BB259CDD4D0A221EFED2E347B2B9D015

Love=卡巴+费尔

过瑞星、江民、趋势。

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\LYLOADER.zip'
C:\Documents and Settings\Administrator\My Documents\
  LYLOADER.zip
    [0] Archive type: ZIP
    --> LYLOADER.EXE
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

欠妳緈諨

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.cny        URL: http://bbs.kafan.cn/attachment.p ... XE//PE_Patch//UPack

东京时空

moonsilver

瑞星系统加固发现程序文件访问违规

应用程序信息
文件名：C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LYLOADER.EXE
版本：
厂商：
PID: 3756       TID: 3764

动作目标：C:\WINDOWS\SYSTEM32\LYLOADER.EXE
动作：创建C:\WINDOWS\SYSTEM32\LYLOADER.EXE

动作目标：C:\WINDOWS\SYSTEM32\LYMANGR.DLL
动作：创建C:\WINDOWS\SYSTEM32\LYMANGR.DLL

动作目标：C:\WINDOWS\SYSTEM32\MSDEG32.DLL
动作：创建C:\WINDOWS\SYSTEM32\MSDEG32.DLL

[ 本帖最后由 moonsilver 于 2007-9-12 11:54 编辑 ]

1688388728

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=126718 is infected with Trojan-PSW.Win32.OnLineGames.cny virus

残缺的唯美

Scan performed at: 2007-9-12 13:00:31
Scanning Log
NOD32 version 2523 (20070912) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\LYLOADER.zip

Date: 12.9.2007  Time: 13:00:33
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\LYLOADER.zip
D:\Documents and Settings\EKINCHENG\桌面\LYLOADER.zip ?ZIP ?LYLOADER.EXE - a variant of Win32/PSW.Agent.NEC trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:00:33 Total scanning time: 0 sec (00:00:00)

微点卫士

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.kqw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LYLOADER.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
4) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
5) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
是否删除木马程序及其衍生物?

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4471
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\LYLOADER.EXE

C:\Documents and Settings\uhthn\Desktop\LYLOADER.EXE - Suspicious of Trojan-PSW.OnLineGames.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted