病毒一包

chabosh

病毒一包 请各位试试

Kitman

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\du'
C:\Documents and Settings\Administrator\桌面\du\du\33088my.exe
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      A backup was created as '4899f120.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\59703chibi.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.amdt
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      A backup was created as '48a0f127.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\aitlasys.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48ddf157.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\anistio.exE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almd
      [NOTE]      A backup was created as '48d2f15c.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\axmsawin.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d6f166.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\azwlaime.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48e0f168.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\bincdwsa.exe
      [DETECTION] Is the Trojan horse TR/PSW.16493
      [NOTE]      A backup was created as '48d7f157.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\dbhlp32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almz
      [NOTE]      A backup was created as '48d1f150.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\dionpis.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alme.1
      [NOTE]      A backup was created as '48d8f157.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\fmsiocps.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.almb
      [NOTE]      A backup was created as '48dcf15b.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\fmsjhif.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alna
      [NOTE]      A backup was created as '4955fe74.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\hefcndy.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ahnr
      [NOTE]      A backup was created as '48cff153.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\isdsasrv.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48cdf161.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\ismhasrv.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d6f161.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\lpmxajkl.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d6f15e.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\lpsgajba.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48dcf15f.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\mkjraler.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d3f15a.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\msvbhhyo.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allu
      [NOTE]      A backup was created as '48dff162.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\orz.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.24420
      [NOTE]      A backup was created as '48e3f161.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\simyaapi.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d6f158.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\siwdaapi.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48e0f158.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\spjhahlp.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48d3f15f.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\WINSvr64.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.allf
      [NOTE]      A backup was created as '48b7f138.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\du\du\zscqahlp.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      A backup was created as '48ccf163.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!


End of the scan: 2008年7月1日  16:55
Used time: 00:05 min

The scan has been done completely.

      2 Scanning directories
     32 Files were scanned
     25 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     24 files were deleted
      0 files were repaired
     24 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      0 Archives were scanned
      0 Warnings
     24 Notes

Sent to Avira

[ 本帖最后由 Kitman 于 2008-7-1 17:12 编辑 ]

ch00962610

ch00962610

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 2008/7/1
开始时间： 2008/7/1 17:16
引擎： 引擎A (AVK 18.4339), 引擎B (AVKB 18.330)
启发式： 开启
档案文件： 开启
系统区域： 开启

检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\祝俊杰\桌面\新建文件夹\

对象： 33088my.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-BSI [Trj] (引擎B)
对象： 59703chibi.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Trojan-PSW.Win32.OnLineGames.amey (引擎A)
对象： aitlasys.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： anistio.exE
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQS [Trj] (引擎B)
对象： axmsawin.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： azwlaime.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： bincdwsa.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQS [Trj] (引擎B)
对象： dbhlp32.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Trojan-PSW.Win32.OnLineGames.almz (引擎A)
对象： dionpis.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQS [Trj] (引擎B)
对象： fmsiocps.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQS [Trj] (引擎B)
对象： fmsjhif.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQN [Trj] (引擎B)
对象： hefcndy.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQN [Trj] (引擎B)
对象： isdsasrv.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： ismhasrv.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Trojan-PSW.Win32.OnLineGames.aphm (引擎A)
对象： lpmxajkl.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： lpsgajba.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： mkjraler.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： msvbhhyo.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DJX [Trj] (引擎B)
对象： orz.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:Agent-ZMQ [Trj] (引擎B)
对象： simyaapi.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： siwdaapi.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： spjhahlp.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-EEP [Trj] (引擎B)
对象： WINSvr64.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Win32:OnLineGames-DQS [Trj] (引擎B)
对象： zscqahlp.exe
        路径: C:\Documents and Settings\祝俊杰\桌面\新建文件夹\du
        状态： 移动文件到隔离区
        病毒： Trojan-GameThief.Win32.OnLineGames.ryqo (引擎A)

检测执行时间： 2008/7/1 17:16
    32个文件已检测
    24个受感染文件
    0个可疑文件被发现

Kitman

5062974          2D.tmp.bat          99 Byte          CLEAN
25062975         2E.tmp.bat         99 Byte         CLEAN
25062976         2F.tmp.bat         99 Byte         CLEAN
25062977         30.tmp.bat         99 Byte         CLEAN
25062978         31.tmp.bat         99 Byte         CLEAN
25062979         32.tmp.bat         99 Byte         CLEAN
25062980         33.tmp.bat         99 Byte         CLEAN
25062981         E7B.tmp.bat         97 Byte         CLEAN

ssy275

Palkia

病毒        2008-07-01  19:12:51        C:\Documents and Settings\Administrator\桌面\du.rar\du\33088my.exe        Win32.Troj.QQPswT.bs.116858        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\orz.exe        Win32.PSWTroj.OnLineGames.110592        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\zscqahlp.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\siwdaapi.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\simyaapi.exe        Win32.Troj.OnlineGamesT.ea.119304        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\spjhahlp.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\mkjraler.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\lpsgajba.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\lpmxajkl.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:50        C:\Documents and Settings\Administrator\桌面\du.rar\du\isdsasrv.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\ismhasrv.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\azwlaime.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\axmsawin.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\aitlasys.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\msvbhhyo.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\hefcndy.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\fmsjhif.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\fmsiocps.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\dionpis.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\dbhlp32.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\bincdwsa.exe        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\anistio.exE        Win32.Troj.OnlineGameT.by.10166        清除成功       
病毒        2008-07-01  19:12:49        C:\Documents and Settings\Administrator\桌面\du.rar\du\WINSvr64.exe        Win32.Troj.OnlineGameT.by.10166        清除成功

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.nvb
病毒： Trojan.PSW.Win32.GameOL.olw
病毒： Trojan.PSW.Win32.GameOL.olx
病毒： Trojan.Win32.Undef.iko   
病毒： Trojan.PSW.Win32.GameOL.odt
病毒： RootKit.Win32.RESSDT.bf  
病毒： Trojan.PSW.Win32.SunOnline.ou
病毒： Trojan.Win32.Undef.hir   
病毒： Worm.Win32.PaBug.hv      

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.51.12

allinwonderi

[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\WINSvr64.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\anistio.exE
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\bincdwsa.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\dbhlp32.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\dionpis.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\fmsiocps.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\fmsjhif.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\hefcndy.exe
[Found security risk]         <W32/OnlineGames.AJ.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\msvbhhyo.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\aitlasys.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\axmsawin.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\azwlaime.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\ismhasrv.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\isdsasrv.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\lpmxajkl.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\lpsgajba.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\mkjraler.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\spjhahlp.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\simyaapi.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\siwdaapi.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\zscqahlp.exe->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\59703chibi.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\orz.exe->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\du.rar->du\33088my.exe->(UPX)

---------------------------------------------------------------------
Scan ended:        2008-7-1, 20:26:38
Duration:        0:00:08

Scan result:

Scanned files:                 6
Infected objects:         24
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

wangjay1980

K