继续。。。

电影结束了

饿。。。。

Starting the file scan:

Begin scan in 'E:\AV\123456789.rar'
E:\AV\123456789.rar
  [0] Archive type: RAR
    --> MMKAFNFW1086.dll
          [DETECTION] Is the Trojan horse TR/Spy.Gen
    --> MMMHXGGD1059.dll
          [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> zzz.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.fsd
    --> MMSHYLQE1078.dll
          [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> wrqszl.dll
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
  --> 0x01xx8p.exe
      [DETECTION] Contains detection pattern of the worm WORM/Otwycal.I
      [NOTE]      The file was deleted!


End of the scan: 2008年5月28日  15:04
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

The file 'SysFile.brk' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows XP (SP3)'.

[ 本帖最后由 Exia 于 2008-5-28 15:09 编辑 ]

挪威的冬天

信息        2008-05-28  15:22:42        您此次查毒清除了6个病毒                       
信息        2008-05-28  15:22:42        您此次查毒共查出6个病毒以及危险代码                       
信息        2008-05-28  15:22:42        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件12个                       
信息        2008-05-28  15:22:42        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-28  15:22:42        D:\Desktop\123456789.rar\0x01xx8p.exe        Worm.AutoRuns.m.991232        清除成功       
病毒        2008-05-28  15:22:42        D:\Desktop\123456789.rar\wrqszl.dll        Win32.Troj.OnlineGamesT.ak.222208        清除成功       
病毒        2008-05-28  15:22:41        D:\Desktop\123456789.rar\MMSHYLQE1078.dll        Win32.Troj.AgentT.dl.86128        清除成功       
病毒        2008-05-28  15:22:41        D:\Desktop\123456789.rar\zzz.sys        Win32.Troj.DownloaderT.rk.10496        清除成功       
病毒        2008-05-28  15:22:41        D:\Desktop\123456789.rar\MMMHXGGD1059.dll        Win32.Troj.AgentT.dl.86128        清除成功       
病毒        2008-05-28  15:22:41        D:\Desktop\123456789.rar\MMKAFNFW1086.dll        Win32.Troj.AgentT.dl.86128        清除成功

yunhan123

C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > MMKAFNFW1086.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > MMMHXGGD1059.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > zzz.sys - Win32/TrojanDownloader.Delf.OBY 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > MMSHYLQE1078.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > wrqszl.dll - Win32/PSW.OnLineGames.NOA 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\123456789.rar > RAR > 0x01xx8p.exe - Win32/AutoRun.NAD 病毒 的变种
已扫描的对象数: 8
发现的威胁数: 6

[ 本帖最后由 yunhan123 于 2008-5-28 15:25 编辑 ]

无尽藏海

28:05:2008 16:40:05 SEARCHTASK "USER_DEFINED" started...
scan item: E:\VIRUS\123456789
File scanned: E:\VIRUS\123456789\0x01xx8p.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Delf.gzs"
File scanned: E:\VIRUS\123456789\MMKAFNFW1086.dll - SIGNATURE FOUND "Trojan-PWS.Win32.Small.br"
File scanned: E:\VIRUS\123456789\MMMHXGGD1059.dll - SIGNATURE FOUND "Trojan-PWS.Win32.Small.br"
File scanned: E:\VIRUS\123456789\MMSHYLQE1078.dll - SIGNATURE FOUND "Trojan-PWS.Win32.Small.br"
File scanned: E:\VIRUS\123456789\wrqszl.dll - SIGNATURE FOUND "Trojan.Win32.Tilcun.B"
File scanned: E:\VIRUS\123456789\zzz.sys - SIGNATURE FOUND "Trojan-Downloader.Win32.Delf.fsd"
28:05:2008 16:40:06 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 7
Virus found: 6
----------------------------------------------------

kkgh

诺顿6个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.nsa
病毒： Trojan.DL.Win32.Mnless.zef
病毒： Trojan.PSW.Win32.GameOL.gax

用户来源：互联网

软件版本：20.46.20

5个

啊弥陀佛

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\123456789\MMMHXGGD1059.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Delf.joa
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\123456789\ZZZ.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\123456789\MMSHYLQE1078.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Delf.kif
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\123456789\0X01XX8P.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

tracydk

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\123456789.rar<RAR>:MMKAFNFW1086.dll <- Trojan.Psw.Onlinegames.Ajao : No action
C:\Documents and Settings\All Users\Documents\Test\123456789.rar<RAR>:zzz.sys <- Downloader.Delf.Fsd : No action
C:\Documents and Settings\All Users\Documents\Test\123456789.rar<RAR>:0x01xx8p.exe<UPack>:0x01xx8p.exe <- Downloader.Delf.Gzs : No action



Scanned objects : 18

Infected objects : 3

allinwonderi

[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->MMKAFNFW1086.dll->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->MMMHXGGD1059.dll->(UPack)
[Found downloader]         <W32/Downldr2.BKYX (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->zzz.sys
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->MMSHYLQE1078.dll->(UPack)
[Found password stealer]         <W32/OnlineGames.AG.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->wrqszl.dll
[Found security risk]         <W32/OnlineGames.A.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\123456789.rar->0x01xx8p.exe->(UPack)

---------------------------------------------------------------------
Scan ended:        2008-5-28, 20:03:22
Duration:        0:00:02

Scan result:

Scanned files:                 6
Infected objects:         6
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------