47只

promised

Starting the file scan:

Begin scan in 'D:\yes.rar'
D:\yes.rar
  [0] Archive type: RAR
  --> yes\00001.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.19952
  --> yes\00002.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLi.NMQ.1.A
  --> yes\00003.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\00004.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12134
  --> yes\00005.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\00006.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12717
  --> yes\00008.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\00012.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\00013.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.vpc.3
  --> yes\00014.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\00015.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.jue.1
  --> yes\00016.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yes\00017.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> yes\00030.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.12607
  --> yes\00031.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> yes\00035.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\1(1).exe
      [DETECTION] Is the Trojan horse TR/Drop.RKY.7
  --> yes\1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.113152
  --> yes\10.exe
      [DETECTION] Contains detection pattern of the dropper DR/Agent.GVX
      [1] Archive type: RAR SFX (self extracting)
      --> ie.dll
          [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/WuRuan.A
  --> yes\11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> yes\14.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.36
  --> yes\15.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yes\3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> yes\5.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Ceckno.DL.4 Backdoor server programs
  --> yes\9.exe
      [DETECTION] Is the Trojan horse TR/Zlob.IZD
  --> yes\AVPSrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\ayEZZEZZ1042.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yes\ayFKKFKK1055.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yes\ayNNBNNB1042.dll
      [DETECTION] Is the Trojan horse TR/Drop.Agent.jue.1
  --> yes\aySADSAD1032.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yes\DbgHlp32.dlL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\fmsbbqi.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> yes\host.exe
      [DETECTION] Is the Trojan horse TR/Qhost.aef
  --> yes\inudhya.dll
      [DETECTION] Is the Trojan horse TR/Agent.95744
  --> yes\lmmh.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> yes\LotusHlp.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.vpc.3
  --> yes\oqnauhc.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> yes\PTSShell.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\SHAProc.dat
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\soundma.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.51042.B
  --> yes\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\vista.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> yes\wdfmgr.exe
      [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
  --> yes\WSockDrv32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> yes\yqhs.dll
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
      [INFO]      The file was deleted!


End of the scan: 2008年3月30日  21:40
Used time: 00:46 min

The scan has been done completely.

      0 Scanning directories
     53 Files were scanned
     40 viruses and/or unwanted programs were found
      6 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     13 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes

aerbeisi

[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00001.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00002.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00003.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00004.exe->exefile->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00005.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00006.exe->exefile->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00008.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00012.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00013.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00014.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00015.exe->exefile->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00016.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00017.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00030.exe->exefile->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00031.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\00035.exe->(UPack)
[Found Trojan]  <W32/Trojan2.AFNY (exact)> c:\test\yes\1.exe
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\11.exe->(UPack)
[Found security risk]  <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)> c:\test\yes\14.exe->(UPX)
[Found downloader]  <W32/Downldr2.AJJN (exact)> c:\test\yes\5.exe
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\ayEZZEZZ1042.dll->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\ayFKKFKK1055.dll->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\ayNNBNNB1042.dll->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\aySADSAD1032.dll->(UPack)
[Found Trojan]  <W32/Trojan2.TXF (exact)> c:\test\yes\host.exe
[Found Trojan]  <W32/Trojan2.NOL (exact)> c:\test\yes\inudhya.dll
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\lmmh.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-KPP!Eldorado (not disinfectable)> c:\test\yes\LotusHlp.dll
[Found security risk]  <W32/OnlineGames.Q.gen!Eldorado (not disinfectable, generic)> c:\test\yes\oqnauhc.dll->(UPack)
[Found possible security risk]  <W32/Heuristic-KPP!Eldorado (not disinfectable)> c:\test\yes\PTSShell.dll
[Found Trojan]  <W32/Trojan2.LUN (exact)> c:\test\yes\soundma.exe
[Found security risk]  <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)> c:\test\yes\upxdnd.dll
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\vista.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-162!Eldorado (damaged, not disinfectable)> c:\test\yes\wdfmgr.exe->(UPack)
[Found possible security risk]  <W32/Heuristic-KPP!Eldorado (not disinfectable)> c:\test\yes\WSockDrv32.dll
[Found security risk]  <W32/OnlineGames.Q.gen!Eldorado (not disinfectable, generic)> c:\test\yes\yqhs.dll->(UPack)

