virus

电影结束了

一堆下载生成物

曲中求

剩5个

Starting the file scan:

Begin scan in 'E:\病毒\virus.part1'
E:\病毒\virus.part1\798733MM.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\anistio.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.220
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\anistio.exE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almd
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\bincdwsa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.236
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\bincdwsa.exe
      [DETECTION] Is the Trojan horse TR/PSW.16493
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\dbhlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.238
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\dbhlp32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almz
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\dionpis.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almg.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\dionpis.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alme.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\DosSys08.Sys
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ehwprhg.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ejrxwms.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fcmxdhqr.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.227
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmbiost.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.178
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmbiost.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsbbqi.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.221
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsbbqi.exe
      [DETECTION] Is the Trojan horse TR/PSW.18417.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsiocps.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.226
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsiocps.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almb
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsjhif.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.168
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\fmsjhif.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ghjkdr.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\hefcndy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ahnr.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\hefcndy.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ahnr
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\hjmh.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\huifitc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almh
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\huifitc.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almh.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ismhasrv.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\issms32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.249
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\issms32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.235
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\mfchlp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.37148.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\mfchlp64.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alor.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\MMKAFNFW1095.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\MMMHXGGD1061.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\mnmhgsrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosdohs00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almc.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aenz
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosmhfp00.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosmnsf00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allb.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosmsfpfis64.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allb
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\msosmsp2p32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alrh
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\nicomsp2p32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allh
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\nicozftp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alne
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\nyxmlren.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allu
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\tciocp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.218
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\tciocp64.exe
      [DETECTION] Is the Trojan horse TR/PSW.18397
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ticisms.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.212
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ticisms.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.akyh.1
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\ukrth.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\updatax.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [NOTE]      The file was deleted!
E:\病毒\virus.part1\wpcap.dll
      [DETECTION] Is the Trojan horse TR/Virtl.5707
      [NOTE]      The file was deleted!


End of the scan: 2008年6月4日  10:07
Used time: 00:20 min

The scan has been done completely.

      1 Scanning directories
     59 Files were scanned
     52 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     52 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      0 Archives were scanned
      0 Warnings
     52 Notes

曲中求

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.


--------------------------------------------------------------------------------


We received the following archive files:



File ID  Filename Size (Byte) Result
25036421  virus.part1.rar 106.89 KB OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25036422  autorun.inf  151 Byte  UNDER ANALYSIS
25036423  DosSys16.Jmp  30.11 KB  UNDER ANALYSIS
1006662  Packet.dll  26.32 KB  CLEAN
25036424  smmhbsrv.sys  520 Byte  UNDER ANALYSIS
1006659  WanPacket.dll  21.24 KB  CLEAN
207448  npf.sys  31.75 KB  KNOWN CLEAN
4220321  verclsid.exe  28 KB  KNOWN CLEAN


Please find a detailed report concerning each individual sample below:

Filename Result
autorun.inf  UNDER ANALYSIS

The file 'autorun.inf' has been determined to be 'UNDER ANALYSIS'.

Filename Result
DosSys16.Jmp  UNDER ANALYSIS

The file 'DosSys16.Jmp' has been determined to be 'UNDER ANALYSIS'.

Filename Result
Packet.dll  CLEAN

The file 'Packet.dll' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Filename Result
smmhbsrv.sys  UNDER ANALYSIS

The file 'smmhbsrv.sys' has been determined to be 'UNDER ANALYSIS'.

Filename Result
WanPacket.dll  CLEAN

The file 'WanPacket.dll' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.

Filename Result
npf.sys  KNOWN CLEAN

The file 'npf.sys' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'WinPcap 3.1'.

Filename Result
verclsid.exe  KNOWN CLEAN

The file 'verclsid.exe' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'Microsoft Windows XP (SP3)'.

HC303

楼上抢先。
Begin scan in 'C:\Documents and Settings\ \桌面\新建文件夹'
C:\Documents and Settings\ \桌面\新建文件夹\798733MM.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\anistio.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.220
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\anistio.exE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almd
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\bincdwsa.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.236
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\bincdwsa.exe
      [DETECTION] Is the Trojan horse TR/PSW.16493
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\dbhlp32.dlL
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.238
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\dbhlp32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almz
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\dionpis.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almg.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\dionpis.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alme.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\DosSys08.Sys
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ehwprhg.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ejrxwms.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fcmxdhqr.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.227
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmbiost.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.178
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmbiost.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsbbqi.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.221
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsbbqi.exe
      [DETECTION] Is the Trojan horse TR/PSW.18417.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsiocps.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.226
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsiocps.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almb
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsjhif.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.168
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\fmsjhif.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ghjkdr.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\hefcndy.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ahnr.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\hefcndy.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ahnr
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\hjmh.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\huifitc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almh
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\huifitc.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almh.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ismhasrv.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\issms32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.249
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\issms32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.235
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\mfchlp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.37148.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\mfchlp64.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alor.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\MMKAFNFW1095.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\MMMHXGGD1061.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\mnmhgsrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosdohs00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almc.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosfmsq00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aenz
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosmhfp00.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosmnsf00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allb.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosmsfpfis64.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allb
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\msosmsp2p32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alrh
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\nicomsp2p32.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allh
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\nicozftp00.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alne
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\nyxmlren.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allu
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\svchost.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\tciocp64.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.218
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\tciocp64.exe
      [DETECTION] Is the Trojan horse TR/PSW.18397
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ticisms.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NVI.212
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ticisms.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.akyh.1
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\ukrth.dll
      [DETECTION] Is the Trojan horse TR/Agent.7680
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\updatax.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [NOTE]      The file was deleted!
C:\Documents and Settings\ \桌面\新建文件夹\wpcap.dll
      [DETECTION] Is the Trojan horse TR/Virtl.5707
      [NOTE]      The file was deleted!
我就不报了。

