X31

mofunzone

清空
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\TDDOWNLOAD'
C:\Documents and Settings\Administrator\My Documents\TDDOWNLOAD\
  a0.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  a1.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aij
            [WARNING]   Infected files in archives cannot be repaired!
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a10.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a11.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  a12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aij
            [WARNING]   Infected files in archives cannot be repaired!
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aaem
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/OnLineGames.C.1
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a14.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  a15.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.7
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Agent.agp
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/OnLineGames.C.1
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a18.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.39
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.6
      [NOTE]      The file was deleted!
  a20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a21.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!
  a22.exe
      [DETECTION] Is the Trojan horse TR/PSW.16513
      [NOTE]      The file was deleted!
  a23.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a25.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aajr
                [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a26.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aajr
                [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a27.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aani
                [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a28.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aani
                [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a29.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aani
                [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a3.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a4.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ZFE.3
      [NOTE]      The file was deleted!
  a6.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Agent.agp
            [WARNING]   Infected files in archives cannot be repaired!
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/OnLineGames.C.1
            [WARNING]   Infected files in archives cannot be repaired!
      [NOTE]      The file was deleted!
  a7.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aij
            [WARNING]   Infected files in archives cannot be repaired!
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4834e06e.qua'!
  a8.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: OVL
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
  a9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aaog
      [NOTE]      The file was deleted!
  der.exe
      [DETECTION] Is the Trojan horse TR/Agent.edm.1
      [NOTE]      The file was deleted!
  oko.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Tiny.aas
      [NOTE]      The file was deleted!


End of the scan: 2008年4月16日  22:29
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
     36 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     30 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -5 Files not concerned
      0 Archives were scanned
     16 Warnings
     31 Notes

bjfhj

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/4/17
开始时间： 2008/4/17 13:32
引擎： 引擎A (AVK 18.3461), 引擎B (AVKB 18.212)
启发式： 开启
档案文件： 开启
系统区域： 开启

检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar

对象： a29.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aasd (引擎A)
对象： a1.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aawe (引擎A)
对象： a2.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aakp (引擎A)
对象： a3.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aadv (引擎A)
对象： a4.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.QQPass.bqu (引擎A)
对象： a5.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.zfe (引擎A)
对象： a6.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aafo (引擎A)
对象： a7.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aayx (引擎A)
对象： a8.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aafe (引擎A)
对象： a9.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aaog (引擎A)
对象： a12.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aawe (引擎A)
对象： a13.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aafl (引擎A)
对象： a14.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aaek (引擎A)
对象： a15.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aaef (引擎A)
对象： a16.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aaeb (引擎A)
对象： a17.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aafo (引擎A)
对象： a18.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aafp (引擎A)
对象： a19.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.QQPass.bpi (引擎A)
对象： a20.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aadz (引擎A)
对象： a21.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.Lmir.bpv (引擎A)
对象： a22.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aaeq (引擎A)
对象： a23.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aadx (引擎A)
对象： a25.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aalm (引擎A)
对象： a26.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aajs (引擎A)
对象： a27.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aapn (引擎A)
对象： a28.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan-PSW.Win32.OnLineGames.aasd (引擎A)
对象： oko.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan.Win32.PopUpper.r (引擎A)
对象： der.exe
        在压缩档案中： C:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar
        状态： 检测到病毒
        病毒： Trojan.Win32.Agent.edm (引擎A)
对象： TDDOWNLOAD.rar
        路径: C:\Documents and Settings\Administrator\桌面
        状态： 病毒，文件被删除
        病毒： Trojan-PSW.Win32.OnLineGames.aasd (2x), Trojan-PSW.Win32.OnLineGames.aawe (2x), Trojan-PSW.Win32.OnLineGames.aakp, Trojan-PSW.Win32.OnLineGames.aadv, Trojan-PSW.Win32.QQPass.bqu, Trojan-PSW.Win32.OnLineGames.zfe, Trojan-PSW.Win32.OnLineGames.aafo (2x), Trojan-PSW.Win32.OnLineGames.aayx, Trojan-PSW.Win32.OnLineGames.aafe, Trojan-PSW.Win32.OnLineGames.aaog, Trojan-PSW.Win32.OnLineGames.aafl, Trojan-PSW.Win32.OnLineGames.aaek, Trojan-PSW.Win32.OnLineGames.aaef, Trojan-PSW.Win32.OnLineGames.aaeb, Trojan-PSW.Win32.OnLineGames.aafp, Trojan-PSW.Win32.QQPass.bpi, Trojan-PSW.Win32.OnLineGames.aadz, Trojan-PSW.Win32.Lmir.bpv, Trojan-PSW.Win32.OnLineGames.aaeq, Trojan-PSW.Win32.OnLineGames.aadx, Trojan-PSW.Win32.OnLineGames.aalm, Trojan-PSW.Win32.OnLineGames.aajs, Trojan-PSW.Win32.OnLineGames.aapn, Trojan.Win32.PopUpper.r, Trojan.Win32.Agent.edm (引擎A)