[ 本帖最后由 aerbeisi 于 2008-3-30 21:43 编辑 ]

yangpizhi

哇卡卡，估计我比较快
刚刚把FP的使用时间延长了一个月。。。
这个包我来上报吧。。。
明天开始就不能经常来这里了。。。
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00001.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00002.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00003.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00004.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00005.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00006.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00008.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00012.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00013.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00014.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00015.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00016.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00017.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00030.exe->exefile->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00031.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\00035.exe->(UPack)
[Clean]        C:\virus\yes.rar->yes\1(1).exe
[Found Trojan]         <W32/Trojan2.AFNY (exact, not disinfectable)>        C:\virus\yes.rar->yes\1.exe
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)->2.bat
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)->cmd.vbs
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)->ie.dll
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)->url.xml
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)->1.bat
[Clean]        C:\virus\yes.rar->yes\10.exe->(RAR)
[Clean]        C:\virus\yes.rar->yes\10.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\11.exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\virus\yes.rar->yes\14.exe->(UPX)
[Clean]        C:\virus\yes.rar->yes\15.exe->(FSG)
[Clean]        C:\virus\yes.rar->yes\3.exe->(Aspack)
[Found downloader]         <W32/Downldr2.AJJN (exact, not disinfectable)>        C:\virus\yes.rar->yes\5.exe
[Clean]        C:\virus\yes.rar->yes\7.exe->(PecBundle)->(PECompact)
[Clean]        C:\virus\yes.rar->yes\9.exe
[Clean]        C:\virus\yes.rar->yes\AVPSrv.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\ayEZZEZZ1042.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\ayFKKFKK1055.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\ayNNBNNB1042.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\aySADSAD1032.dll->(UPack)
[Clean]        C:\virus\yes.rar->yes\DbgHlp32.dlL
[Clean]        C:\virus\yes.rar->yes\fmsbbqi.dll
[Found Trojan]         <W32/Trojan2.TXF (exact, not disinfectable)>        C:\virus\yes.rar->yes\host.exe
[Found Trojan]         <W32/Trojan2.NOL (exact, not disinfectable)>        C:\virus\yes.rar->yes\inudhya.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\lmmh.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\virus\yes.rar->yes\LotusHlp.dll
[Found security risk]         <W32/OnlineGames.Q.gen!Eldorado (not disinfectable, generic)>        C:\virus\yes.rar->yes\oqnauhc.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\virus\yes.rar->yes\PTSShell.dll
[Clean]        C:\virus\yes.rar->yes\SFlower.dll
[Clean]        C:\virus\yes.rar->yes\SHAProc.dat
[Found Trojan]         <W32/Trojan2.LUN (exact, not disinfectable)>        C:\virus\yes.rar->yes\soundma.exe
[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\virus\yes.rar->yes\upxdnd.dll
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\vista.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\virus\yes.rar->yes\wdfmgr.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-KPP!Eldorado (not disinfectable)>        C:\virus\yes.rar->yes\WSockDrv32.dll
[Found security risk]         <W32/OnlineGames.Q.gen!Eldorado (not disinfectable, generic)>        C:\virus\yes.rar->yes\yqhs.dll->(UPack)
[Contains infected objects]        C:\virus\yes.rar
[Quarantined]        C:\virus\yes.rar->yes\yqhs.dll->(UPack)

[ 本帖最后由 yangpizhi 于 2008-3-30 21:42 编辑 ]

