31个

jimmyleo

vba32=22

D:\download\s\11\001.exe : infected Trojan-Dropper.Win32.OnlineGames
D:\download\s\11\002.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\003.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\004.exe : is suspected of Embedded.Trojan-PSW.Win32.OnLineGames.tkz
D:\download\s\11\005.exe : infected Trojan-PSW.Win32.OnLineGames.szv
D:\download\s\11\006.exe : infected Trojan-PSW.Win32.OnLineGames.ssr
D:\download\s\11\007.exe : infected Trojan-PSW.Win32.OnLineGames.rwu
D:\download\s\11\008.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\009.exe : infected Trojan-PSW.Win32.OnLineGames.tiq
D:\download\s\11\11.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\12.exe : infected Trojan.Win32.Agent.hjb
D:\download\s\11\14.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\15.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\16.exe : infected Trojan-PSW.Win32.OnLineGames.szv
D:\download\s\11\17.exe : infected MalwareScope.Trojan-PSW.Game.7
D:\download\s\11\19.exe : infected Trojan-PSW.Win32.Lmir.bpv
D:\download\s\11\25.exe : infected MalwareScope.Trojan-PSW.Game.3
D:\download\s\11\26.exe : is suspected of Win32 Shadow Service Install
D:\download\s\11\a.exe : infected Backdoor.Win32.Delf.cwq
D:\download\s\11\d.exe : infected Trojan-PSW.Win32.OnLineGames.ppu
D:\download\s\11\f.exe : infected Trojan.Win32.Qhost.ahn
D:\download\s\11\k.exe : infected Trojan-Downloader.Win32.VB.cii

stonejr

Begin scan in 'C:\11.rar'
C:\11.rar
  [0] Archive type: RAR
  --> 11\001.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.sqz
  --> 11\002.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11\003.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tll
  --> 11\004.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tjn.1
  --> 11\005.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.SZV.2
  --> 11\006.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12706.1
  --> 11\007.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rwu.2
  --> 11\008.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11\009.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tiq.1
  --> 11\010.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12256
  --> 11\11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.510
  --> 11\12.exe
      [DETECTION] Is the Trojan horse TR/Agent.hjb.1
  --> 11\13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.489
  --> 11\15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.487
  --> 11\16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.szv
  --> 11\17.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 11\18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\19.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 11\20.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\21.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\22.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12309
  --> 11\23.exe
      [DETECTION] Is the Trojan horse TR/Agent.hko.4
  --> 11\24.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\25.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11\26.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\27.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\a.exe
      [DETECTION] Is the Trojan horse TR/Agent.114688.C
  --> 11\d.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
  --> 11\f.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 11\k.exe
      [DETECTION] Contains code of the Windows virus W32/Downloader.J
      [INFO]      The file was deleted!


End of the scan: 2008年3月12日  21:54
Used time: 00:08 min

The scan has been done completely.

      0 Scanning directories
     33 Files were scanned
     24 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

OVER

Hello,

008.exe_ - Trojan-PSW.Win32.OnLineGames.tzx,
010.exe_, 27.exe_ - Trojan-PSW.Win32.OnLineGames.tzz,
21.exe_ - Trojan-PSW.Win32.OnLineGames.uac

These files are already detected. Please update your antivirus bases.

13.exe_, 18.exe_, 24.exe_ - Trojan-PSW.Win32.OnLineGames.uaz,
17.exe_ - Trojan-PSW.Win32.OnLineGames.uax,
25.exe_ - Trojan-PSW.Win32.OnLineGames.uay,
26.exe_ - Trojan-PSW.Win32.OnLineGames.ubc

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: 11.rar

The EQs

LS每次笑的都令人颤抖。。。。。

capsshift

今天用红伞的都动作慢了点。

rest1min

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.703
        病毒库日期 2008-03-12
        更新日期 2008-03-12

扫描目标 C:\Documents and Settings\Administrator\桌面\11.rar

开始时间 2008-03-12 22:46:03

在 C:\Documents and Settings\Administrator\桌面\11.rar->11\001.exe 中发现 Trojan/PSW.OnLineGames.wgq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\002.exe 中发现 Trojan/PSW.OnLineGames.sld 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\003.exe 中发现 Trojan/PSW.OnLineGames.uow 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\004.exe 中发现 Trojan/PSW.OnLineGames.wpf 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\005.exe 中发现 Trojan/PSW.OnLineGames.sji 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\006.exe 中发现 Trojan/PSW.OnLineGames.slu 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\007.exe 中发现 Trojan/PSW.OnLineGames.uoi 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\009.exe 中发现 Trojan/PSW.OnLineGames.slo 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\11.exe 中发现 Trojan/PSW.OnLineGames.slc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\12.exe 中发现 Trojan/PSW.OnLineGames.sxp 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\14.exe 中发现 Trojan/PSW.OnLineGames.sxl 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\15.exe 中发现 Trojan/PSW.OnLineGames.wfc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\16.exe 中发现 Trojan/PSW.OnLineGames.sjh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\17.exe 中发现 Trojan/Delf.nz 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\19.exe 中发现 Trojan/PSW.Lmir.cst 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\23.exe 中发现 Trojan/PSW.OnLineGames.sxq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\a.exe 中发现 Trojan/Agent.ahum 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\d.exe 中发现 TrojanDownloader.Agent.aakc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\f.exe 中发现 Trojan/Qhost.aho 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.rar->11\k.exe 中发现 Trojan/Qhost.aho 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :672                                 病毒体 :20        
                   删除 :20                                    解毒 :0         
    扫描速度(千字节/秒) :25626                             扫描时间 :00:00:07
    扫描文件速度(个/秒) :96

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\11'
C:\Documents and Settings\Administrator\My Documents\11\
  001.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.sqz
      [NOTE]      The file was deleted!
  002.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  003.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tll
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  004.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tjn.1
      [NOTE]      The file was deleted!
  005.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.SZV.2
      [NOTE]      The file was deleted!
  006.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12706.1
      [NOTE]      The file was deleted!
  007.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rwu.2
      [NOTE]      The file was deleted!
  008.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  009.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tiq.1
      [NOTE]      The file was deleted!
  010.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12256
      [NOTE]      The file was deleted!
  11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.510
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  12.exe
      [DETECTION] Is the Trojan horse TR/Agent.hjb.1
      [NOTE]      The file was deleted!
  13.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.489
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.487
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.szv
      [NOTE]      The file was deleted!
  17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
  18.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [NOTE]      The file was deleted!
  20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12142
      [NOTE]      The file was deleted!
  21.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12146.1
      [NOTE]      The file was deleted!
  22.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12309
      [NOTE]      The file was deleted!
  23.exe
      [DETECTION] Is the Trojan horse TR/Agent.hko.4
      [NOTE]      The file was deleted!
  24.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  25.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.563
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  26.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4806025c.qua'!
  27.exe
    [0] Archive type: OVL
    --> Object
    --> Object
      [NOTE]      The file was deleted!
  a.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Agent.114688.C
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [NOTE]      The file was deleted!
  d.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu
      [NOTE]      The file was deleted!
  f.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
  k.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Downloader.J
      [NOTE]      The file was deleted!


End of the scan: 2008年3月12日  08:17
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
     26 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
     30 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
      6 Warnings
     31 Notes

水晶

红伞查出32个