Win32.OnLineGames.isb
170339.rar/wsmseax.exe - infected by Trojan-PSW.Win32.OnLineGames.kbj
170339.rar/11SvTh.exe - infected by Trojan-Clicker.HTML.IFrame.gc
170339.rar/13SvTh.exe/WISE0000.BIN - OK
170339.rar/13SvTh.exe/WISE0001.BIN - OK
170339.rar/13SvTh.exe/WISE0002.BIN - OK
170339.rar/13SvTh.exe/WISE0003.BIN - OK
170339.rar/13SvTh.exe/WISE0004.BIN - OK
170339.rar/13SvTh.exe/WISE0005.BIN - infected by not-a-virus:AdWare.Win32.BHO.oe
170339.rar/13SvTh.exe/WISE0006.BIN - infected by not-a-virus:AdWare.Win32.BHO.oe
170339.rar/13SvTh.exe/WISE0007.BIN - infected by not-a-virus:AdWare.Win32.BHO.oe
170339.rar/avwghst.exe - infected by Trojan-PSW.Win32.OnLineGames.jpc
170339.rar/avzxjst.exe - infected by Trojan-PSW.Win32.OnLineGames.iys
170339.rar/TxHMoU.Exe - infected by Virus.Win32.AutoRun.akt
170339.rar/FSEc.COM - infected by Trojan-Clicker.HTML.IFrame.gc
170339.rar/MicroSoft.vbs - OK
170339.rar/microsofts.vbs - OK
170339.rar/svchost.exe - infected by Trojan-Downloader.Win32.Agent.fzc
170339.rar/ntldr.exe - infected by Trojan-Clicker.HTML.IFrame.gc

库洛洛

The file 'microsofts.vbs' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file 'MicroSoft.vbs' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

The file '13SvTh.exe' has been determined to be 'DAMAGED FILE (MALWARE)'. In particular this means that this file is damaged and not working properly. Nevertheless we were able to determine that it contains malicious code fragments.

sam.to

Hello,

13SvTh(1).exe_, 13SvTh(2).exe_, 13SvTh.exe_, 13SvTh.exe_ - not-a-virus:AdWare.Win32.BHO.oe

These files are Advertizing Tools, they are detected by
extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

MicroSoft(1).vbs_, MicroSoft(2).vbs_, MicroSoft.vbs_, microsofts(1).vbs_, microsofts(2).vbs_, microsofts.vbs_, MicroSoft.vbs_, microsofts.vbs_

No malicious code were found in these files.

Please quote all when answering.