一包,办公室电脑里抓的!

欠妳緈諨

全部在system32里找到的,貌似有个下载者,其余都是它下载并运行后产生的
D:\virus\28.exe - 特征码 'Virus.Win32.QQRob.AS' 被发现
D:\virus\27.exe - 特征码 'Virus.Win32.GrayBird.KM' 被发现
D:\virus\1.exe - 特征码 'Generic.Win32.ExplorerHijack' 被发现
D:\virus\15.exe - 可疑代码段 被发现 (Level: 75)
D:\virus\wipicdec.dll - 特征码 'Virus.Win32.Onlinegames.CDA' 被发现
D:\virus\WanPacket.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
D:\virus\ticisms.dll
D:\virus\tciocp64.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\SysWoWCt.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
D:\virus\rzysdhbx.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\ptshell.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\Packet.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
D:\virus\nicozftp00.dll - 特征码 'Virus.Win32.Agent.BQC' 被发现
D:\virus\msosmnsf00.dll - 特征码 'Virus.Win32.Agent.BQC' 被发现
D:\virus\msosmhfp00.dll - 特征码 'Virus.Win32.Agent.BQC' 被发现
D:\virus\msosfmsq00.dll - 特征码 'Virus.Win32.Agent.BQC' 被发现
D:\virus\msosdohs00.dll - 特征码 'Virus.Win32.Agent.BQC' 被发现
D:\virus\fmsiocps.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\wpcap.dll - 特征码 'Trojan-PWS.Win32.QQPass.hq' 被发现
D:\virus\updatax.exe - 特征码 'Virus.Win32.Delf.CKB' 被发现
D:\virus\0.exe - 特征码 'Virus.Win32.Delf.CKB' 被发现
D:\virus\MMMHXGGD1059.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
D:\virus\MMKAFNFW1094.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
D:\virus\mfchlp64.dll - 特征码 'Generic.PWS.Games.4' 被发现
D:\virus\huifitc.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\hefcndy.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\fmsjhif.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\fmsbbqi.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\fmbiost.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\dionpis.dll - 特征码 'Virus.Win32.Onlinegames.CDA' 被发现
D:\virus\dbhlp32.dlL - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\bincdwsa.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\anistio.dll - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\virus\8.exe - 特征码 'Trojan-PWS.OnlineGames.YXF' 被发现
D:\virus\7.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\virus\6.exe - 特征码 'Trojan-PWS.OnlineGames.YXF' 被发现
D:\virus\5.exe - 特征码 'Trojan-PWS.Win32.Gamec.aa' 被发现
37 文件被扫描
   (0 压缩档 0 文件)
35 特征码被侦测
1 可疑代码段被发现
耗时: 0:00.500

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\updatax.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\anistio.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.182
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\bincdwsa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.180
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\dbhlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.195
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\dionpis.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.170
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\fmbiost.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.178
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\fmsbbqi.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.194
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\fmsiocps.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.176
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\fmsjhif.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.168
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\hefcndy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.175
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\huifitc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.165
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\mfchlp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.25368
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\MMKAFNFW1094.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\MMMHXGGD1059.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\msosdohs00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajtg
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aenz
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\msosmhfp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajus
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\msosmnsf00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.akdb
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\nicozftp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajtp
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\ptshell.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.181
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\rzysdhbx.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.166
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\SysWoWCt.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\tciocp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajur
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\ticisms.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48a2b73f.qua'!
E:\AV\新建文件夹\wipicdec.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.187
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\wpcap.dll
      [DETECTION] Is the Trojan horse TR/Virtl.5707
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\0.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\1.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\5.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.Steal.44666
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\6.exe
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aom
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\7.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajnn
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\8.exe
  [0] Archive type: OVL
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aom
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\15.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\27.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [NOTE]      The file was deleted!
E:\AV\新建文件夹\28.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [NOTE]      The file was deleted!


End of the scan: 2008年5月30日  16:12
Used time: 00:17 min

The scan has been done completely.

