svchost.exe [md5:52545b]

mofunzone

File:           svchost.exe
Status:        
POSSIBLY INFECTED/MALWARE (Note: this file was only flagged as malware by heuristic detection(s). This might be a false positive. Therefore, results of this scan will not be stored in the database)
MD5:         52545bbe6aef1f30d449fb9edfde7427
Packers detected:        
-
Bit9 reports:         File not found
Scanner results
Scan taken on 26 Jun 2007 19:46:56 (GMT)
A-Squared        
Found nothing
AntiVir        
Found nothing
ArcaVir        
Found nothing
Avast        
Found nothing
AVG Antivirus        
Found nothing
BitDefender        
Found nothing
ClamAV        
Found nothing
Dr.Web        
Found nothing
F-Prot Antivirus        
Found nothing
F-Secure Anti-Virus        
Found nothing
Fortinet        
Found nothing
Kaspersky Anti-Virus        
Found nothing
NOD32        
Found nothing
Norman Virus Control        
Found nothing
Panda Antivirus        
Found nothing
Rising Antivirus        
Found nothing
VirusBuster        
Found nothing
VBA32        
Found Trojan-PSW.Game.42 (paranoid heuristics) (probable variant)

promised

?         Copyright (c) 1993-2007 by VBA Ltd.           ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯图
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\...\svchost.exe : is suspected of Trojan-PSW.Game.42 (paranoid heuristics)
Program execution terminated by user


Directories       : 4       Files in archives:      Files on disks:
Archives:                   - total       : 2       - total       : 19
- scanned         : 1       -  scanned    : 2       - scanned     : 19
- contain viruses : 0       -  infected   : 0       - infected    : 0
- deleted         : 0       -  suspicious : 1       - suspicious  : 1

Startup    : 08:13:19 27-06-2007
End        : 08:13:23 27-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?

yashoo

2007-6-27        8:18:48        已由访问保护规则禁止         ASUS-ZCQ          C:\Program Files\WinRAR\WinRAR.exe        E:\test\svchost\svchost.exe        防病毒标准保护:禁止伪装 Windows 进程        已阻止的操作: 创建

donjuan

不报
==========
Portable Kaspersky Anti-Virus Scanner 3.0 Log File at 06/27/2007  08:56:48 AM
Memory        ok.
c:\downlo~7\virus~27.rar        archive: RAR
c:\downlo~7\virus~27.rar/svchost.exe        ok.

Scan process completed.

Scan Details :

Sectors :                 0
Files :                 2
Folders :                 0
Archives:                 1
Packed :                 0

Found Details :

Known Viruses :                 0
Virus Bodies :                 0
Disinfected :                 0
Deleted  :                 0
Warnings :                 0
Suspicious :                 0
Corrupted :                 0
Can't Access I/O Error:                 0

1688388728

病毒: Trojan-PSW.Win32.OnLineGames.rz

嘗試存取已感染的檔案.

檔案: svchost[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\1LW8W0F6

绅博周幸

Kaspersky Internet Security 7.0
The requested URL http://uni.kafan.cn/bbs/attachment.php?aid=93477 is infected with Trojan-PSW.Win32.OnLineGames.rz virus