一包可疑文件

yk1234

几十个，已经剔除相同文件。

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.phv
病毒： Trojan.PSW.Win32.QQSG.ei
病毒： RootKit.Win32.Undef.jc   
病毒： Trojan.DL.Win32.Mnless.atu
病毒： Trojan.DL.Win32.Mnless.auv
病毒： Trojan.PSW.Win32.GameOL.phx
病毒： Trojan.Win32.Undef.gqw   
病毒： Trojan.Win32.VB.ftn      
病毒： Trojan.DL.Win32.Elan.d   
病毒： Trojan.Win32.StartPage.fym
病毒： Trojan.DL.Win32.VB.fyj   
病毒： Trojan.DL.Win32.Undef.anf
病毒： Trojan.DL.Win32.Undef.tm
病毒： Trojan.PSW.Win32.GameOL.plm

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.58.30

hzyw

avast! 59文件 30个毒

BING126

McAfee   16个。。

浪滔天

卡巴 8.0.0.454 高启发 23个 其中启发3个

2008-08-21 21:51:19        扫描        已检测到: Heur.Downloader        f:\病毒样本\virus[1]\smssw.ex               
2008-08-21 21:51:19        扫描        已检测到: Heur.Downloader        f:\病毒样本\virus[1]\pps.ex               
2008-08-21 21:51:19        扫描        已检测到: Heur.Trojan.Generic        f:\病毒样本\virus[1]\QM.ex               
2008-08-21 21:51:19        扫描        已检测到: Trojan-Downloader.Win32.Adload.aml        f:\病毒样本\virus[1]\svchost.ex               
2008-08-21 21:51:20        扫描        已检测到: Trojan-Downloader.Win32.Agent.aapd        f:\病毒样本\virus[1]\vistaXA.ex               
2008-08-21 21:51:21        扫描        已检测到: Trojan-Downloader.Win32.Delf.lvl        f:\病毒样本\virus[1]\10043.ex/ASPack               
2008-08-21 21:51:18        扫描        已检测到: Trojan-Downloader.Win32.Small.zie        f:\病毒样本\virus[1]\debug.ex/PE_Patch/UPack               
2008-08-21 21:51:19        扫描        已检测到: Trojan-Downloader.Win32.VB.erq        f:\病毒样本\virus[1]\QM.ex/#/FSG               
2008-08-21 21:51:19        扫描        已检测到: Trojan-Downloader.Win32.VB.fyq        f:\病毒样本\virus[1]\smct.ex/FSG               
2008-08-21 21:51:19        扫描        已检测到: Trojan-Downloader.Win32.VB.gwd        f:\病毒样本\virus[1]\svvost.ex               
2008-08-21 21:51:20        扫描        已检测到: Trojan-Dropper.Win32.Flystud.gg        f:\病毒样本\virus[1]\winlogam.ex               
2008-08-21 21:51:20        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.sprt        f:\病毒样本\virus[1]\zptlesys.dll               
2008-08-21 21:51:18        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.sqkg        f:\病毒样本\virus[1]\apsghjba.dll/UPack               
2008-08-21 21:51:18        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.sqpt        f:\病毒样本\virus[1]\ptjhfhlp.dll               
2008-08-21 21:51:20        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.srcj        f:\病毒样本\virus[1]\ypdjibmp.dll               
2008-08-21 21:51:18        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.srgh        f:\病毒样本\virus[1]\ietzepaq.dll               
2008-08-21 21:51:18        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.stuh        f:\病毒样本\virus[1]\bnmhggo1.dll               
2008-08-21 21:51:20        扫描        已检测到: Trojan-GameThief.Win32.OnLineGames.styw        f:\病毒样本\virus[1]\zsdgff.dll               
2008-08-21 21:51:18        扫描        已检测到: Trojan-Spy.Win32.Agent.drf        f:\病毒样本\virus[1]\QDoctor.ex               
2008-08-21 21:51:20        扫描        已检测到: Trojan.Win32.Inject.fky        f:\病毒样本\virus[1]\WinLognn.ex               
2008-08-21 21:51:18        扫描        已检测到: Trojan.Win32.Shutdowner.wg        f:\病毒样本\virus[1]\game无界面10063.ex               
2008-08-21 21:51:20        扫描        已检测到: not-a-virus:AdWare.Win32.AdMoke.bju        f:\病毒样本\virus[1]\TAJQYGOVDK.EX               
2008-08-21 21:51:19        扫描        已检测到: not-a-virus:AdWare.Win32.Agent.dyp        f:\病毒样本\virus[1]\scw.ex/#/stream/data0004