      1 Scanning directories
     37 Files were scanned
     37 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     34 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     35 Notes

1006662	Packet.dll	26.32 KB	CLEAN
1006659	WanPacket.dll	21.24 KB	CLEAN

The file 'ticisms.dll' has been determined to be 'MALWARE'.
Our analysts named the threat TR/PSW.OnlineGames.NVI.207. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[ 本帖最后由 Exia 于 2008-5-30 19:30 编辑 ]

jiffy

SEP11

dwenhua

大蜘蛛

啊弥陀佛

木马名称:Trojan-PSW.Win32.OL-Game.qcc
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MSOSFMSQ00.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OL-Games.adh
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MSOSMHFP00.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OL-Games.yq
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\NICOZFTP00.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OL-Games.ws
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\SYSWOWCT.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OL-Games.uv
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.StartPage.aez
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\27.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\0.EXE
是可疑程序!
试图修改系统时间!
是否阻止该进程继续运行?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\5.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\6.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\DRIVERS\HCV32.SYS
2) C:\WINDOWS\SYSTEM32\MMKAFNFW1094.EXE
3) C:\WINDOWS\SYSTEM32\MMKAFNFW1094.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\8.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MMMHXGGD1059.EXE
2) C:\WINDOWS\SYSTEM32\MMMHXGGD1059.DLL
是否删除木马程序及其衍生物?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MMKAFNFW1094.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\MMMHXGGD1059.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\15.EXE
木马程序生成以下文件:
1) C:\WINDOWS\391231M.EXE
2) C:\WINDOWS\391231MM.DLL
是否删除木马程序及其衍生物?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\FMSIOCPS.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\28.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\PACKET.DLL
2) C:\WINDOWS\SYSTEM32\WANPACKET.DLL
3) C:\WINDOWS\SYSTEM32\WPCAP.DLL
4) C:\WINDOWS\SYSTEM32\DRIVERS\SVCHOST.EXE
5) C:\WINDOWS\SYSTEM32\DRIVERS\SCVHOST.EXE
是否删除木马程序及其衍生物?


木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\PACKET.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\WANPACKET.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\UPDATAX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:未知木马
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\VIRUS\WPCAP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

jimmyleo

E:\VirusZoo\MalCol\anistio.dll infected with Trojan.PWS.Gamania.10413
E:\VirusZoo\MalCol\bincdwsa.dll infected with Trojan.PWS.Gamania.10664
E:\VirusZoo\MalCol\dbhlp32.dlL infected with Trojan.PWS.Wsgame.5415
E:\VirusZoo\MalCol\dionpis.dll infected with Trojan.PWS.Wsgame.4894
E:\VirusZoo\MalCol\fmbiost.dll infected with Trojan.PWS.Gamania.10675
E:\VirusZoo\MalCol\fmsbbqi.dll infected with Trojan.PWS.Wsgame.5362
E:\VirusZoo\MalCol\fmsiocps.dll infected with Trojan.PWS.Gamania.10671
E:\VirusZoo\MalCol\fmsjhif.dll infected with Trojan.PWS.Gamania.10667
E:\VirusZoo\MalCol\hefcndy.dll infected with Trojan.PWS.Gamania.10666
E:\VirusZoo\MalCol\huifitc.dll infected with Trojan.PWS.Gamania.10670
E:\VirusZoo\MalCol\mfchlp64.dll infected with Trojan.PWS.Wsgame.5363
E:\VirusZoo\MalCol\MMKAFNFW1094.dll infected with Trojan.PWS.Wsgame.origin
E:\VirusZoo\MalCol\MMMHXGGD1059.dll infected with Trojan.PWS.Wsgame.origin
E:\VirusZoo\MalCol\msosdohs00.dll infected with Trojan.PWS.Wsgame.5421
E:\VirusZoo\MalCol\msosfmsq00.dll infected with Trojan.PWS.Wsgame.4991
E:\VirusZoo\MalCol\msosmhfp00.dll infected with Trojan.PWS.Wsgame.5416
E:\VirusZoo\MalCol\msosmnsf00.dll infected with Trojan.PWS.Wsgame.5421
E:\VirusZoo\MalCol\nicozftp00.dll infected with Trojan.PWS.Wsgame.5420
E:\VirusZoo\MalCol\ptshell.dll infected with Trojan.PWS.Gamania.10669
E:\VirusZoo\MalCol\SysWoWCt.dll infected with Trojan.PWS.Gamania.10418
E:\VirusZoo\MalCol\tciocp64.dll infected with Trojan.PWS.Wsgame.5364
E:\VirusZoo\MalCol\ticisms.dll infected with Trojan.PWS.Gamania.10424
E:\VirusZoo\MalCol\1.exe infected with Trojan.PWS.Gamania.10671
E:\VirusZoo\MalCol\5.exe infected with Trojan.PWS.Lineage.origin
E:\VirusZoo\MalCol\6.exe infected with Trojan.PWS.Wsgame.5413
E:\VirusZoo\MalCol\7.exe infected with Trojan.PWS.Wsgame.4418
E:\VirusZoo\MalCol\8.exe infected with Trojan.PWS.Wsgame.origin
E:\VirusZoo\MalCol\15.exe infected with Trojan.PWS.Legmir.1562
E:\VirusZoo\MalCol\27.exe infected with Trojan.StartPage.21052
E:\VirusZoo\MalCol\28.exe infected with Trojan.Sniff.origin
E:\VirusZoo\MalCol\28.exe\data001 infected with Trojan.Sniff
E:\VirusZoo\MalCol\28.exe - archive contains infected objects

