35

qianwenxiang

从这个帖子挖的http://bbs.kafan.cn/viewthread.php?tid=242597&extra=page%3D1

aerbeisi

[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__C6EDF.exe->(FSG)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__DA9EF.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__EBA33.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__F18.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__10104.exe->(embedded)->(UPack)
[Found password stealer]         <W32/OnlineGames.K.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__18060.exe->(UPX)
[Found password stealer]         <W32/OnlineGames.K.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__211C6.exe->(UPX)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__213B3.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__29F48.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__356E7.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__3574C.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__3BBB4.exe->(FSG)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__4BCA4.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__534CC.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__686AD.exe->(UPack)
[Found possible virus]         <W32/NewMalware-Rootkit-PX-based!Maximus (not disinfectable)>        C:\test\og9.rar->2008-4-27__7FF20.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__8B8D0.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__AF3C3.exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__B69F7.exe->(UPX)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__BD85F.exe->exefile->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__C6A09.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__CC5CF.exe->(embedded)->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__D6C0F.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__D6CD6.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__21404.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__2AE4F.exe->(UPack)
[Found possible virus]         <W32/NewMalware-Rootkit-PX-based!Maximus (not disinfectable)>        C:\test\og9.rar->2008-4-27__4A3FB.exe
[Found virus]         <W32/Downloader.gen10 (not disinfectable)>        C:\test\og9.rar->2008-4-27__4F74F.exe
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__54884.exe->(embedded)->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__54FAA.exe->(FSG)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__61CBA.exe->(UPack)
[Found possible security risk]         <W32/Heuristic-162!Eldorado (damaged, not disinfectable)>        C:\test\og9.rar->2008-4-27__8E394.exe->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__9C12D.exe->(FSG)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__AF94E.exe->(FSG)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\test\og9.rar->2008-4-27__B6D6D.exe->(FSG)

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\2008-4-27__C6EDF.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__DA9EF.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__EBA33.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__F18.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__10104.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajp
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4844455d.qua'!
E:\AV\新建文件夹\2008-4-27__18060.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__211C6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__213B3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__29F48.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__356E7.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__3574C.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__3BBB4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__4BCA4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__534CC.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__686AD.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__7FF20.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xxf
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajb
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__8B8D0.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/PopWin.bdl Backdoor server programs
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__AF3C3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__B69F7.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.Steal.44658
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__BD85F.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__C6A09.exe
      [DETECTION] Is the Trojan horse TR/PSW.16785
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__CC5CF.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abxk
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aji
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__D6C0F.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__D6CD6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__21404.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__2AE4F.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__4A3FB.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajb
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48444568.qua'!
E:\AV\新建文件夹\2008-4-27__4F74F.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__54884.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtn
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aji
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__54FAA.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abtp
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__61CBA.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__8E394.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__9C12D.exe
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__AF94E.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\2008-4-27__B6D6D.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年4月27日  17:19
Used time: 00:29 min

The scan has been done completely.

      1 Scanning directories
     35 Files were scanned
     38 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     33 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      0 Archives were scanned
      0 Warnings
     35 Notes

hellobaby

rising:33

The EQs

C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__C6EDF.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__DA9EF.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__EBA33.exe - a variant of Win32/PSW.OnLineGames.ZJK trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__F18.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__10104.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__18060.exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__211C6.exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__213B3.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__29F48.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__356E7.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__3574C.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__3BBB4.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__4BCA4.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__534CC.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__686AD.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__7FF20.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__8B8D0.exe - probably a variant of Win32/TrojanDownloader.Flux trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__AF3C3.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__B69F7.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__BD85F.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__C6A09.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__CC5CF.exe - a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__D6C0F.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__D6CD6.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__21404.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__2AE4F.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__4A3FB.exe - a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__4F74F.exe - a variant of Win32/PSW.Legendmir.NFR trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__54884.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__54FAA.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__61CBA.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__8E394.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__9C12D.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__AF94E.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\og9.rar » RAR » 2008-4-27__B6D6D.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan

醉一生爱妍

kl kill all

jimmyleo

KingSoft

* Scanning Directiories/Files...
D:\DOWNLOAD\S\og9.rar                                                         
D:\DOWNLOAD\S\og9.rar\2008-4-27__C6EDF.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__C6EDF.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__DA9EF.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__DA9EF.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__EBA33.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__EBA33.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.ss.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__F18.exe                                       
D:\DOWNLOAD\S\og9.rar\2008-4-27__F18.exe\FSG                                        Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__10104.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__10104.exe\FSG                                 
D:\DOWNLOAD\S\og9.rar\2008-4-27__18060.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__18060.exe\UPX                                      Found Virus: Win32.Troj.OnlineGames.sc.40960    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__211C6.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__211C6.exe\UPX                                 
D:\DOWNLOAD\S\og9.rar\2008-4-27__213B3.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__213B3.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__29F48.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__29F48.exe\FSG                                      Found Virus: Win32.Troj.OnLineGames.ea.65741    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__356E7.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__356E7.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.nm.36864    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__3574C.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__3574C.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__3BBB4.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__3BBB4.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__4BCA4.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__4BCA4.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__534CC.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__534CC.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__686AD.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__686AD.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__7FF20.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__7FF20.exe\UPX                                      Found Virus: Win32.Troj.GameOnlineT.b.65808    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__8B8D0.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__8B8D0.exe\UPack                                    Found Virus: Win32.TrojDownloader.Flux.139264    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__AF3C3.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__AF3C3.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__B69F7.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__B69F7.exe\UPX                                      Found Virus: Win32.Troj.QQPswT.bs.116858    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__BD85F.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__BD85F.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.pq.57344    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__C6A09.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__C6A09.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__CC5CF.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__CC5CF.exe\FSG                                 
D:\DOWNLOAD\S\og9.rar\2008-4-27__D6C0F.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__D6C0F.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__D6CD6.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__D6CD6.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__21404.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__21404.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__2AE4F.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__2AE4F.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__4A3FB.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__4A3FB.exe\UPX                                      Found Virus: Win32.Troj.GameOnlineT.b.65808    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__4F74F.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__4F74F.exe\UPX                                 
D:\DOWNLOAD\S\og9.rar\2008-4-27__54884.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__54884.exe\FSG                                 
D:\DOWNLOAD\S\og9.rar\2008-4-27__54FAA.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__54FAA.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__61CBA.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__61CBA.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__8E394.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__8E394.exe\UPack                                    Found Virus: Win32.Troj.OnlineGameT.wi.106496    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__9C12D.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__9C12D.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__AF94E.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__AF94E.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar\2008-4-27__B6D6D.exe                                    
D:\DOWNLOAD\S\og9.rar\2008-4-27__B6D6D.exe\FSG                                      Found Virus: Win32.Troj.GameOnlineT.nf.69897    ...Skipped!
D:\DOWNLOAD\S\og9.rar                                                               Found Virus: VirusInRar    ...Skipped!
                                                                              

* Checked Files: 71
* Found   Virus: 31
* Cleaned Virus: 0

solcroft

Scan Shell extension scan was finished.
Infections found: 33
Infected objects removed or healed: 33
Not removed or healed.: 0
Spyware found: 0
Spyware removed: 0
Not removed: 0
Warnings count: 0
Information count: 0
Scan started: Sunday, April 27, 2008
Total object scanned: 35
Errors encountered: 0

