20个

显示全部楼层 · 发表于 2008-3-13 17:50:23

样本：

貌似有点老吧，现在的网马都那么懒，不经常更新

显示全部楼层 · 发表于 2008-3-13 17:51:55

Scan Log
Version of virus signature database: 2943 (20080313)
Date: 2008-3-13 Time: 17:50:54
Scanned disks, folders and files: E:\VIRUS\11（4）.rar
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\1.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\10.exe - a variant of Win32/PSW.OnLineGames.NML trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\11.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\12.exe - a variant of Win32/PSW.OnLineGames.NML trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\13.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\14.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\15.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\16.exe - Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\17.exe - Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\18.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\19.exe - Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\2.exe - Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\20.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\3.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\4.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\5.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\6.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\7.exe - Win32/PSW.OnLineGames.MUG trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\8.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\VIRUS\11（4）.rar » RAR » web.shijiediyi.net\9.exe - Win32/PSW.OnLineGames.MUG trojan
Number of scanned objects: 20
Number of threats found: 20
Time of completion: 17:50:57 Total scanning time: 3 sec (00:00:03)

显示全部楼层 · 发表于 2008-3-13 17:53:46

木马名称:Trojan-PSW.Win32.OnLineGame.oyp

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.pay

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.paz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\15.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.oze

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\16.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.oys

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.gdx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.lfa

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.rqe

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.ozw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEB.SHIJIEDIYI.NET\9.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-3-13 17:59:02

E:\VIRUS\11（4）.rar
  [0] Archive type: RAR
  --> web.shijiediyi.net\1.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tjq
  --> web.shijiediyi.net\10.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> web.shijiediyi.net\11.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.572
  --> web.shijiediyi.net\12.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tik.2
  --> web.shijiediyi.net\13.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.570
  --> web.shijiediyi.net\14.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
  --> web.shijiediyi.net\15.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.568
  --> web.shijiediyi.net\16.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> web.shijiediyi.net\17.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> web.shijiediyi.net\18.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
  --> web.shijiediyi.net\19.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.2
  --> web.shijiediyi.net\2.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> web.shijiediyi.net\20.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> web.shijiediyi.net\3.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.565
  --> web.shijiediyi.net\4.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> web.shijiediyi.net\5.exe
   [DETECTION] Is the Trojan horse TR/PSW.12278
  --> web.shijiediyi.net\6.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> web.shijiediyi.net\7.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> web.shijiediyi.net\8.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> web.shijiediyi.net\9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tds
   [WARNING] The file was ignored!

End of the scan: 2008年3月13日  17:57
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   21 Files were scanned
   19 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-13 18:03:31

反病毒专家 AntiVirusKit 2007 扫描病毒日志记录
版本
双引擎反病毒签名 3/13/2008
开始时间: 3/13/2008 18:02
引擎: KAV 引擎 (AVK 18.3073), AVST 引擎 (AVKB 18.166)
高启发式: 打开
压缩文件: 打开
系统区域: 打开

扫描系统区域...
扫描所选择的目录和文件...
对象: 1.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tde (KAV 引擎)
对象: 10.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.uaz (KAV 引擎), Win32:Agent-SOA [Trj] (AVST 引擎)
对象: 11.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tzk (KAV 引擎), Win32:Vaklik-AL [Trj] (AVST 引擎)
对象: 12.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tik (KAV 引擎), Win32:Agent-SOA [Trj] (AVST 引擎)
对象: 13.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tji (KAV 引擎), Win32:OnLineGames-CTZ [Trj] (AVST 引擎)
对象: 14.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.sem (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: 15.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tzl (KAV 引擎), Win32:OnLineGames-CTZ [Trj] (AVST 引擎)
对象: 16.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: 17.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: 18.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.rkf (KAV 引擎), Win32:OnLineGames-BPY [Trj] (AVST 引擎)
对象: 19.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.rhu (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: 2.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
对象: 20.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tzt (KAV 引擎), Win32:OnLineGames-CTZ [Trj] (AVST 引擎)
对象: 3.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.uag (KAV 引擎)
对象: 4.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tzc (KAV 引擎), Win32:Onlinegames-CDA [Trj] (AVST 引擎)
对象: 5.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
对象: 6.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tmj (KAV 引擎), Win32:OnLineGames-CTO [Trj] (AVST 引擎)
对象: 7.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
对象: 8.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tzx (KAV 引擎)
对象: 9.exe
路径: D:\样本\11\web.shijiediyi.net
狀態: 病毒文件已删除
病毒: Trojan-PSW.Win32.OnLineGames.tct (KAV 引擎)
扫描完成: 3/13/2008 18:03
已检查 20 个文件
已发现 20 个染毒文件