testhawk

45
C:\yes.rar » RAR » yes\00001.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\yes.rar » RAR » yes\00002.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\yes.rar » RAR » yes\00003.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00004.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\00005.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00006.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\00008.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00012.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00013.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00014.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00015.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\00016.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\00017.exe - Win32/PSW.OnLineGames.MUG trojan
C:\yes.rar » RAR » yes\00030.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\00031.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\yes.rar » RAR » yes\00035.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\yes.rar » RAR » yes\1(1).exe - Win32/TrojanDropper.Small.NGH trojan
C:\yes.rar » RAR » yes\1.exe - Win32/TrojanDownloader.Agent.NWG trojan
C:\yes.rar » RAR » yes\14.exe - Win32/PSW.QQPass.BMD trojan
C:\yes.rar » RAR » yes\15.exe - probably unknown NewHeur_PE virus
C:\yes.rar » RAR » yes\3.exe - probably a variant of Win32/TrojanDownloader.Delf.OBA trojan
C:\yes.rar » RAR » yes\5.exe - Win32/Ceckno.DL trojan
C:\yes.rar » RAR » yes\7.exe - a variant of Win32/TrojanDownloader.VB.CEJ trojan
C:\yes.rar » RAR » yes\9.exe » NSIS » 115.exe » NSIS » DoSSSetup.dll - a variant of Win32/Adware.Cinmus application
C:\yes.rar » RAR » yes\9.exe » NSIS » 115.exe » NSIS » acpidisk.sys - a variant of Win32/Adware.Cinmus application
C:\yes.rar » RAR » yes\AVPSrv.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\ayEZZEZZ1042.dll - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\ayFKKFKK1055.dll - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\ayNNBNNB1042.dll - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\aySADSAD1032.dll - a variant of Win32/PSW.OnLineGames.PBQ trojan
C:\yes.rar » RAR » yes\DbgHlp32.dlL - probably a variant of Win32/PSW.OnLineGames.HCV trojan
C:\yes.rar » RAR » yes\fmsbbqi.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\host.exe - Win32/Qhost.AEF trojan
C:\yes.rar » RAR » yes\inudhya.dll - Win32/PSW.Delf.NKU trojan
C:\yes.rar » RAR » yes\lmmh.exe - Win32/Spy.Delf.NGN trojan
C:\yes.rar » RAR » yes\LotusHlp.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
C:\yes.rar » RAR » yes\oqnauhc.dll - Win32/PSW.OnLineGames.NLH trojan
C:\yes.rar » RAR » yes\PTSShell.dll - Win32/PSW.OnLineGames.HCV trojan
C:\yes.rar » RAR » yes\SHAProc.dat - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\soundma.exe - Win32/PSW.Delf.NKU trojan
C:\yes.rar » RAR » yes\upxdnd.dll - Win32/PSW.OnLineGames.NFL trojan
C:\yes.rar » RAR » yes\vista.exe - probably a variant of Win32/TrojanDownloader.Delf.OBZ trojan
C:\yes.rar » RAR » yes\wdfmgr.exe - a variant of Win32/Anilogo worm
C:\yes.rar » RAR » yes\WSockDrv32.dll - a variant of Win32/PSW.OnLineGames.HCV trojan
C:\yes.rar » RAR » yes\yqhs.dll - a variant of Win32/PSW.OnLineGames.MUG trojan

Palkia

红伞有些也是启发啊~

aerbeisi

今天早上就升级1个， ，还不如放假休息。处理速度很慢，我跟踪了4天，那个上报的包1天就处理10多个。

wangjay1980

42 to kl
detected: Trojan program Trojan-PSW.Win32.OnLineGames.xii        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00001.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wpc        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00002.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.vlp        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00003.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yip        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00004.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wnd        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00005.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yip        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00006.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.xkp        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00008.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wmi        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00012.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.vpd        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00013.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wjf        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00014.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uxs        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00015.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ylu        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00016.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00017.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yip        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00030.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.uir        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00031.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ylv        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\00035.exe//PE_Patch//UPack
detected: Trojan program Trojan-Dropper.Win32.Agent.fva        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\1(1).exe
detected: adware not-a-virus:AdWare.Win32.VB.ca        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\10.exe//data.rar/ie.dll
detected: Trojan program Trojan-Spy.Win32.Pophot.amq        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\11.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.bmd        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\14.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\15.exe//FSG
detected: virus Heur.Downloader (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\3.exe
detected: Trojan program Backdoor.Win32.Ceckno.fp        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\5.exe
detected: virus Heur.Worm.Generic (modification)        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\7.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: adware not-a-virus:AdWare.Win32.Cinmus.dzu        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\9.exe//stream//data0002//data0003
detected: adware not-a-virus:AdWare.Win32.Cinmus.dzu        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\9.exe//stream//data0002//data0004
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ymx        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\AVPSrv.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yhz        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\ayEZZEZZ1042.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yjm        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\ayFKKFKK1055.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.voq        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\ayNNBNNB1042.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ymz        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\DbgHlp32.dlL
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ymk        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\fmsbbqi.dll
detected: Trojan program Trojan.Win32.Qhost.aef        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\host.exe//UPack
detected: Trojan program Trojan.Win32.Agent.diq        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\inudhya.dll
detected: Trojan program Trojan.Win32.Small.uj        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\lmmh.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.vpc        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\LotusHlp.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.rlz        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\oqnauhc.dll//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wpn        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\PTSShell.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yni        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\SHAProc.dat
detected: Trojan program Trojan.Win32.Agent.diq        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\soundma.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.wmi        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\upxdnd.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yml        File: C:\Documents and Settings\Owner\×&Agrave;&Atilde;&aelig;\yes.rar/yes\WSockDrv32.dll