检测执行时间： 2008/4/17 13:32
    1个文件已检测
    1个受感染文件
    0个可疑文件被发现

spaceplane

已扫描的磁盘，文件夹及文件：E:\pic\_PICtemp\TDDOWNLOAD.rar
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a29.exe - Win32/PSW.OnLineGames.MUG 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a0.exe - Win32/Agent.NOS 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a1.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a2.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a3.exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a4.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a5.exe - Win32/PSW.OnLineGames.PBQ 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a6.exe - Win32/PSW.OnLineGames.NMQ 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a7.exe - Win32/PSW.OnLineGames.NMQ 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a8.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a9.exe - Win32/PSW.OnLineGames.PBQ 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a10.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a11.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a12.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a13.exe - 可能是 Win32/PSW.OnLineGames.NMQ 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a14.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a15.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a16.exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a17.exe - Win32/PSW.OnLineGames.NMQ 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a18.exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a19.exe - Win32/PSW.QQPass.BPI 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a20.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a21.exe - Win32/PSW.WOW.WU 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a22.exe - Win32/PSW.OnLineGames.NFL 木马
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a23.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a25.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a26.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a27.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>a28.exe - Win32/PSW.OnLineGames.MUG 木马的变种
E:\pic\_PICtemp\TDDOWNLOAD.rar >>RAR >>oko.exe - Win32/TrojanClicker.Tiny.NAA 木马
已扫描的文件数目：31
已发现的病毒数目：30
完成时间： 13:37:25 总扫描时间：10 秒 (00:00:10)

挪威的冬天

信息        2008-04-17  13:37:43        您此次查毒清除了23个病毒                       
信息        2008-04-17  13:37:43        您此次查毒共查出23个病毒以及危险代码                       
信息        2008-04-17  13:37:43        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件57个                       
信息        2008-04-17  13:37:43        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

红心王子

时间        处理结果        木马名称        木马进程名        木马文件创建者
2008-04-17 13:39:56        处理成功        Trojan.Win32.Agent.lyv        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\DER.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-Clicker.Win32.Small.nff        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\OKO.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.eue        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A27.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.esq        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A26.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.esg        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A25.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.diy        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A23.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.erp        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A22.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.OL-Game.eri        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A20.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:55        处理成功        Trojan-PSW.Win32.QQPass.jaj        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A19.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.ery        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A18.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.erg        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A17.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esh        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A16.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.ess        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A15.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esi        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A14.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esk        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A13.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esa        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A9.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.erf        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A6.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.dhu        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A5.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esc        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A3.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-04-17 13:39:54        处理成功        Trojan-PSW.Win32.OL-Game.esf        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\A2.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE

梦想奇迹

小红伞查了37个出来啊

mofunzone

记数问题，拖壳之后的文件也算一个，这样就变成一个文件杀2个了

shixinlong044

ESET30个

ballakay

Scanning Report
17 April 2008 16:07:03 - 16:07:05
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\TDDOWNLOAD.rar


--------------------------------------------------------------------------------

Result: 28 malware found
Trojan-PSW.Win32.OnLineGames.aasd (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a29.exe
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a28.exe
Trojan-PSW.Win32.OnLineGames.aawe (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a1.exe
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a12.exe
Trojan-PSW.Win32.OnLineGames.aakp (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a2.exe
Trojan-PSW.Win32.OnLineGames.aadv (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a3.exe
Trojan-PSW.Win32.QQPass.bqu (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a4.exe
Trojan-PSW.Win32.OnLineGames.zfe (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a5.exe
Trojan-PSW.Win32.OnLineGames.aafo (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a6.exe
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a17.exe
Trojan-PSW.Win32.OnLineGames.aayx (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a7.exe
Trojan-PSW.Win32.OnLineGames.aafe (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a8.exe
Trojan-PSW.Win32.OnLineGames.aaog (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a9.exe
Trojan-PSW.Win32.OnLineGames.aafl (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a13.exe
Trojan-PSW.Win32.OnLineGames.aaek (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a14.exe
Trojan-PSW.Win32.OnLineGames.aaef (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a15.exe
Trojan-PSW.Win32.OnLineGames.aaeb (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a16.exe
Trojan-PSW.Win32.OnLineGames.aafp (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a18.exe
Trojan-PSW.Win32.QQPass.bpi (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a19.exe
Trojan-PSW.Win32.OnLineGames.aadz (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a20.exe
Trojan-PSW.Win32.Lmir.bpv (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a21.exe
Trojan-PSW.Win32.OnLineGames.aaeq (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a22.exe
Trojan-PSW.Win32.OnLineGames.aadx (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a23.exe
Trojan-PSW.Win32.OnLineGames.aalm (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a25.exe
Trojan-PSW.Win32.OnLineGames.aajs (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a26.exe
Trojan-PSW.Win32.OnLineGames.aapn (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\a27.exe
Trojan.Win32.PopUpper.r (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\oko.exe
Trojan.Win32.Agent.edm (virus)
C:\Users\Administrator\Desktop\TDDOWNLOAD.rar\der.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 32
Not scanned: 0
Result:
Viruses: 28
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-04-17_03
Spyware: 2008-04-17_03
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-04-17
F-Secure Libra: 2.04.04, 2008-04-15
F-Secure Orion: 1.02.38, 2008-04-17
F-Secure Draco: 1.00.35, 2008-04-02
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Quarantine and delete
Spyware: Quarantine and delete

