batch x27

jimmyleo

aerbeisi

1688388728

k8
快速扫描: 于 2008-5-3 11:55:54 完成   (事件: 120, 对象: 76, 时间: 0:00:58)
2008-5-3 11:55:55 已完成任务   
2008-5-3 11:55:54 已删除: Worm.Win32.AutoRun.dbm D:\样本\batch\xxz.exe  
2008-5-3 11:55:50 已被检测到: Worm.Win32.AutoRun.dbm D:\样本\batch\xxz.exe/FSG  
2008-5-3 11:55:50 已删除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\9.exe  
2008-5-3 11:55:50 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\9.exe/PE_Patch/UPack  
2008-5-3 11:55:50 已删除: Trojan-PSW.Win32.OnLineGames.abaz D:\样本\batch\8.exe  
2008-5-3 11:55:50 已被检测到: Trojan-PSW.Win32.OnLineGames.abaz D:\样本\batch\8.exe/PE_Patch.UPX/UPX  
2008-5-3 11:55:50 已删除: Trojan-PSW.Win32.Lmir.bvh D:\样本\batch\7.exe  
2008-5-3 11:55:50 已被检测到: Trojan-PSW.Win32.Lmir.bvh D:\样本\batch\7.exe/PE_Patch/UPack  
2008-5-3 11:55:49 已删除: Trojan-PSW.Win32.OnLineGames.abto D:\样本\batch\6.exe  
2008-5-3 11:55:49 已被检测到: Trojan-PSW.Win32.OnLineGames.abto D:\样本\batch\6.exe/FSG  
2008-5-3 11:55:49 已删除: Trojan-PSW.Win32.OnLineGames.abzz D:\样本\batch\5.exe  
2008-5-3 11:55:49 已被检测到: Trojan-PSW.Win32.OnLineGames.abzz D:\样本\batch\5.exe/FSG  
2008-5-3 11:55:49 已删除: Trojan-PSW.Win32.OnLineGames.yzt D:\样本\batch\4.exe  
2008-5-3 11:55:49 已被检测到: Trojan-PSW.Win32.OnLineGames.yzt D:\样本\batch\4.exe/PE_Patch/UPack  
2008-5-3 11:55:49 已删除: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\3.exe  
2008-5-3 11:55:49 已被检测到: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\3.exe/PE_Patch/UPack  
2008-5-3 11:55:49 已删除: Trojan-PSW.Win32.OnLineGames.acsv D:\样本\batch\28.exe  
2008-5-3 11:55:49 已被检测到: Trojan-PSW.Win32.OnLineGames.acsv D:\样本\batch\28.exe/FSG  
2008-5-3 11:55:49 已删除: Trojan-Downloader.Win32.Small.suu D:\样本\batch\27.exe  
2008-5-3 11:55:49 已被检测到: Trojan-Downloader.Win32.Small.suu D:\样本\batch\27.exe/PE_Patch/UPack/PE_Patch.PECompact/PecBundle/PECompact  
2008-5-3 11:55:48 已删除: Trojan-Downloader.Win32.VB.dgg D:\样本\batch\26.exe  
2008-5-3 11:55:48 已被检测到: Trojan-Downloader.Win32.VB.dgg D:\样本\batch\26.exe/PE_Patch/UPack  
2008-5-3 11:55:47 已删除: Trojan.Win32.Agent.kuw D:\样本\batch\25.exe  
2008-5-3 11:55:47 已被检测到: Trojan.Win32.Agent.kuw D:\样本\batch\25.exe/PE_Patch/UPack  
2008-5-3 11:55:47 已删除: Trojan-PSW.Win32.Nilage.cfp D:\样本\batch\24.exe  
2008-5-3 11:55:47 已被检测到: Trojan-PSW.Win32.Nilage.cfp D:\样本\batch\24.exe/FSG  
2008-5-3 11:55:47 已删除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\23.exe  
2008-5-3 11:55:47 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\23.exe/PE_Patch/UPack  
2008-5-3 11:55:47 已删除: Heur.Trojan.Generic D:\样本\batch\21.exe  
2008-5-3 11:55:47 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:31 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:31 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:30 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:30 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:26 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:26 已删除: Trojan-PSW.Win32.OnLineGames.xzp D:\样本\batch\20.exe  
2008-5-3 11:55:26 已被检测到: Trojan-PSW.Win32.OnLineGames.xzp D:\样本\batch\20.exe/PE_Patch/UPack  
2008-5-3 11:55:26 已删除: Trojan-PSW.Win32.OnLineGames.acqx D:\样本\batch\2.exe  
2008-5-3 11:55:26 已被检测到: Trojan-PSW.Win32.OnLineGames.acqx D:\样本\batch\2.exe/FSG  
2008-5-3 11:55:26 已删除: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\19.exe  
2008-5-3 11:55:26 已被检测到: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\19.exe/PE_Patch/UPack  
2008-5-3 11:55:26 已删除: Trojan.Win32.Agent.glt D:\样本\batch\18.exe  