drweb 30

有几个文件是 WinPcap的

[ 本帖最后由 jimmyleo 于 2008-5-30 17:08 编辑 ]

solcroft

* avast! Report
* This file is generated automatically
*
* Task 'Simple user interface' used
* Started on Friday, May 30, 2008
* VPS: 080529-1, 29/05/2008
*

C:\Documents and Settings\Admin\Desktop\virus\0.exe [L] Win32:Small-DJC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\1.exe\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\15.exe [L] Win32:Lmir-RC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\27.exe [L] Win32:Trojan-gen {Other} (0)
C:\Documents and Settings\Admin\Desktop\virus\28.exe [L] Win32:QQRob-AS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\5.exe\[UPX]\[Embedded#FILE] [L] Win32:OnLineGames-BSI [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\6.exe\[Upack]\[Embedded#5060] [L] Win32:Rootkit-gen [Rtk] (0)
C:\Documents and Settings\Admin\Desktop\virus\7.exe\[Upack]\[Embedded#50c0]\[Upack] [L] Win32:OnLineGames-CYO [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\8.exe\[Upack]\[Embedded#5060] [L] Win32:Rootkit-gen [Rtk] (0)
C:\Documents and Settings\Admin\Desktop\virus\anistio.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\bincdwsa.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\dbhlp32.dlL [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\dionpis.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\fmbiost.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\fmsbbqi.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\fmsiocps.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\fmsjhif.dll [L] Win32:OnLineGames-DQN [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\hefcndy.dll [L] Win32:OnLineGames-DQN [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\huifitc.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\mfchlp64.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\msosdohs00.dll\[Upack] [L] Win32:Agent-BQC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\msosfmsq00.dll\[Upack] [L] Win32:Agent-BQC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\msosmhfp00.dll\[Upack] [L] Win32:Agent-BQC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\msosmnsf00.dll\[Upack] [L] Win32:Agent-BQC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\nicozftp00.dll\[Upack] [L] Win32:Agent-BQC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\Packet.dll [L] Win32:Trojan-gen {Other} (0)
C:\Documents and Settings\Admin\Desktop\virus\ptshell.dll [L] Win32:Agent-CNF [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\rzysdhbx.dll [L] Win32:OnLineGames-DJX [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\SysWoWCt.dll\[Upack] [L] Win32:OnLineGames-CYO [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\tciocp64.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\ticisms.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\updatax.exe [L] Win32:Small-DJC [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\WanPacket.dll [L] Win32:Trojan-gen {Other} (0)
C:\Documents and Settings\Admin\Desktop\virus\wipicdec.dll [L] Win32:OnLineGames-DQS [Trj] (0)
C:\Documents and Settings\Admin\Desktop\virus\wpcap.dll [L] Win32:Small-GXN [Trj] (0)
Infected files: 35
Total files: 60
Total folders: 1
Total size: 1.9 MB

