卡巴不报！

king6808

已删除：木马程序 Trojan-PSW.Win32.WOW.ym        文件: F:\9.29\桌面.rar/QQ.EXE//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.WOW.ym        文件: F:\9.29\桌面.rar/AVPMS.DLL//UPack
已删除：木马程序 Trojan-PSW.Win32.WOW.ym        文件: F:\9.29\桌面.rar/MSAVP.DLL

wangjay1980

Hello,

####.exe_, IEINFO5.sys1 - Trojan-PSW.Win32.OnLineGames.dul,
IEINFO5.bak1 - Trojan-PSW.Win32.OnLineGames.duj,
WGAVAST0.dll1 - Trojan-PSW.Win32.OnLineGames.duk

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

AVPMS.dll1, MSAVP.dll1, QQ.exe_ - Trojan-PSW.Win32.WOW.ym

These files are already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

scottxzt

Begin scan in 'C:\Documents and Settings\dell\桌面\桌面.rar'
C:\Documents and Settings\dell\桌面\桌面.rar
  [0] Archive type: RAR
  --> QQ.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> IEINFO5.BAK
      [DETECTION] Contains suspicious code HEUR/Malware
  --> IEINFO5.SYS
      [DETECTION] Contains suspicious code HEUR/Malware
  --> MSAVP.DLL
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> WGAVAST0.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.ddm.1
  --> ħÊÞ¾«Áé.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [WARNING]   The file was ignored!

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 270
Paranoia Database - 6162
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\QQ.EXE - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IEINFO5.BAK - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\IEINFO5.SYS - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\AVPMS.DLL - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\MSAVP.DLL - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\WGAVAST0.DLL - Suspicious of Trojan-PSW.Small.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\魔.exe - Suspicious of Win32.Trojan-PSW.Game.1

7 Files scanned
0 Infected files found
7 Suspicious files found
0 Files cured
0 Files deleted

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\����.rar'
C:\Users\morgan\Documents\
  ����.rar
    [0] Archive type: RAR
    --> QQ.EXE
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> IEINFO5.BAK
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> IEINFO5.SYS
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> AVPMS.DLL
        [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
        [WARNING]   Infected files in archives cannot be repaired!
    --> MSAVP.DLL
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> WGAVAST0.DLL
        [DETECTION] Is the Trojan horse TR/PSW.Online.ddm.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> ħÊÞ¾«Áé.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月29日  10:45
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      5 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      8 Warnings
      0 Notes

fanrenta

卡巴为什么不报呢？到底有没有病毒呀，纳闷儿中~~

yjc2020

妈的。NOD32没有报

quange

卡巴　也報。。升級到最新病毒庫　　kis 6.0.0.621

lyb68

我也中标了， 除了Win32:Onlinegames-BBH [Trj]还有Win32:Delf-FVM [Trj] 。卡巴都没有报出来

hyxhcp

avg还不错   卡巴报了

[ 本帖最后由 hyxhcp 于 2007-10-3 12:02 编辑 ]