6只[MD5: 9738DF 091B43 7F61BF 167594 4C76DB DD6629]

promised

C:\ABC\2ACE4CFBAF2C.dll - 可疑代码段 被发现 (Level: 25)
C:\ABC\avp.exe - 特征码 'Trojan-PWS.Win32.Maran.dy' 被发现
C:\ABC\fun.dll - 特征码 'Generic.Lineage' 被发现
C:\ABC\od3mdi.dll - 可疑代码段 被发现 (Level: 55)
C:\ABC\Setup_Sl.exe - 特征码 'Backdoor.Win32.Agent.ahj' 被发现
C:\ABC\winfun.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.fx' 被发现

平淡

无敌敏敏

Starting the file scan:

Begin scan in 'E:\样本4.rar'
E:\样本4.rar
  [0] Archive type: RAR
  --> od3mdi.dll
      [DETECTION] Is the Trojan horse TR/Drop.Ag.115200.D
  --> fun.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> avp.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> winfun.exe
      [DETECTION] Is the Trojan horse TR/Lineage.156160
  --> Setup_Sl.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Delf.aq.2
      [INFO]      The file was deleted!

kp2006

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.OnlineGames.xyq
病毒： Trojan.PSW.Win32.Agent.vdk
病毒： Trojan.PSW.Gamania.wn   

MAC 地址：00:0A:E6:5B:8F:44

用户来源：互联网

软件版本：20.16.52

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.OnlineGames.xyq
病毒： Trojan.PSW.Win32.Agent.vdk
病毒： Trojan.PSW.Gamania.wn   

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.16.52

wangfeng66

D:\od3mdi.dll - infected with Trojan.PWS.Maran
D:\fun.dll - infected with Trojan.PWS.Lineage.origin
D:\avp.exe - infected with Trojan.PWS.Gamania.2891
D:\2ACE4CFBAF2C.dll - infected with Trojan.PWS.Gamania.4530
D:\winfun.exe - infected with Trojan.PWS.Gamania.origin
D:\Setup_Sl.exe - infected with Trojan.PWS.Gamania.4530

Archive contains 6 infected items

DRWEB 4.44  Kill All

The EQs

C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » od3mdi.dll - Win32/PSW.Maran.NT trojan
C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » fun.dll - a variant of Win32/PSW.Lineage.DN trojan
C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » avp.exe - a variant of Win32/PSW.Maran trojan
C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » 2ACE4CFBAF2C.dll - probably a variant of Win32/PSW.Lineage.DN trojan
C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » winfun.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Documents and Settings\Don johnson\桌面\样本4.rar » RAR » Setup_Sl.exe - a variant of Win32/PSW.OnLineGames.NFF trojan

uhthn2002

C:\Documents and Settings\Uhthn\Desktop\New Folder\od3mdi.dll : infected Trojan-PSW.Win32.OnLineGames.ccu
C:\Documents and Settings\Uhthn\Desktop\New Folder\fun.dll : infected MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\Uhthn\Desktop\New Folder\avp.exe : infected Trojan-PSW.Win32.Maran.jg
C:\Documents and Settings\Uhthn\Desktop\New Folder\2ACE4CFBAF2C.dll : infected MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\Uhthn\Desktop\New Folder\winfun.exe : infected MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\Uhthn\Desktop\New Folder\Setup_Sl.exe : is suspected of Embedded.MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\Uhthn\Desktop\New Folder\Setup_Sl.exe : backup copy created


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 6     
- scanned         : 0       -  scanned    : 0       - scanned     : 6     
- contain viruses : 0       -  infected   : 0       - infected    : 5     
- deleted         : 0       -  suspicious : 0       - suspicious  : 1

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 803
Paranoia Database - 48490
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\od3mdi.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\fun.dll - Infected WIN32.TROJAN-PSW.ONLINEGAMES.28 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\avp.exe - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.8
C:\Documents and Settings\Uhthn\Desktop\New Folder\2ACE4CFBAF2C.dll - Suspected MaliciousScope:WIN32.GENERIC.MALWARE.8
C:\Documents and Settings\Uhthn\Desktop\New Folder\winfun.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.28 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\Setup_Sl.exe - Infected MaliciousScope:WIN32.TROJAN-DOWNLOADER.AGENT.3 - Deleted

6 Files scanned
3 Infected files found
2 Suspected files found
0 Files disinfected
3 Files deleted

wangjay1980

detected: virus Heur.Trojan.Generic        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾4.rar/od3mdi.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.gsa        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾4.rar/fun.dll
detected: Trojan program Trojan-PSW.Win32.OnLineGames.gsa        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾4.rar/winfun.exe
detected: virus Heur.Test        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾4.rar/Setup_Sl.exe