2008-5-3 11:55:26 已被检测到: Trojan.Win32.Agent.glt D:\样本\batch\18.exe/PE_Patch/UPack  
2008-5-3 11:55:26 已删除: Trojan-PSW.Win32.OnLineGames.acvc D:\样本\batch\16.exe  
2008-5-3 11:55:26 已被检测到: Trojan-PSW.Win32.OnLineGames.acvc D:\样本\batch\16.exe/FSG  
2008-5-3 11:55:26 已删除: Trojan-PSW.Win32.OnLineGames.acld D:\样本\batch\15.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.OnLineGames.acld D:\样本\batch\15.exe/PE_Patch/UPack  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.OnLineGames.ablh D:\样本\batch\14.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.OnLineGames.ablh D:\样本\batch\14.exe/FSG  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.OnLineGames.acpw D:\样本\batch\13.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.OnLineGames.acpw D:\样本\batch\13.exe/PE_Patch/UPack  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\12.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\12.exe/PE_Patch/UPack  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.QQPass.btj D:\样本\batch\11.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.QQPass.btj D:\样本\batch\11.exe/UPX  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.OnLineGames.acrt D:\样本\batch\10.exe  
2008-5-3 11:55:25 已被检测到: Trojan-PSW.Win32.OnLineGames.acrt D:\样本\batch\10.exe/PE_Patch.UPX/UPX  
2008-5-3 11:55:25 已删除: Trojan-PSW.Win32.OnLineGames.abjc D:\样本\batch\1.exe  
2008-5-3 11:55:15 已被检测到: Trojan-PSW.Win32.OnLineGames.abjc D:\样本\batch\1.exe/PE_Patch.UPX/UPX  
2008-5-3 11:55:15 未清除: Worm.Win32.AutoRun.dbm D:\样本\batch\xxz.exe/FSG 已延期
2008-5-3 11:55:15 已被检测到: Worm.Win32.AutoRun.dbm D:\样本\batch\xxz.exe/FSG  
2008-5-3 11:55:15 未清除: Trojan-PSW.Win32.OnLineGames.abaz D:\样本\batch\8.exe/PE_Patch.UPX/UPX 已延期
2008-5-3 11:55:15 未清除: Trojan-PSW.Win32.Lmir.bvh D:\样本\batch\7.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:15 未清除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\9.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.OnLineGames.abaz D:\样本\batch\8.exe/PE_Patch.UPX/UPX  
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\9.exe/PE_Patch/UPack  
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.Lmir.bvh D:\样本\batch\7.exe/PE_Patch/UPack  
2008-5-3 11:55:14 未清除: Trojan-PSW.Win32.OnLineGames.abto D:\样本\batch\6.exe/FSG 已延期
2008-5-3 11:55:14 未清除: Trojan-PSW.Win32.OnLineGames.yzt D:\样本\batch\4.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:14 未清除: Trojan-PSW.Win32.OnLineGames.abzz D:\样本\batch\5.exe/FSG 已延期
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.OnLineGames.abzz D:\样本\batch\5.exe/FSG  
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.OnLineGames.abto D:\样本\batch\6.exe/FSG  
2008-5-3 11:55:14 已被检测到: Trojan-PSW.Win32.OnLineGames.yzt D:\样本\batch\4.exe/PE_Patch/UPack  
2008-5-3 11:55:13 未清除: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\3.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:13 未清除: Trojan-Downloader.Win32.Small.suu D:\样本\batch\27.exe/PE_Patch/UPack/PE_Patch.PECompact/PecBundle/PECompact 已延期
2008-5-3 11:55:13 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:13 已被检测到: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\3.exe/PE_Patch/UPack  
2008-5-3 11:55:12 未清除: Trojan-PSW.Win32.OnLineGames.acsv D:\样本\batch\28.exe/FSG 已延期
2008-5-3 11:55:12 已被检测到: Trojan-Downloader.Win32.Small.suu D:\样本\batch\27.exe/PE_Patch/UPack/PE_Patch.PECompact/PecBundle/PECompact  
2008-5-3 11:55:11 已被检测到: Trojan-PSW.Win32.OnLineGames.acsv D:\样本\batch\28.exe/FSG  