Infections
File; Infection; Result
C:\Documents and Settings\Limited User\Desktop\2008-4-27__10104.exe; Trojan horse BackDoor.Generic9.AKHX; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__18060.exe; Virus found PSW.OnlineGames; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__211C6.exe; Virus found PSW.OnlineGames; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__213B3.exe; Trojan horse PSW.OnlineGames.AMRE; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__21404.exe; Trojan horse PSW.OnlineGames.AMAZ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__29F48.exe; Trojan horse PSW.Generic6.FZQ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__2AE4F.exe; Trojan horse Agent.TZF; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__356E7.exe; Trojan horse PSW.OnlineGames.ALPC; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__3574C.exe; Trojan horse PSW.OnlineGames.AMRV; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__3BBB4.exe; Trojan horse PSW.OnlineGames.AMCH; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__4A3FB.exe; Trojan horse PSW.OnlineGames.BH; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__4BCA4.exe; Trojan horse PSW.OnlineGames.AMNN; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__534CC.exe; Trojan horse PSW.OnlineGames.AMRE; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__54884.exe; Trojan horse PSW.OnlineGames.AMCO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__54FAA.exe; Trojan horse PSW.Generic6.FZC; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__686AD.exe; Trojan horse PSW.OnlineGames.ALUN; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__7FF20.exe; Trojan horse PSW.OnlineGames.BH; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__8B8D0.exe; Trojan horse Downloader.Generic6.ALUU; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__8E394.exe; Trojan horse PSW.OnlineGames.AMHU; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__9C12D.exe; Trojan horse PSW.OnlineGames.AMMX; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__AF3C3.exe; Trojan horse PSW.OnlineGames.AMOK; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__AF94E.exe; Trojan horse PSW.OnlineGames.AMNP; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__B69F7.exe; Trojan horse PSW.Generic6.GRQ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__B6D6D.exe; Trojan horse PSW.OnlineGames.AMQB; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__BD85F.exe; Trojan horse PSW.OnlineGames.AMRC; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__C6A09.exe; Trojan horse PSW.Generic6.FYU; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__C6EDF.exe; Trojan horse PSW.OnlineGames.AMMC; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__CC5CF.exe; Trojan horse PSW.OnlineGames.AMCO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__D6C0F.exe; Trojan horse PSW.OnlineGames.AMRE; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__D6CD6.exe; Trojan horse PSW.OnlineGames.AMJZ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__DA9EF.exe; Trojan horse PSW.Generic6.GRH; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__EBA33.exe; Trojan horse PSW.OnlineGames.AMBP; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\2008-4-27__F18.exe; Trojan horse PSW.Generic6.FUN; Moved to Virus Vault

tanlimo

ess扫描日志
病毒库版本: 3057 (20080426)
日期: 2008-4-27  时间: 18:25:11
已扫描的磁盘、文件夹和文件: G:\og9.rar
G:\og9.rar > RAR > 2008-4-27__C6EDF.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__DA9EF.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__EBA33.exe - Win32/PSW.OnLineGames.ZJK 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__F18.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__10104.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__18060.exe - Win32/PSW.OnLineGames.NFN 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__211C6.exe - Win32/PSW.OnLineGames.NFN 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__213B3.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__29F48.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__356E7.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__3574C.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__3BBB4.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__4BCA4.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__534CC.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__686AD.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__7FF20.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__8B8D0.exe - 可能是 Win32/TrojanDownloader.Flux 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__AF3C3.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__B69F7.exe - Win32/PSW.QQPass.NCZ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__BD85F.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__C6A09.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__CC5CF.exe - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__D6C0F.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__D6CD6.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__21404.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__2AE4F.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__4A3FB.exe - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__4F74F.exe - Win32/PSW.Legendmir.NFR 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__54884.exe - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__54FAA.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__61CBA.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__8E394.exe - Win32/PSW.OnLineGames.NML 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__9C12D.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__AF94E.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
G:\og9.rar > RAR > 2008-4-27__B6D6D.exe - 可能是 Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
已扫描的对象数: 35
发现的威胁数: 35
完成时间: 18:25:42  总扫描时间: 31 秒 (00:00:31)

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abzs        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__C6EDF.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abtl        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__DA9EF.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abrz        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__EBA33.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abto        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__F18.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abxr        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__10104.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.jnb        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__18060.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aqr        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__211C6.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kuw        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__213B3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abud        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__29F48.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.zvr        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__356E7.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kuw        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__3574C.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abtt        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__3BBB4.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abzn        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__4BCA4.exe//FSG
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kuw        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__534CC.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kmo        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__686AD.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abux        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__7FF20.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Popwin.bdl        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__8B8D0.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.ktp        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__AF3C3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.bsi        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__B69F7.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xzp        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__BD85F.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abum        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__C6A09.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abxj        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__CC5CF.exe//FSG
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kuw        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__D6C0F.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abwp        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__D6CD6.exe//FSG
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.krs        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__21404.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kqv        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__2AE4F.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abku        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__4A3FB.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Agent.hau        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__4F74F.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abtn        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__54884.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.abtp        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__54FAA.exe//FSG
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.kqv        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__61CBA.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.krs        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__8E394.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acai        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__9C12D.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acch        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__AF94E.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acbx        檔案: C:\Documents and Settings\kato9096\桌面\242854.rar/2008-4-27__B6D6D.exe//FSG


35