显示全部楼层 · 发表于 2008-3-13 18:17:44

郁闷死

信息 2008-03-13  18:17:25 您此次查毒清除了19个病毒
信息 2008-03-13  18:17:25 您此次查毒共查出19个病毒以及危险代码
信息 2008-03-13  18:17:25 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件40个
信息 2008-03-13  18:17:25 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

显示全部楼层 · 发表于 2008-3-13 18:22:16

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.mjw
病毒： Trojan.PSW.Win32.GameOL.mku
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.mkf
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GamesOnline.oz
病毒： Trojan.PSW.Win32.OnlineGames.eop
病毒： Trojan.PSW.Win32.SunOnline.mu
病毒： Trojan.PSW.Win32.GameOL.mau
病毒： Trojan.PSW.Win32.GameOL.mjf
病毒： Trojan.PSW.Win32.QQSG.cz

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.35.31

显示全部楼层 · 发表于 2008-3-14 00:27:47

红伞全灭，瑞星要加油哦。

显示全部楼层 · 发表于 2008-3-15 02:53:27

正在扫描日志
病毒库版本: 2948 (20080314)
日期: 2008-3-15 时间: 2:51:11
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\11.rar
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\1.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\10.exe - Win32/PSW.OnLineGames.NML 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\11.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\12.exe - Win32/PSW.OnLineGames.NML 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\13.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\14.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\15.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\16.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\17.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\18.exe - Win32/PSW.OnLineGames.GJV 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\19.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\2.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\20.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\3.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\4.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\5.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\6.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\7.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\8.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > web.shijiediyi.net\9.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
已扫描的对象数: 20
发现的威胁数: 20
完成时间: 2:51:16 总扫描时间: 5 秒 (00:00:05)

显示全部楼层 · 发表于 2008-3-15 02:55:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\11.rar'
C:\Documents and Settings\Administrator\My Documents\
  11.rar
[0] Archive type: RAR
   --> web.shijiediyi.net\1.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tjq
            [WARNING] Infected files in archives cannot be repaired!
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tkz
            [WARNING] Infected files in archives cannot be repaired!
--> web.shijiediyi.net\10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.uaz.5
   --> web.shijiediyi.net\11.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.572
            [WARNING] Infected files in archives cannot be repaired!
--> web.shijiediyi.net\12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tik.2
   --> web.shijiediyi.net\13.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.570
            [WARNING] Infected files in archives cannot be repaired!
   --> web.shijiediyi.net\14.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
            [WARNING] Infected files in archives cannot be repaired!
   --> web.shijiediyi.net\15.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.568
            [WARNING] Infected files in archives cannot be repaired!
--> web.shijiediyi.net\16.exe
      [DETECTION] Is the Trojan horse TR/Small.6910
--> web.shijiediyi.net\17.exe
      [DETECTION] Is the Trojan horse TR/Small.6910
--> web.shijiediyi.net\18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
   --> web.shijiediyi.net\19.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
            [4] Archive type: RSRC
            --> Object
               [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rjh.2
               [WARNING] Infected files in archives cannot be repaired!
            --> Object
--> web.shijiediyi.net\2.exe
      [DETECTION] Is the Trojan horse TR/Small.QG
   --> web.shijiediyi.net\20.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
   --> web.shijiediyi.net\3.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.565
            [WARNING] Infected files in archives cannot be repaired!
   --> web.shijiediyi.net\4.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
--> web.shijiediyi.net\5.exe
      [DETECTION] Is the Trojan horse TR/Small.QG
--> web.shijiediyi.net\6.exe
      [DETECTION] Is the Trojan horse TR/Small.6910
   --> web.shijiediyi.net\7.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
   --> web.shijiediyi.net\8.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tzy.3
            [WARNING] Infected files in archives cannot be repaired!
   --> web.shijiediyi.net\9.exe
      [1] Archive type: Runtime Packed
      --> Object
      [2] Archive type: RSRC
      --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.tds
            [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!

End of the scan: 2008年3月14日  11:55
Used time: 00:05 min

The scan has been done completely.

   0 Scanning directories
   21 Files were scanned
   22 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   1 Archives were scanned
   10 Warnings
   1 Notes

[病毒样本] 20个

本帖子中包含更多资源

49/20

EVA 全灭