2008-5-3 11:55:10 未清除: Trojan-Downloader.Win32.VB.dgg D:\样本\batch\26.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:09 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:09 未清除: Trojan.Win32.Agent.kuw D:\样本\batch\25.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:09 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:09 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:09 已被检测到: Trojan-Downloader.Win32.VB.dgg D:\样本\batch\26.exe/PE_Patch/UPack  
2008-5-3 11:55:09 已被检测到: Heur.Invader D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:09 已被检测到: Trojan.Win32.Agent.kuw D:\样本\batch\25.exe/PE_Patch/UPack  
2008-5-3 11:55:09 未清除: Trojan-PSW.Win32.Nilage.cfp D:\样本\batch\24.exe/FSG 已延期
2008-5-3 11:55:09 已被检测到: Trojan-PSW.Win32.Nilage.cfp D:\样本\batch\24.exe/FSG  
2008-5-3 11:55:09 未清除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\23.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:09 未清除: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG 已延期
2008-5-3 11:55:09 已被检测到: Heur.Trojan.Generic D:\样本\batch\21.exe/FSG  
2008-5-3 11:55:09 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\23.exe/PE_Patch/UPack  
2008-5-3 11:55:09 未清除: Trojan-PSW.Win32.OnLineGames.xzp D:\样本\batch\20.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:09 已被检测到: Trojan-PSW.Win32.OnLineGames.xzp D:\样本\batch\20.exe/PE_Patch/UPack  
2008-5-3 11:55:09 未清除: Trojan.Win32.Agent.glt D:\样本\batch\18.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:09 未清除: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\19.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:08 未清除: Trojan-PSW.Win32.OnLineGames.acqx D:\样本\batch\2.exe/FSG 已延期
2008-5-3 11:55:08 已被检测到: Trojan-PSW.Win32.OnLineGames.acuo D:\样本\batch\19.exe/PE_Patch/UPack  
2008-5-3 11:55:08 已被检测到: Trojan-PSW.Win32.OnLineGames.acqx D:\样本\batch\2.exe/FSG  
2008-5-3 11:55:08 已被检测到: Trojan.Win32.Agent.glt D:\样本\batch\18.exe/PE_Patch/UPack  
2008-5-3 11:55:08 未清除: Trojan-PSW.Win32.OnLineGames.acld D:\样本\batch\15.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:08 已被检测到: Trojan-PSW.Win32.OnLineGames.acld D:\样本\batch\15.exe/PE_Patch/UPack  
2008-5-3 11:55:08 未清除: Trojan-PSW.Win32.OnLineGames.acvc D:\样本\batch\16.exe/FSG 已延期
2008-5-3 11:55:08 未清除: Trojan-PSW.Win32.OnLineGames.acpw D:\样本\batch\13.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:08 已被检测到: Trojan-PSW.Win32.OnLineGames.acvc D:\样本\batch\16.exe/FSG  
2008-5-3 11:55:08 已被检测到: Trojan-PSW.Win32.OnLineGames.acpw D:\样本\batch\13.exe/PE_Patch/UPack  
2008-5-3 11:55:07 未清除: Trojan-PSW.Win32.OnLineGames.ablh D:\样本\batch\14.exe/FSG 已延期
2008-5-3 11:55:07 已被检测到: Trojan-PSW.Win32.OnLineGames.ablh D:\样本\batch\14.exe/FSG  
2008-5-3 11:55:07 未清除: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\12.exe/PE_Patch/UPack 已延期
2008-5-3 11:55:07 已被检测到: Trojan-PSW.Win32.OnLineGames.actb D:\样本\batch\12.exe/PE_Patch/UPack  
2008-5-3 11:55:07 未清除: Trojan-PSW.Win32.OnLineGames.acrt D:\样本\batch\10.exe/PE_Patch.UPX/UPX 已延期
2008-5-3 11:55:07 未清除: Trojan-PSW.Win32.OnLineGames.abjc D:\样本\batch\1.exe/PE_Patch.UPX/UPX 已延期
2008-5-3 11:55:07 未清除: Trojan-PSW.Win32.QQPass.btj D:\样本\batch\11.exe/UPX 已延期
2008-5-3 11:55:06 已被检测到: Trojan-PSW.Win32.OnLineGames.acrt D:\样本\batch\10.exe/PE_Patch.UPX/UPX  
2008-5-3 11:55:06 已被检测到: Trojan-PSW.Win32.QQPass.btj D:\样本\batch\11.exe/UPX  
2008-5-3 11:55:06 已被检测到: Trojan-PSW.Win32.OnLineGames.abjc D:\样本\batch\1.exe/PE_Patch.UPX/UPX  
2008-5-3 11:54:56 已启动任务   
快速扫描: 于 2008-5-3 11:55:54 完成   (事件: 120, 对象: 76, 时间: 0:00:58)

