来个大毒包

冷冷

IK
I:\virus\windows\dsocjwzj.dat
I:\virus\windows\dxygzwdk.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\ldzxwymg.dll - Signature 'Trojan-Dropper.Win32.Agent.ane' found
I:\virus\windows\LotusHlp.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\mpfuszccp.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\mpfuszccp.exe.hiv
I:\virus\windows\SHAProc.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\upxdnd.exe - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\WinForm.exE - Signature 'Trojan-Spy.Win32.Agent.hz' found
I:\virus\windows\ywwdkxzk.dat
I:\virus\windows\Fonts\gjcsdss.dll
I:\virus\windows\Fonts\gjcsdyc.dll - Signature 'Virus.Win32.OnLineGames.BGD' found
I:\virus\windows\Fonts\gjcsdzc.exe - Signature 'Trojan-Spy.Win32.Delf.uv' found
I:\virus\windows\Fonts\gjcubxw.fon
I:\virus\windows\system32\BAABAA1025.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\BAABAA1025.exe - Suspect code-parts found (Level: 5)
I:\virus\windows\system32\cuhad.cfg
I:\virus\windows\system32\cuhad.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\HACHAC1035.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\HACHAC1035.exe - Signature 'Trojan-PWS.Win32.OnLineGames.qjz' found
I:\virus\windows\system32\HDDGuard.dll - Signature 'Trojan-Downloader.Win32.Agent.ikc' found
I:\virus\windows\system32\HHHCompress.dll - Signature 'Trojan-PWS.Win32.Agent.jp' found
I:\virus\windows\system32\hjiq.cfg
I:\virus\windows\system32\hjiq.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\hz.cfg
I:\virus\windows\system32\hz.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\iemnaw.cfg
I:\virus\windows\system32\iemnaw.dll - Signature 'Trojan-Spy.Win32.Delf.uv' found
I:\virus\windows\system32\KABKAB1032.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\KABKAB1032.exe - Suspect code-parts found (Level: 25)
I:\virus\windows\system32\kiluw.cfg
I:\virus\windows\system32\kiluw.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\kqylalszyzj.dll - Signature 'Trojan-PWS.Win32.QQPass.hq' found
I:\virus\windows\system32\LotusHlp.dll - Signature 'Trojan-PWS.OnlineGames.NSR' found
I:\virus\windows\system32\lssass.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
I:\virus\windows\system32\msepion.sys - Signature 'Trojan.Win32.Agent.anj' found
I:\virus\windows\system32\mstfhncn32.dll - Signature 'Trojan-PWS.Win32.QQPass.hq' found
I:\virus\windows\system32\mswmkkk32.dll - Signature 'Trojan-PWS.Win32.Agent.jp' found
I:\virus\windows\system32\ogejqrswm.dll - Signature 'Trojan-PWS.Win32.Agent.jp' found
I:\virus\windows\system32\oqnauhc.cfg
I:\virus\windows\system32\oqnauhc.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\Packet.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\pahzij.cfg
I:\virus\windows\system32\pahzij.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\ptfsgqcwow.dll - Signature 'Trojan-PWS.Win32.Agent.jp' found
I:\virus\windows\system32\QAB_QAB_1011.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\QAB_QAB_1011.exe - Signature 'Trojan-PWS.Win32.OnLineGames.qhd' found
I:\virus\windows\system32\sauhad.cfg
I:\virus\windows\system32\sauhad.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\scvhost.exe - Signature 'Backdoor.Win32.Delf.cwq' found
I:\virus\windows\system32\SHAProc.dll - Signature 'Trojan-PWS.OnlineGames.NSR' found
I:\virus\windows\system32\sve.cfg
I:\virus\windows\system32\sve.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\upxdnd.dll - Signature 'Trojan-PWS.OnlineGames.NSR' found
I:\virus\windows\system32\WanPacket.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\WinForm.dll - Signature 'Trojan-PWS.OnlineGames.NSR' found
I:\virus\windows\system32\wpcap.dll - Signature 'Trojan-PWS.Win32.QQPass.hq' found
I:\virus\windows\system32\xhqq.cfg
I:\virus\windows\system32\xhqq.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\xjxr.cfg
I:\virus\windows\system32\xjxr.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\zadnew.cfg
I:\virus\windows\system32\zadnew.dll - Signature 'Trojan-PWS.Win32.Small.br' found
I:\virus\windows\system32\drivers\ati32srv.sys - Signature 'Trojan-Downloader.Win32.Agent.iaj' found
I:\virus\windows\system32\drivers\npf.sys
I:\virus\windows\system32\drivers\pcihdd2.sys
I:\virus\windows\system32\drivers\pop.sys - Signature 'Trojan-PWS.Win32.OnLineGames.ppu' found
I:\virus\windows\system32\drivers\svchost.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\windows\system32\drivers\etc\hosts
69 Files scanned
   (0 Archives with 0 files)
47 Signatures found
2 Suspect code-parts found
Used time: 0:02.297