*
* Task stopped: Friday, May 30, 2008
* Run-time was 5 second(s)

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:updatax.exe<FSG>:updatax.exe <- Trojan.Psw.Onlinegames.Flr : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dionpis.dll <- Trojan.Psw.Onlinegames.Ajxp : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmsiocps.dll <- Trojan.Psw.Onlinegames.Ajxq : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:MMMHXGGD1059.dll <- Trojan.Psw.Onlinegames.Ajyn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosdohs00.dll <- Trojan.Psw.Onlinegames.Ajtg : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosfmsq00.dll<UPack>:msosfmsq00.dll <- Trojan.Psw.Onlinegames.Aenz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosmhfp00.dll <- Trojan.Psw.Onlinegames.Ajus : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosmnsf00.dll <- Trojan.Psw.Onlinegames.Akdb : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:Packet.dll <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:SysWoWCt.dll<UPack>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:wpcap.dll <- Trojan.Hupigon.Byyk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:0.exe<FSG>:0.exe <- Trojan.Psw.Onlinegames.Flr : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:1.exe <- Trojan.Psw.Onlinegames.Ajss : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:5.exe <- Trojan.Psw.Qqpass.Cbj : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:5.exe<UPX>:5.exe<DLLRES>:FILE0.exe <- Trojan.Psw.Qqpass.Cbk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:7.exe<UPack>:7.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:7.exe<UPack>:7.exe<DLLRES>:res0.exe<UPack>:res0.exe <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:8.exe <- Trojan.Psw.Onlinegames.Ajyn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:15.exe<UPack>:15.exe <- Trojan.Psw.Lmir.Bpc : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:27.exe <- Trojan.Startpage.Bbq : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:27.exe<FSG>:27.exe <- Trojan.Startpage.Avr : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:28.exe<FSG>:28.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:28.exe<FSG>:28.exe<DLLRES>:EXE0.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:28.exe<FSG>:28.exe<DLLRES>:DLL2.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:28.exe<FSG>:28.exe<DLLRES>:DLL4.exe <- Trojan.Hupigon.Byyk : No action



Scanned objects : 74

Infected objects : 26

allinwonderi

[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->fmsiocps.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->MMKAFNFW1094.dll->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->MMMHXGGD1059.dll->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->msosdohs00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->msosfmsq00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->msosmhfp00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->msosmnsf00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->nicozftp00.dll
[Found Trojan]         <W32/Trojan2.HRS (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->Packet.dll
[Found possible security risk]         <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->SysWoWCt.dll->(UPack)
[Found Trojan]         <W32/Trojan2.HRT (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->WanPacket.dll
[Found Trojan]         <W32/Small.DZ (exact, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->wpcap.dll
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->5.exe->(UPX)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->6.exe->exefile->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->7.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->8.exe->exefile->(UPack)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->15.exe
[Found Trojan]         <W32/Trojan2.WRQ (exact, damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->27.exe
[Found possible security risk]         <W32/Heuristic-159!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->28.exe->(FSG)

---------------------------------------------------------------------
Scan ended:        2008-5-30, 19:26:14
Duration:        0:00:10

Scan result:

Scanned files:                 6
Infected objects:         19
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

Palkia

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.PSW.Win32.GameOL.nsp
病毒： Trojan.PSW.Win32.GameOL.nrp
病毒： Trojan.PSW.Win32.GameOL.nta
病毒： Trojan.PSW.Win32.GameOL.nsa
病毒： Trojan.PSW.Win32.QQHX.txp
病毒： Trojan.PSW.Win32.GamesOnline.yf
病毒： Trojan.PSW.Win32.GameOL.nse
病毒： Trojan.PSW.Win32.GameOL.nsh
病毒： Trojan.PSW.Win32.SunOnline.op
病毒： Trojan.PSW.Win32.GameOL.ntp
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Worm.Win32.PaBug.hi      
病毒： Trojan.PSW.Win32.GamesOnline.adg
病毒： RootKit.Win32.RESSDT.av  
病毒： Trojan.Win32.StartPage.mcy
病毒： Backdoor.Win32.Agent.yff
病毒： Backdoor.Win32.Agent.yff

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.46.42