一把

purplegold

瑞星发现可疑.....
分明就是病毒

Graybird

Starting the file scan:

Begin scan in 'E:\Program Files.rar'
E:\Program Files.rar
  [0] Archive type: RAR
  --> 6.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NBN.1
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 26.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 28.exe
      [DETECTION] Is the Trojan horse TR/WuDisable.B
  --> 1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.mzs.1
      [WARNING]   The file was ignored!


End of the scan: 2008年1月8日  15:58
Used time: 00:21 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
     10 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

觅寒枚

卡巴9个。。。

will

"Win32:Delf-CKB [Wrm]"                           1.exe
"Win32:Agent-CNF [Trj]"                           15.exe
"Win32:OnLineGames-BGD [Trj]"           28.exe
"Win32:OnLineGames-BCD [Trj]"           3.exe
"Win32:OnLineGames-BQS [Trj]"           5.exe
"Win32:Delf-FZG [Trj]"                                 6.exe

kkgh

2008-1-8 16:39:52        Program_Files.rar        C:\Documents and Settings\zh\桌面                3
        9.exe                MULDROP.Trojan
        15.exe                MULDROP.Trojan
        18.exe                Trojan.PWS.Wsgame.2674
        24.exe                MULDROP.Trojan
        26.exe                MULDROP.Trojan
        28.exe                Trojan.PWS.Gamania.6729
        2.exe                Trojan.PWS.Wsgame.2718
        3.exe                MULDROP.Trojan
        5.exe                MULDROP.Trojan

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Worm.Win32.PaBug.gf      
病毒： Trojan.PSW.Win32.GameOL.lch
病毒： Trojan.PSW.Win32.QQHX.tvl
病毒： Trojan.PSW.Win32.GameOL.ibb
病毒： Trojan.PSW.Win32.GameOL.lct
病毒： Trojan.PSW.Win32.GameOL.lcj
病毒： Trojan.PSW.Win32.QQFO.e  
病毒： Trojan.PSW.Win32.GameOL.lcz
病毒： Trojan.PSW.Win32.GamesOnline.fr

用户来源：互联网

软件版本：20.26.10

欠妳緈諨

D:\病毒测试\未解压样本\Program Files.rar » RAR » 6.exe - probably a variant of Win32/AutoRun.Q worm
D:\病毒测试\未解压样本\Program Files.rar » RAR » 9.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 15.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 18.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 24.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 26.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 28.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 2.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\Program Files.rar » RAR » 5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan

Palkia

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\Program_Files.rar'
C:\Documents and Settings\Administrator\桌面\Program_Files.rar
  [0] Archive type: RAR
  --> 6.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 26.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 28.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 2.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!

Palkia

C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>6.exe        W32.Gammima.nkef        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>9.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV00000278$00000019.AV$        PWSteal.QQGame.yopk.dll        木马        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV000002b0$0000001a.AV$        TrojanPSW.GameOL.lch.autj.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>15.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>18.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV000002b0$0000001b.AV$        TrojanPSW.GameOL.lch.autj.dll        木马        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV000002b0$0000001d.AV$        TrojanPSW.GameOL.lch.autj.dll        木马        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV000002b0$0000001e.AV$        TrojanPSW.GameOL.lch.autj.dll        木马        还未处理
C:\Documents and Settings\All Users\Application Data\AntiVir PersonalEdition Classic\TEMP\AVGUARD_4785d6a4\AV000002c8$00000020.AV$        PWSteal.QQGame.yopk.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>24.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>26.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>28.exe        TrojanPSW.OnLineGames.lhc.mkbf        木马        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>1.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>2.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>3.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\Program_Files.rar>>5.exe        W32.Viking.k        病毒        还未处理

Graybird

The file '1.exe' has been determined to be 'MALWARE'. Our analysts discovered that the file is a Trojan. In general this kind of programs contains harmful functionality called payload. Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Crypted.

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Worm.Win32.PaBug.gf      
病毒： Trojan.PSW.Win32.GameOL.lch
病毒： Trojan.PSW.Win32.QQHX.tvl
病毒： Trojan.PSW.Win32.GameOL.ibb
病毒： Trojan.PSW.Win32.GameOL.lct
病毒： Trojan.PSW.Win32.GameOL.lcj
病毒： Trojan.PSW.Win32.QQFO.e  
病毒： Trojan.PSW.Win32.GameOL.lcz
病毒： Trojan.PSW.Win32.GamesOnline.fr

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.26.12