yangpizhi

今天那个我也看见了，昨天我也有上报几个大包，结果的确只有一个杀了。。。唉。。。
下个礼拜六我再来看看到底咋样了。。。

平淡

C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00001.exe        TrojanPSW.OnLineGames.rri.fccq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00002.exe        TrojanPSW.OnLineGames.rri.fccq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00003.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00004.exe        W32.Warezov.p        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00005.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00006.exe        W32.Warezov.p        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00008.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00012.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00013.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00014.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00015.exe        W32.Warezov.p        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00016.exe        W32.Viking.k        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00017.exe        Trojan.Cap821823.brgh        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00030.exe        W32.Warezov.p        病毒        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00031.exe        TrojanPSW.OnLineGames.uir.xepy        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\00035.exe        TrojanPSW.OnLineGames.rri.fccq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\1(1).exe        Trojan.Cap83121.dsec        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\1.exe        Trojan.Cap821820.qlmz        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\10.exe        Trojan.Cap832819.rsju.arc        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\11.exe        TrojanDropper.Agent.ivy.dzlz        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\14.exe        Trojan.Delf.nz.pfnn        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\15.exe        Packed.FSG.a        带壳程序        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\3.exe        TrojanDownloader.af.xgac        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\5.exe        Backdoor.Ceckno.dl.ldih        后门        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\9.exe        Trojan.Cap832819.kkxu.arc        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\AVPSrv.dll        TrojanPSW.OnLineGames.ymx.nvei.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\ayEZZEZZ1042.dll        TrojanDownloader.Kbizor.guuh.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\ayFKKFKK1055.dll        TrojanPSW.GameOL.msy.crdf.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\ayNNBNNB1042.dll        TrojanPSW.GameOL.mmi.axol.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\aySADSAD1032.dll        PWSteal.OnlineGames.aa.rrga.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\DbgHlp32.dlL        TrojanPSW.SO2Online.bl.bqbv.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\fmsbbqi.dll        TrojanPSW.SO2Game.u.jmaj.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\host.exe        Trojan.QHost.abe.dpcp        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\inudhya.dll        Trojan.Agent.diq.btgf.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\lmmh.exe        Trojan.Small.uj.jtvp        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\LotusHlp.dll        TrojanPSW.OnLineGames.vpc.iffy.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\oqnauhc.dll        TrojanPSW.OnlineGames.GEN.nror.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\PTSShell.dll        TrojanPSW.QQGame.gey.uvgu.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\SHAProc.dat        TrojanPSW.GameOL.mrs.kmuj.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\soundma.exe        TrojanDownloader.Agent.bxw.qecb        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\upxdnd.dll        TrojanPSW.GameOL.mrv.ecug.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\vista.exe        Heuri.Possible/Packed        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\wdfmgr.exe        Heuri.Possible/Packed        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\WSockDrv32.dll        TrojanPSW.OnLineGames.yml.ypqm.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\yes.rar>>yes\yqhs.dll        TrojanPSW.GameOL.mjf.mlsq.dll        木马        还未处理