金山清理系统2.0发现的未知启动

kp2006

看有几个文件是病毒

Kakura

F:\桌面.rar=>winform.exe        Infected: Generic.Malware.SgPWS.0D5A49ED
F:\桌面.rar=>winform.exe        Disinfection failed
F:\桌面.rar=>winform.exe        Move failed
F:\桌面.rar=>Kvsc3.exe        Infected: Generic.Malware.Sdld!gPWS.D4ECB4DD
F:\桌面.rar=>Kvsc3.exe        Disinfection failed
F:\桌面.rar=>Kvsc3.exe        Move failed
F:\桌面.rar=>upxdnd.dll        Infected: Generic.PWS.WSGame.BBEB4668
F:\桌面.rar=>upxdnd.dll        Disinfection failed
F:\桌面.rar=>upxdnd.dll        Move failed
F:\桌面.rar=>upxdnd.exe        Infected: Generic.Malware.SdldPWS.449C6D25
F:\桌面.rar=>upxdnd.exe        Disinfection failed
F:\桌面.rar=>upxdnd.exe        Move failed
F:\桌面.rar=>cmdbcs.exe        Infected: Trojan.PWS.OnLineGames.ARI
F:\桌面.rar=>cmdbcs.exe        Disinfection failed
F:\桌面.rar=>cmdbcs.exe        Move failed
F:\桌面.rar=>shualai.exe        Infected: Generic.Malware.SdldPWS.3A62FFCE
F:\桌面.rar=>shualai.exe        Disinfection failed
F:\桌面.rar=>shualai.exe        Move failed
F:\桌面.rar=>nwiztlbb.exe        Infected: Trojan.PWS.OnLineGames.ASD
F:\桌面.rar=>nwiztlbb.exe        Disinfection failed
F:\桌面.rar=>nwiztlbb.exe        Move failed
F:\桌面.rar=>msccrt.exe        Infected: Generic.Malware.SdldgPWS.0F582D67
F:\桌面.rar=>msccrt.exe        Disinfection failed
F:\桌面.rar=>msccrt.exe        Move failed

欠妳緈諨

报了8个

沸沸

全是病毒。。

wangjay1980

卡巴8个

The EQs

Scan performed at: 2007-5-5 0:21:24
Scanning Log
NOD32 version 2239 (20070504) NT
Command line: C:\Documents and Settings\EQ2\桌面\桌面
Operating memory - is OK

Date: 5.5.2007  Time: 00:21:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\桌面\
C:\Documents and Settings\EQ2\桌面\桌面\cmdbcs.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\桌面\Kvsc3.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\桌面\msccrt.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\桌面\nwiztlbb.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\桌面\shualai.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\桌面\upxdnd.dll - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\桌面\upxdnd.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\EQ2\桌面\桌面\winform.exe - probably a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 9
Number of threats found: 8
Number of files cleaned: 8
Time of completion: 00:21:29 Total scanning time: 1 sec (00:00:01)

Notes:
[7] File is probably infected with an unknown virus.

mofunzone

上面的都不行[:26:]

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
    [0] Archive type: RAR
    --> winform.exe
        [DETECTION] Is the Trojan horse TR/Agent.18432.34
        [WARNING]   Infected files in archives cannot be repaired!
    --> Kvsc3.exe
        [DETECTION] Is the Trojan horse TR/Agent.12288.28
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> upxdnd.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2189
        [WARNING]   Infected files in archives cannot be repaired!
    --> main.exe
        [DETECTION] Is the Trojan horse TR/Drop.NSAnti.N
        [WARNING]   Infected files in archives cannot be repaired!
    --> cmdbcs.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.RJ.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> shualai.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> nwiztlbb.exe
        [DETECTION] Is the Trojan horse TR/Agent.13126
        [WARNING]   Infected files in archives cannot be repaired!
    --> msccrt.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.29
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!


End of the scan: 2007年5月4日  10:29
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      2 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      1 Archives were scanned
      9 Warnings
      0 Notes
      0 Hidden objects were found

jlennon

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-5-4
Start time: 2007-5-5 1:36
Engine(s): KAV engine (AVK 17.5061), BD-Engine (BD 17.4685)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: cmdbcs.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.rj (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: Kvsc3.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.Sdld!gPWS.D4ECB4DD (BD-Engine)
Object: main.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan.Win32.Agent.akf (KAV engine)
Object: msccrt.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.qy (KAV engine), Generic.Malware.SdldgPWS.0F582D67 (BD-Engine)
Object: nwiztlbb.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.ql (KAV engine), Trojan.PWS.OnLineGames.ASD (BD-Engine)
Object: shualai.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.SdldPWS.3A62FFCE (BD-Engine)
Object: upxdnd.dll
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.qh (KAV engine), Generic.PWS.WSGame.BBEB4668 (BD-Engine)
Object: upxdnd.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.SdldPWS.449C6D25 (BD-Engine)
Object: winform.exe
        Path: C:\Documents and Settings\Administrator\桌面\桌面
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.lc (KAV engine), Generic.Malware.SgPWS.0D5A49ED (BD-Engine)
Analysis complete: 2007-5-5 1:36
    9 files checked
    9 infected files detected
    0 suspected files detected

马力

驱逐舰8个