剑盟看到的一个下载者

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GamesOnline.iy
病毒： Trojan.PSW.Win32.Agent.vrw
病毒： Trojan.PSW.Win32.QQHX.tvu
病毒： Trojan.PSW.Win32.GameOL.lms
病毒： Trojan.PSW.Win32.GameOL.lmr
病毒： Trojan.PSW.Win32.GameOL.llb
病毒： Trojan.PSW.Win32.GameOL.lje
病毒： Trojan.PSW.Win32.GamesOnline.ky
病毒： Trojan.PSW.Win32.GameOnline.zzy
病毒： Trojan.Win32.Wisin.b     
病毒： Trojan.PSW.Win32.GameOL.lmi
病毒： Trojan.PSW.Win32.GameOL.lpk
病毒： Trojan.PSW.Win32.SunOnline.lx

用户来源：互联网

软件版本：20.29
15个

xlys

对象: 11 soft02.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.otj (KAV 引擎)
对象: 11 soft03.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.poc (KAV 引擎)
对象: 11 soft04.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: 11 soft05.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pgc (KAV 引擎)
对象: 11 soft06.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan.Win32.Vaklik.fb (KAV 引擎)
对象: 11 soft07.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.ozk (KAV 引擎)
对象: 11 soft08.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.oly (KAV 引擎)
对象: 11 soft09.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.poz (KAV 引擎)
对象: 11 soft10.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.jnb (KAV 引擎)
对象: 11 soft11.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: 11 soft14.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.ozu (KAV 引擎)
对象: 11 soft15.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pbp (KAV 引擎)
对象: 11 soft16.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan.Win32.Vaklik.gg (KAV 引擎)
对象: 11 soft17.exe
        在压缩档案里: D:\Documents\桌面\11.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pen (KAV 引擎)
对象: 11.rar
        路径: D:\Documents\桌面
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.otj, Trojan-PSW.Win32.OnLineGames.poc, Trojan-PSW.Win32.OnLineGames.pbp (3x), Trojan-PSW.Win32.OnLineGames.pgc, Trojan.Win32.Vaklik.fb, Trojan-PSW.Win32.OnLineGames.ozk, Trojan-PSW.Win32.OnLineGames.oly, Trojan-PSW.Win32.OnLineGames.poz, Trojan-PSW.Win32.OnLineGames.jnb, Trojan-PSW.Win32.OnLineGames.ozu, Trojan.Win32.Vaklik.gg, Trojan-PSW.Win32.OnLineGames.pen (KAV 引擎)
分析完成: 2008-1-28 16:56
    已扫描 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件

Nblock

挑一支后门Rootkit.Win32.Agent.qr

rasis

桌面.rar
  [0] Archive type: RAR
  --> SOFT13.EXE
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> USBINITE.SYS
      [DETECTION] Is the Trojan horse TR/Rootkit.Agent.NAW

ntuser.rar
  [0] Archive type: RAR
  --> ntuser.com
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YM

鱼是一只我

生成物，江民杀7个

挪威的冬天

信息        2008-01-28  18:06:03        您此次查毒共查出14个病毒以及危险代码                       
信息        2008-01-28  18:06:03        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件35个                       
信息        2008-01-28  18:06:03        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft19.exe        Win32.PSWTroj.QQPass.104056        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft17.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft16.exe        Win32.Troj.OnlineGamesT.qq.94315        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft15.exe        Win32.Troj.OnlineGamesT.nr.37008        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft14.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft11.exe        Win32.Troj.OnlineGamesT.nr.37008        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft10.exe        Win32.PSWTroj.OnLineGames.40960        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft09.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft08.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft07.exe        Win32.Troj.OnlineGamesT.nr.37008        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft06.exe        Win32.Troj.OnlineGamesT.ty.98304        跳过，未处理       
病毒        2008-01-28  18:06:03        C:\Users\挪威的冬天\Desktop\11.rar\11\soft05.exe        Win32.Troj.OnlineGamesT.wf.118784        跳过，未处理       
病毒        2008-01-28  18:06:02        C:\Users\挪威的冬天\Desktop\11.rar\11\soft04.exe        Win32.Troj.OnlineGamesT.nr.37008        跳过，未处理       
病毒        2008-01-28  18:06:02        C:\Users\挪威的冬天\Desktop\11.rar\11\soft02.exe        Win32.Troj.OnlineGamesT.nr.37008        跳过，未处理

挪威的冬天

信息 2008-01-28  18:07:12 您此次查毒共查出1个病毒以及危险代码   
信息 2008-01-28  18:07:12 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件3个   
信息 2008-01-28  18:07:12 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒   
病毒 2008-01-28  18:07:12 C:\Users\挪威的冬天\Desktop\ntuser.rar\ntuser.com Win32.Troj.DropDown.vv.77824 跳过，未处理

woai_jolin

2008-1-28 18:24:13        Real-time file system protection        file        G:\v\ntuser.com        Win32/TrojanDownloader.Small.NZL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

woai_jolin

2008-1-28 18:25:15        Real-time file system protection        file        G:\v\11\soft19.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:14        Real-time file system protection        file        G:\v\11\soft17.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:12        Real-time file system protection        file        G:\v\11\soft16.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:10        Real-time file system protection        file        G:\v\11\soft15.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:08        Real-time file system protection        file        G:\v\11\soft14.exe        probably a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:06        Real-time file system protection        file        G:\v\11\soft13.exe        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:06        Real-time file system protection        file        G:\v\11\soft11.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:04        Real-time file system protection        file        G:\v\11\soft10.exe        a variant of Win32/PSW.OnLineGames.NFN trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:03        Real-time file system protection        file        G:\v\11\soft09.exe        probably a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:01        Real-time file system protection        file        G:\v\11\soft08.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:25:00        Real-time file system protection        file        G:\v\11\soft07.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:58        Real-time file system protection        file        G:\v\11\soft06.exe        a variant of Win32/PSW.OnLineGames.YA trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:57        Real-time file system protection        file        G:\v\11\soft05.exe        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:56        Real-time file system protection        file        G:\v\11\soft04.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:54        Real-time file system protection        file        G:\v\11\soft03.exe        probably unknown NewHeur_PE virus        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:54        Real-time file system protection        file        G:\v\11\soft02.exe        a variant of Win32/PSW.OnLineGames.MUG trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-1-28 18:24:52        Real-time file system protection        file        G:\v\11\soft01.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

spatra

我的微点没反应....预升级版...