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Mnless.xr
病毒： Trojan.DL.Win32.Mnless.xq
病毒： Hack.ArpCheater.a        
病毒： Trojan.Win32.Edog.t      
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.GameOL.lxg
病毒： Trojan.PSW.Win32.GameOL.lvx
病毒： RootKit.Win32.GameHack.geu
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： RootKit.Win32.GameHack.geu
病毒： Trojan.PSW.Win32.SunOnline.ma
病毒： Trojan.PSW.Win32.SunOnline.ma
病毒： RootKit.Win32.GameHack.GEN
病毒： Trojan.PSW.Win32.XYOnline.aay
病毒： Trojan.PSW.Win32.QQGame.GEN
病毒： Trojan.PSW.Win32.ZeroOnline.dg
病毒： Trojan.PSW.Win32.GameOL.b
病毒： Trojan.PSW.Win32.GameOL.liq
病毒： Trojan.PSW.Win32.GameOL.lvq
病毒： Trojan.PSW.Win32.GamesOnline.mk
病毒： Trojan.Win32.Undef.ayo   
病毒： Trojan.DL.Win32.Mnless.wp
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.lhu
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.QQGame.GEN

用户来源：互联网

软件版本：20.31.30

38个

ewido anti-spyware - Scan Report
---------------------------------------------------------

+ 创建时间:        9:53:19 2008-2-16

+ 扫描结果:       



C:\Documents and Settings\zh\桌面\新建文件夹\windows.part2.rar/windows\system32\scvhost.exe -> Backdoor.Delf.cwq : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part2.rar/windows\system32\WanPacket.dll -> Backdoor.ForBot.ai : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part1.rar/windows\system32\HHHCompress.dll -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part1.rar/windows\system32\mstfhncn32.dll -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part1.rar/windows\system32\mswmkkk32.dll -> Downloader.Agent.bhc : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part3.rar/windows\Fonts\gjcsdyc.dll -> Trojan.OnLineGames.oec : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part3.rar/windows\Fonts\gjcsdzc.exe -> Trojan.OnLineGames.oeg : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part2.rar/windows\system32\hz.dll -> Trojan.OnLineGames.oyl : 已清除.
C:\Documents and Settings\zh\桌面\新建文件夹\windows.part3.rar/windows\upxdnd.exe -> Trojan.OnLineGames.qfw : 已清除.


::报告结束

爱是辣舞

卡巴斯基+AVAST引擎  34个
卡巴斯基+BD引擎 38个

傻猪猪米走鸡

kill 47yeah

lengxue624

机器狗系列

啊弥陀佛

木马名称:Trojan-Downloader.Win32.EDog.r
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\DRIVERS\ATI32SRV.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.EDog.q
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\DRIVERS\PCIHDD2.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OLGames.kcz
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\DRIVERS\POP.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.kpd
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\UPXDND.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.kbl
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\IEMNAW.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Backdoor.Win32.Delf.cky
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\SCVHOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.kbk
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\FONTS\GJCSDZC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\LOTUSHLP.EXE
木马程序生成以下文件:
1) C:\WINDOWS\LOTUSHLP.EXE
2) C:\WINDOWS\SYSTEM32\LOTUSHLP.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\MPFUSZCCP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SHAPROC.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SHAPROC.EXE
2) C:\WINDOWS\SYSTEM32\SHAPROC.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\UPXDND.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\WINFORM.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WINFORM.EXE
2) C:\WINDOWS\SYSTEM32\WINFORM.DLL
是否删除木马程序及其衍生物?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\LDZXWYMG.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\LOTUSHLP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\WINDOWS\SYSTEM32\BAABAA1025.EXE
可疑程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\BAABAA1025.DLL
2) C:\F9CAFDE592AB7649843.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\WINFORM.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\SHAPROC.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\WINDOWS\SYSTEM32\KABKAB1032.EXE
可疑程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\KABKAB1032.DLL
2) C:\F9CAFDE592AB7694906.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINDOWS[1]\WINDOWS\SYSTEM32\LSSASS.EXE
是否删除木马程序及其衍生物?

挪威的冬天

信息 2008-02-16  14:58:42 您此次查毒清除了38个病毒   
信息 2008-02-16  14:58:42 您此次查毒共查出38个病毒以及危险代码   
信息 2008-02-16  14:58:42 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件104个   
信息 2008-02-16  14:58:42 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒   