sam.to

Scanned file:   TDDOWNLOAD.rar - Infected
TDDOWNLOAD.rar/a29.exe - infected by Trojan-PSW.Win32.OnLineGames.aasd
TDDOWNLOAD.rar/a0.exe - OK
TDDOWNLOAD.rar/a0.exe - OK
TDDOWNLOAD.rar/a1.exe - infected by Trojan-PSW.Win32.OnLineGames.aawe
TDDOWNLOAD.rar/a2.exe - infected by Trojan-PSW.Win32.OnLineGames.aakp
TDDOWNLOAD.rar/a3.exe - infected by Trojan-PSW.Win32.OnLineGames.aadv
TDDOWNLOAD.rar/a4.exe - infected by Trojan-PSW.Win32.QQPass.bqu
TDDOWNLOAD.rar/a5.exe - infected by Trojan-PSW.Win32.OnLineGames.zfe
TDDOWNLOAD.rar/a6.exe - infected by Trojan-PSW.Win32.OnLineGames.aafo
TDDOWNLOAD.rar/a7.exe - OK
TDDOWNLOAD.rar/a7.exe - OK
TDDOWNLOAD.rar/a7.exe - OK
TDDOWNLOAD.rar/a8.exe - infected by Trojan-PSW.Win32.OnLineGames.aafe
TDDOWNLOAD.rar/a9.exe - infected by Trojan-PSW.Win32.OnLineGames.aaog
TDDOWNLOAD.rar/a10.exe - OK
TDDOWNLOAD.rar/a10.exe - OK
TDDOWNLOAD.rar/a11.exe - OK
TDDOWNLOAD.rar/a11.exe - OK
TDDOWNLOAD.rar/a12.exe - infected by Trojan-PSW.Win32.OnLineGames.aawe
TDDOWNLOAD.rar/a13.exe - infected by Trojan-PSW.Win32.OnLineGames.aafl
TDDOWNLOAD.rar/a14.exe - infected by Trojan-PSW.Win32.OnLineGames.aaek
TDDOWNLOAD.rar/a15.exe - infected by Trojan-PSW.Win32.OnLineGames.aaef
TDDOWNLOAD.rar/a16.exe - infected by Trojan-PSW.Win32.OnLineGames.aaeb
TDDOWNLOAD.rar/a17.exe - infected by Trojan-PSW.Win32.OnLineGames.aafo
TDDOWNLOAD.rar/a18.exe - infected by Trojan-PSW.Win32.OnLineGames.aafp
TDDOWNLOAD.rar/a19.exe - infected by Trojan-PSW.Win32.QQPass.bpi
TDDOWNLOAD.rar/a20.exe - infected by Trojan-PSW.Win32.OnLineGames.aadz
TDDOWNLOAD.rar/a21.exe - infected by Trojan-PSW.Win32.Lmir.bpv
TDDOWNLOAD.rar/a22.exe - infected by Trojan-PSW.Win32.OnLineGames.aaeq
TDDOWNLOAD.rar/a23.exe - infected by Trojan-PSW.Win32.OnLineGames.aadx
TDDOWNLOAD.rar/a25.exe - infected by Trojan-PSW.Win32.OnLineGames.aalm
TDDOWNLOAD.rar/a26.exe - infected by Trojan-PSW.Win32.OnLineGames.aajs
TDDOWNLOAD.rar/a27.exe - infected by Trojan-PSW.Win32.OnLineGames.aapn
TDDOWNLOAD.rar/a28.exe - infected by Trojan-PSW.Win32.OnLineGames.aasd
TDDOWNLOAD.rar/oko.exe - infected by Trojan.Win32.PopUpper.r
TDDOWNLOAD.rar/der.exe - infected by Trojan.Win32.Agent.edm

上报卡巴