[ 本帖最后由 1688388728 于 2008-5-3 12:06 编辑 ]

jimmyleo

virobot有自己附加的引擎？
报法好像不像bd。。

Roboon

Roboon

hahacomcn

Begin scan in 'C:\Documents and Settings\cnelf\桌面\batch.rar'
C:\Documents and Settings\cnelf\桌面\batch.rar
  [0] Archive type: RAR
    --> 19.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 28.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 27.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> 26.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Agent.4584.1
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.cfp
    --> 23.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 12.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
  --> xxz.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.dbm
    --> 9.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ABAZ.1
    --> 4.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
    --> 3.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 2.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 18.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 15.exe
      [1] Archive type: OVL
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acrj
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 13.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 11.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.42
    --> 10.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
          [3] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.WNB
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abjc
    --> 25.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 21.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 20.exe
      [1] Archive type: OVL
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.accf
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajv
      [NOTE]      A backup was created as '488fe240.qua'  ( QUARANTINE )


End of the scan: 2008年5月3日  11:54
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     28 Files were scanned
     34 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -6 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

无尽藏海

Begin scan in 'E:\VIRUS\batch.rar'
E:\VIRUS\batch.rar
  [0] Archive type: RAR
    --> 19.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 28.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 27.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
    --> 26.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Agent.4584.1
  --> 24.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.cfp
    --> 23.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 12.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
  --> xxz.exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.dbm
    --> 9.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ABAZ.1
    --> 4.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
    --> 3.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 2.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 18.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 15.exe
      [1] Archive type: OVL
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acrj
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 13.exe
      [1] Archive type: OVL
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acqi.1
    --> 11.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.42
    --> 10.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
          [3] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.WNB
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.abjc
    --> 25.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> 21.exe
          [DETECTION] Is the Trojan horse TR/Dropper.Gen
    --> 20.exe
      [1] Archive type: OVL
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.accf
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajv
      [WARNING]   The file was ignored!


End of the scan: 2007年4月1日  11:58
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
     28 Files were scanned
     34 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -6 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

wangjay1980

TO KL

The EQs

C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 19.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 28.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 27.exe - a variant of Win32/TrojanDownloader.Agent.NWE trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 26.exe - Win32/VB.NMD trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 24.exe - Win32/VB.NMH trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 23.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 12.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » xxz.exe - Win32/AutoRun.JH worm
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 9.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 7.exe - probably a variant of Win32/PSW.WOW.WU trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 6.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 4.exe - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 18.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 16.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 15.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 14.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 13.exe - a variant of Win32/PSW.OnLineGames.XZN trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 11.exe - a variant of Win32/PSW.QQPass.NCZ trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 10.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 1.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 25.exe - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 21.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don Johnson\桌面\batch.rar » RAR » 20.exe - Win32/PSW.OnLineGames.XZN trojan

红心王子

时间        处理结果        木马名称        木马进程名        木马文件创建者
2008-05-03 12:00:48        处理成功        Trojan-PSW.Win32.OL-Game.lez        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\20.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:48        处理成功        Trojan.Win32.Agent.mpg        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\25.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:48        处理成功        Rootkit.Win32.Agent.up        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\1.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.lou        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\10.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.jxq        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\14.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.mjb        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\15.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.fyc        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\4.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.lfe        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\5.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.jxx        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\6.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:47        处理成功        Trojan-PSW.Win32.OL-Game.lfg        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\8.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:46        处理成功        Worm.Win32.AutoRun.bfa        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\XXZ.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:46        处理成功        Trojan-PSW.Win32.OL-Game.mjs        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\12.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:46        处理成功        Trojan-PSW.Win32.Nilages.ibi        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\24.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:46        处理成功        Trojan-Downloader.Win32.VB.eik        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\26.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-05-03 12:00:46        处理成功        Trojan-Downloader.Win32.Small.nhu        C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\27.EXE        C:\PROGRAM FILES\WINRAR\WINRAR.EXE