红伞启发

promised

红伞哪个活的哪个死的都不知道

残缺的唯美

感觉都是死的=。=  没触碰规则 蜘蛛  fs杀不到毒

wangjay1980

可以看出它是如何启发的

lsyer

--> virus\dh3[1].jpg
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> virus\mh011[1].jpg
      [DETECTION] Contains suspicious code HEUR/Crypted.E
  --> virus\mm[1].jpg
      [DETECTION] Contains suspicious code HEUR/Crypted.E
  --> virus\my[1].jpg
      [DETECTION] Contains suspicious code HEUR/Crypted.E
  --> virus\tl[1].jpg
      [DETECTION] Contains suspicious code HEUR/Crypted.E
  --> virus\wd[1].jpg
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> virus\wl[1].jpg
      [DETECTION] Contains suspicious code HEUR/Crypted.E

2个出名字的
还有就不知道了~

The EQs

Scan performed at: 2007-9-2 19:59:17
Scanning Log
NOD32 version 2497 (20070901) NT
Command line: C:\Documents and Settings\Don johnson\桌面\virus.rar
Operating memory - is OK

Date: 2.9.2007  Time: 19:59:22
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\virus.rar
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?virus\dh3[1].jpg - a variant of Win32/PSW.OnLineGames.YA trojan
C:\Documents and Settings\Don johnson\桌面\virus.rar ?RAR ?virus\wd[1].jpg - a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 8
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 19:59:22 Total scanning time: 0 sec (00:00:00)

promised

就那两个是活的

lsyer

斑斑用的是IK
还是什么?

king6808

已检测: 木马程序 Trojan-PSW.Win32.OnLineGames.bjb        URL: http://bbs.kafan.cn/attachment.php?aid=122511//virus/dh3[1].jpg//PE_Patch.UPX//UPX

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2495
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\dh3[1].jpg - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\mh011[1].jpg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\mm[1].jpg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\my[1].jpg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\tl[1].jpg - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\wd[1].jpg - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\wl[1].jpg - OK

7 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

gho

时间        模块        对象        名称        病毒        操作        用户名称        信息
2007-9-2 22:24:48        AMON        文件        E:\Documents and Settings\Administrator\桌面\virus\wd[1].jpg        Win32/PSW.OnLineGames.YA 木马的变种        已隔离 - 已删除        CN-89FF4B9EA4D6\Administrator        程序新建文件时发生事件： E:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。
2007-9-2 22:24:45        AMON        文件        E:\Documents and Settings\Administrator\桌面\virus\dh3[1].jpg        Win32/PSW.OnLineGames.YA 木马的变种        已隔离 - 已删除        CN-89FF4B9EA4D6\Administrator        程序新建文件时发生事件： E:\Program Files\WinRAR\WinRAR.exe. 文件已被移入隔离区。您可以关闭本窗口。