woai_jolin

2008/2/16 15:01:15        Real-time file system protection        file        G:\v\windows\LotusHlp.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:13        Real-time file system protection        file        G:\v\windows\SHAProc.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:11        Real-time file system protection        file        G:\v\windows\upxdnd.exe        probably a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:10        Real-time file system protection        file        G:\v\windows\Fonts\gjcsdyc.dll        Win32/PSW.OnLineGames.FDY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:08        Real-time file system protection        file        G:\v\windows\Fonts\gjcsdzc.exe        Win32/PSW.OnLineGames.FDY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:07        Real-time file system protection        file        G:\v\windows\WinForm.exE        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:05        Real-time file system protection        file        G:\v\windows\ldzxwymg.dll        a variant of Win32/PSW.OnLineGames.NLY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:03        Real-time file system protection        file        G:\v\windows\dxygzwdk.exe        a variant of Win32/PSW.OnLineGames.NLY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:01:02        Real-time file system protection        file        G:\v\windows\mpfuszccp.exe        a variant of Win32/PSW.OnLineGames.NLY trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:58        Real-time file system protection        file        G:\v\windows\system32\HDDGuard.dll        Win32/TrojanDownloader.Agent.IAJ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:57        Real-time file system protection        file        G:\v\windows\system32\scvhost.exe        Win32/NetTool.Agent.NAA application        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:55        Real-time file system protection        file        G:\v\windows\system32\QAB_QAB_1011.dll        Win32/PSW.OnLineGames.QHD trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:54        Real-time file system protection        file        G:\v\windows\system32\QAB_QAB_1011.exe        Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:52        Real-time file system protection        file        G:\v\windows\system32\hz.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:51        Real-time file system protection        file        G:\v\windows\system32\iemnaw.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:50        Real-time file system protection        file        G:\v\windows\system32\HACHAC1035.dll        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:49        Real-time file system protection        file        G:\v\windows\system32\pahzij.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:47        Real-time file system protection        file        G:\v\windows\system32\HACHAC1035.exe        a variant of Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:46        Real-time file system protection        file        G:\v\windows\system32\LotusHlp.dll        Win32/PSW.OnLineGames.HCV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:45        Real-time file system protection        file        G:\v\windows\system32\SHAProc.dll        a variant of Win32/PSW.OnLineGames.HCV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:44        Real-time file system protection        file        G:\v\windows\system32\msepion.sys        Win32/PSW.OnLineGames.NFC trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:42        Real-time file system protection        file        G:\v\windows\system32\sauhad.dll        a variant of Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:41        Real-time file system protection        file        G:\v\windows\system32\hjiq.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:39        Real-time file system protection        file        G:\v\windows\system32\upxdnd.dll        Win32/PSW.OnLineGames.HCV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:38        Real-time file system protection        file        G:\v\windows\system32\cuhad.dll        a variant of Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:37        Real-time file system protection        file        G:\v\windows\system32\xhqq.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:35        Real-time file system protection        file        G:\v\windows\system32\mstfhncn32.dll        a variant of Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:34        Real-time file system protection        file        G:\v\windows\system32\kqylalszyzj.dll        Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:32        Real-time file system protection        file        G:\v\windows\system32\sve.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:31        Real-time file system protection        file        G:\v\windows\system32\BAABAA1025.dll        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:30        Real-time file system protection        file        G:\v\windows\system32\HHHCompress.dll        a variant of Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:28        Real-time file system protection        file        G:\v\windows\system32\ptfsgqcwow.dll        Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:26        Real-time file system protection        file        G:\v\windows\system32\KABKAB1032.dll        Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:25        Real-time file system protection        file        G:\v\windows\system32\BAABAA1025.exe        a variant of Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:24        Real-time file system protection        file        G:\v\windows\system32\WinForm.dll        probably a variant of Win32/PSW.OnLineGames.HCV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:22        Real-time file system protection        file        G:\v\windows\system32\KABKAB1032.exe        Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:21        Real-time file system protection        file        G:\v\windows\system32\xjxr.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:20        Real-time file system protection        file        G:\v\windows\system32\zadnew.dll        a variant of Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:19        Real-time file system protection        file        G:\v\windows\system32\kiluw.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:18        Real-time file system protection        file        G:\v\windows\system32\mswmkkk32.dll        a variant of Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:16        Real-time file system protection        file        G:\v\windows\system32\ogejqrswm.dll        probably a variant of Win32/PSW.OnLineGames.GJV trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:15        Real-time file system protection        file        G:\v\windows\system32\oqnauhc.dll        Win32/PSW.OnLineGames.NLH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:14        Real-time file system protection        file        G:\v\windows\system32\lssass.exe        Win32/TrojanDownloader.Agent.IAJ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:12        Real-time file system protection        file        G:\v\windows\system32\drivers\svchost.exe        Win32/NetTool.Agent.NAA application        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:10        Real-time file system protection        file        G:\v\windows\system32\drivers\pop.sys        Win32/TrojanDownloader.Small.NZS trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:09        Real-time file system protection        file        G:\v\windows\system32\drivers\pcihdd2.sys        Win32/TrojanDownloader.Agent.NVH trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008/2/16 15:00:07        Real-time file system protection        file        G:\v\windows\system32\drivers\ati32srv.sys        Win32/TrojanDownloader.Agent.IAJ trojan        cleaned by deleting - quarantined                Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.

wangjay1980

Hello,

ldzxwymg.dll - Trojan-PSW.Win32.OnLineGames.rga,
cuhad.dll - Trojan-PSW.Win32.OnLineGames.rgb,
HACHAC1035.dll - Trojan-PSW.Win32.OnLineGames.rge,
KABKAB1032.dll - Trojan-PSW.Win32.OnLineGames.rgd,
kiluw.dll - Trojan-PSW.Win32.OnLineGames.rgc

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

npf.sys, pcihdd2.sys

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

挪威的冬天

油 那个 PCIHDD2 不是机器狗的穿还原驱动么 难道只是同名。。。