ksdc0274119

金山毒霸21个

尤金卡巴斯基

2008/8/21 22:30:19        已删除        风险软件 not-a-virus:AdWare.Win32.Agent.dyp        G:\Temp\Virus\virus\scw.ex//#//stream//data0004               
2008/8/21 22:30:19        已删除        风险软件 not-a-virus:AdWare.Win32.Agent.dyp        G:\Temp\Virus\virus\scw.ex               
2008/8/21 22:30:18        已删除        风险软件 not-a-virus:AdWare.Win32.AdMoke.bju        G:\Temp\Virus\virus\TAJQYGOVDK.EX                     
2008/8/21 22:30:19        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.styw        G:\Temp\Virus\virus\zsdgff.dll               
2008/8/21 22:30:19        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.sprt        G:\Temp\Virus\virus\zptlesys.dll               
2008/8/21 22:30:19        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.srcj        G:\Temp\Virus\virus\ypdjibmp.dll               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Dropper.Win32.Flystud.gg        G:\Temp\Virus\virus\winlogam.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.Agent.aapd        G:\Temp\Virus\virus\vistaXA.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.VB.gwd        G:\Temp\Virus\virus\svvost.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.Adload.aml        G:\Temp\Virus\virus\svchost.ex               
2008/8/21 22:30:18        已隔离        木马程序 Heur.Downloader        G:\Temp\Virus\virus\smssw.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.VB.fyq        G:\Temp\Virus\virus\smct.ex//FSG               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.VB.fyq        G:\Temp\Virus\virus\smct.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.sqpt        G:\Temp\Virus\virus\ptjhfhlp.dll               
2008/8/21 22:30:18        已隔离        木马程序 Heur.Downloader        G:\Temp\Virus\virus\pps.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.srgh        G:\Temp\Virus\virus\ietzepaq.dll               
2008/8/21 22:30:17        已删除        木马程序 Trojan.Win32.Shutdowner.wg        G:\Temp\Virus\virus\game无界面10063.ex               
2008/8/21 22:30:17        已删除        木马程序 Trojan-Downloader.Win32.Small.zie        G:\Temp\Virus\virus\debug.ex//PE_Patch//UPack               
2008/8/21 22:30:17        已删除        木马程序 Trojan-Downloader.Win32.Small.zie        G:\Temp\Virus\virus\debug.ex               
2008/8/21 22:30:17        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.stuh        G:\Temp\Virus\virus\bnmhggo1.dll               
2008/8/21 22:30:17        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.sqkg        G:\Temp\Virus\virus\apsghjba.dll//UPack               
2008/8/21 22:30:17        已删除        木马程序 Trojan-GameThief.Win32.OnLineGames.sqkg        G:\Temp\Virus\virus\apsghjba.dll               
2008/8/21 22:30:19        已删除        木马程序 Trojan.Win32.Inject.fky        G:\Temp\Virus\virus\WinLognn.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Downloader.Win32.VB.erq        G:\Temp\Virus\virus\QM.ex//#//FSG               
2008/8/21 22:30:18        已删除        木马程序 Heur.Trojan.Generic        G:\Temp\Virus\virus\QM.ex               
2008/8/21 22:30:18        已删除        木马程序 Trojan-Spy.Win32.Agent.drf        G:\Temp\Virus\virus\QDoctor.ex               
2008/8/21 22:30:17        已删除        木马程序 Trojan-Downloader.Win32.Delf.lvl        G:\Temp\Virus\virus\10043.ex//ASPack               
2008/8/21 22:30:17        已删除        木马程序 Trojan-Downloader.Win32.Delf.lvl        G:\Temp\Virus\virus\10043.ex               

漏了5个，上报

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus'
C:\Documents and Settings\Administrator\桌面\virus\10043.ex
    [DETECTION] Is the TR/Dldr.Agen.102400 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\apsghjba.dll
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\bnmhggo1.dll
    [DETECTION] Contains recognition pattern of the RKIT/Agent.18560 root kit
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\debug.ex
    [DETECTION] Is the TR/Dldr.Small.zie.5 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\game无界面10063.ex
    [DETECTION] Contains recognition pattern of the DR/Agent.bis.2 dropper
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\ha_80134.ex
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\ietzepaq.dll
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\ptjhfhlp.dll
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\QDoctor.ex
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\QM.ex
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\scw.ex
    [DETECTION] Is the TR/Small.BQL Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\SiZhu.ex
    [DETECTION] Is the TR/Drop.Cattivo.A Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\smct.ex
    [DETECTION] Is the TR/Dldr.VB.fyq.1 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\smssw.ex
    [DETECTION] Is the TR/Small.BQL Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\svchost.ex
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\svvost.ex
      [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\TAJQYGOVDK.EX
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\vistaXA.ex
    [DETECTION] Is the TR/Dldr.Agent.aapd.1 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\winlig.ex
    [DETECTION] Is the TR/Small.37376 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\winlogam.ex
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\WinLognn.ex
    [DETECTION] Is the TR/Small.BQL Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\ypdjibmp.dll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\zptlesys.dll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\zsdgff.dll
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 星期五 2008年8月22日  04:20
Used time: 00:16 Minute(s)

The scan has been done completely.

      1 Scanning directories
     27 Files were scanned
     24 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     24 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      0 Archives were scanned
      0 Warnings
     24 Notes
File ID         Filename        Size (Byte)        Result
25119214         pps.ex         252.18 KB         UNDER ANALYSIS
25119215         yoyo1054.ex         192.91 KB         UNDER ANALYSIS
1049305         country.sys         16.76 KB         KNOWN CLEAN

[ 本帖最后由 nosferatu 于 2008-8-22 04:22 编辑 ]