7

qianwenxiang

Starting the file scan:
Begin scan in 'E:\AV\1.exe'
E:\AV\1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddo
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\2.exe'
E:\AV\2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\3.exe'
E:\AV\3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\A.exe'
E:\AV\A.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\ro.exe'
E:\AV\ro.exe
      [DETECTION] Is the Trojan horse TR/Inject.afb
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\xia.exe'
E:\AV\xia.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.138
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\xia2.exe'
E:\AV\xia2.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.138
      [NOTE]      The file was deleted!

End of the scan: 2008年5月8日  20:16
Used time: 00:10 min
The scan has been done completely.
      0 Scanning directories
      7 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      7 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      7 Notes

[ 本帖最后由 Exia 于 2008-5-8 20:14 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.Win32.Undef.eho   
病毒： Trojan.Win32.Agent.hd   
病毒： RootKit.Win32.Mnless.oe  
病毒： Trojan.PSW.Win32.GameOL.ka
病毒： Trojan.PSW.Win32.GameOL.gbk

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.43.32

wangjay1980

KL  最新库已经全灭

[ 本帖最后由 wangjay1980 于 2008-5-8 20:56 编辑 ]

The EQs

C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » 3.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » A.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » ro.exe - Win32/PSW.Gamania.NAD trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » xia2.exe - probably a variant of Win32/PSW.QQShou trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » xia.exe - probably a variant of Win32/PSW.QQShou trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » 1.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan
C:\Documents and Settings\Don Johnson\桌面\tr.rar » RAR » 2.exe - probably unknown NewHeur_PE virus

NobleT

全灭....

28654621

D:\download\tr.rar>>3.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
D:\download\tr.rar>>xia2.exe        Trojan.Agent.hd.vhec        木马        还未处理
D:\download\tr.rar>>xia.exe        Trojan.Agent.hd.vhec        木马        还未处理
D:\download\tr.rar>>1.exe        TrojanPSW.OnLineGames.aegv.ievf        木马        还未处理
D:\download\tr.rar>>2.exe        TrojanDropper.Gen.fgtu        木马        还未处理

28654621

ro.exe费尔没反应

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\tr.rar<RAR>:ro.exe <- Trojan.Inject.Bbd : No action
C:\Documents and Settings\All Users\Documents\Test\tr.rar<RAR>:xia2.exe <- Trojan.Psw.Onlinegames.Mmp : No action
C:\Documents and Settings\All Users\Documents\Test\tr.rar<RAR>:xia.exe <- Trojan.Psw.Onlinegames.Mmp : No action
C:\Documents and Settings\All Users\Documents\Test\tr.rar<RAR>:1.exe<FSG>:1.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Adte : No action



Scanned objects : 17

Infected objects : 4

红心王子

木马名称:Trojan-PSW.Win32.OL-Game.pei

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?