小邪邪

AVK:54/59

挪威的冬天

信息        2008-06-04  12:45:02        您此次查毒隔离了47个文件                       
信息        2008-06-04  12:45:02        您此次查毒共查出47个病毒以及危险代码                       
信息        2008-06-04  12:45:02        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件93个                       
信息        2008-06-04  12:45:02        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

kkgh

诺顿46个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.GameOL.nvb
病毒： Trojan.PSW.Win32.GameOL.nuz
病毒： Worm.Win32.PaBug.hl      
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.PSW.Win32.GameOL.nsq
病毒： Trojan.PSW.Win32.GameOL.ntu
病毒： Trojan.PSW.Win32.GamesOnline.ady
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nsa
病毒： Trojan.PSW.Win32.GamesOnline.yf
病毒： Trojan.PSW.Win32.GameOL.nve
病毒： RootKit.Win32.RESSDT.bc  
病毒： Backdoor.Win32.Agent.yff
病毒： Backdoor.Win32.Agent.yff
病毒： Trojan.PSW.Win32.LMir.bqd

用户来源：互联网

软件版本：20.47.21

43个

Drweb  34/59

EAV

正在扫描日志
病毒库版本: 3156 (20080603)
日期: 2008-6-4  时间: 17:54:34
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\sky\桌面\virus
C:\Documents and Settings\sky\桌面\virus\798733MM.DLL - Win32/PSW.Legendmir.NFF 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\anistio.exE - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\bincdwsa.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\dbhlp32.dlL - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\dbhlp32.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\dionpis.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\DosSys08.Sys - Win32/PSW.QQPass.NCZ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ehwprhg.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ejrxwms.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\fcmxdhqr.dll - Win32/PSW.OnLineGames.NVW 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmbiost.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmbiost.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsbbqi.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsbbqi.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsiocps.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsiocps.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsjhif.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\fmsjhif.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\ghjkdr.dll - 可能是 Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\hefcndy.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\hjmh.dll - Win32/PSW.OnLineGames.NNV 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\huifitc.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ismhasrv.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\issms32.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\mfchlp64.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\MMKAFNFW1095.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\MMMHXGGD1061.dll - Win32/PSW.OnLineGames.PBQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\mnmhgsrv.dll - 可能是 Win32/PSW.OnLineGames.FDY 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\msosdohs00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\msosfmsq00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\msosmhfp00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\msosmnsf00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\msosmsfpfis64.sys - Win32/PSW.OnLineGames.NMQ 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\msosmsp2p32.sys - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\nicomsp2p32.sys - 可能是 Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\nicozftp00.dll - Win32/PSW.OnLineGames.NMQ 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\nyxmlren.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马
C:\Documents and Settings\sky\桌面\virus\svchost.exe - Win32/Delf.CSN 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\tciocp64.exe - 可能是 Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ticisms.dll - Win32/PSW.OnLineGames.NFL 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ticisms.exe - Win32/PSW.OnLineGames.NWC 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\virus\ukrth.dll - Win32/PSW.OnLineGames.NNV 特洛伊木马 的变种
已扫描的对象数: 59
发现的威胁数: 42
已清除对象数:0
完成时间: 17:54:43  总扫描时间: 9 秒 (00:00:09)

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.RESSDT.bc  
病毒： Trojan.PSW.Win32.GameOL.nvb
病毒： Backdoor.Win32.Agent.yff
病毒： Backdoor.Win32.Agent.yff
病毒： Trojan.PSW.Win32.GameOL.nuz
病毒： Trojan.PSW.Win32.GamesOnline.ady
病毒： Trojan.PSW.Win32.LMir.bqd
病毒： Worm.Win32.PaBug.hl      
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.PSW.Win32.GameOL.nsq
病毒： Trojan.PSW.Win32.GameOL.ntu
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nsa
病毒： Trojan.PSW.Win32.GamesOnline.yf
病毒： Trojan.PSW.Win32.GameOL.nve

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.22

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:nicomsp2p32.sys <- Trojan.Rootkit.Agent.Apj : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:nicozftp00.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:Packet.dll <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe<DLLRES>:EXE0.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe<DLLRES>:DLL2.exe <- Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe<DLLRES>:DLL3.exe <- Variant:Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe<DLLRES>:DLL4.exe <- Trojan.Hupigon.Byyk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:svchost.exe<FSG>:svchost.exe<DLLRES>:DLL4.exe<UPack>:DLL4.exe <- Variant:Trojan.Ircbot.Vo : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:updatax.exe<FSG>:updatax.exe <- Trojan.Psw.Onlinegames.Flr : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:WanPacket.dll <- Variant:Trojan.Delf.Awy : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:wpcap.dll <- Trojan.Hupigon.Byyk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:wpcap.dll<UPack>:wpcap.dll <- Variant:Trojan.Ircbot.Vo : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part1.rar<RAR>:798733MM.DLL <- Variant:Trojan.Psw.Lmir.Bpc : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:dbhlp32.dlL <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:dbhlp32.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmbiost.exe <- Trojan.Psw.Onlinegames.Ajti : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmsbbqi.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmsbbqi.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmsiocps.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmsiocps.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:fmsjhif.exe <- Trojan.Psw.Onlinegames.Ajsz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part2.rar<RAR>:issms32.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part3.rar<RAR>:msosfmsq00.dll<UPack>:msosfmsq00.dll <- Trojan.Psw.Onlinegames.Aenz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.part3.rar<RAR>:msosmnsf00.dll <- Trojan.Psw.OnLineGames.Almz : No action



Scanned objects : 97

Infected objects : 25