21个

promised

C:\ABC\样本.rar:\ProcSvr01.dll - 特征码 'Virus.Win32.Nilage.JY' 被发现
C:\ABC\样本.rar:\avzxfmn.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\AVPSrv.dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\样本.rar:\DbgHlp32.dll - 特征码 'Virus.Win32.Nilage.JY' 被发现
C:\ABC\样本.rar:\avwgemn.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\ejpwcinsyd.dll - 特征码 'Trojan-PWS.Win32.Agent.jp' 被发现
C:\ABC\样本.rar:\avzxfst.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\avwgest.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\REGKEY.hiv - 特征码 'Trojan-PWS.OnlineGames.AVH' 被发现
C:\ABC\样本.rar:\LYMANGR.DLL - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\AVPSrv.exE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\DbgHlp32.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\aa3.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqi' 被发现
C:\ABC\样本.rar:\aa18.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\e11.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar:\e13.exe - 特征码 'Trojan-PWS.Win32.Delf.ix' 被发现
C:\ABC\样本.rar:\e15.exe - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\样本.rar:\e17.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\NvSys_54.Sys - 特征码 'Trojan-PWS.Win32.Nilage.bga' 被发现
C:\ABC\样本.rar:\MSDEG32.DLL - 特征码 'Generic.PWS.Games.3' 被发现
C:\ABC\样本.rar:\LYLOADER.EXE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar
22 文件被扫描
   (1 压缩档 21 文件)
21 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.344

Nerazzurri

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hyc        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/avzxfmn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqv        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/AVPSrv.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqq        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/DbgHlp32.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hyd        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/avwgemn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hnt        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/ejpwcinsyd.dll//UPack//PE_Patch.MaskPE
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hxx        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/avzxfst.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hxo        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/avwgest.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpo        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/LYMANGR.DLL//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqy        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/AVPSrv.exE//PE_Patch//UPack//PE_Patch
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hre        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/DbgHlp32.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpj        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/aa3.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/aa18.exe
deleted: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/e11.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hnt        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/e13.exe//FSG
deleted: Trojan program Trojan-PSW.Win32.QQPass.alt        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/e15.exe//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/e17.exe
deleted: Trojan program Trojan-PSW.Win32.QQPass.alu        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/NvSys_54.Sys
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpp        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/MSDEG32.DLL//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpl        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/LYLOADER.EXE//PE_Patch//UPack

googlehack

又是新病毒啊！

16300

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.hyc        URL: http://bbs.kafan.cn/attachment.php?aid=153863//avzxfmn.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hyc        文件: C:\Documents and Settings\Administrator\桌面\样本\avzxfmn.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hqv        文件: C:\Documents and Settings\Administrator\桌面\样本\AVPSrv.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hqq        文件: C:\Documents and Settings\Administrator\桌面\样本\DbgHlp32.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hyd        文件: C:\Documents and Settings\Administrator\桌面\样本\avwgemn.dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hnt        文件: C:\Documents and Settings\Administrator\桌面\样本\ejpwcinsyd.dll//UPack//PE_Patch.MaskPE
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hxx        文件: C:\Documents and Settings\Administrator\桌面\样本\avzxfst.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hxo        文件: C:\Documents and Settings\Administrator\桌面\样本\avwgest.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpo        文件: C:\Documents and Settings\Administrator\桌面\样本\LYMANGR.DLL//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hqy        文件: C:\Documents and Settings\Administrator\桌面\样本\AVPSrv.exE//PE_Patch//UPack//PE_Patch
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hre        文件: C:\Documents and Settings\Administrator\桌面\样本\DbgHlp32.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hpj        文件: C:\Documents and Settings\Administrator\桌面\样本\aa3.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.hqh        文件: C:\Documents and Settings\Administrator\桌面\样本\aa18.exe
已删除: 木马程序 Trojan-PSW.Win32.Nilage.bty        文件: C:\Documents and Settings\Administrator\桌面\样本\e11.exe//PE_Patch//UPack

The EQs

C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » ProcSvr01.dll - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » avzxfmn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » AVPSrv.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » DbgHlp32.dll - Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » avwgemn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » ejpwcinsyd.dll - Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » avzxfst.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » avwgest.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » AVPSrv.exE - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » DbgHlp32.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » aa3.exe - Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » aa18.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » e11.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » e13.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » e15.exe - Win32/PSW.QQPass.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » e17.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » NvSys_54.Sys - Win32/PSW.QQPass.NCJ trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » MSDEG32.DLL - a variant of Win32/PSW.OnLineGames.DVV trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » LYLOADER.EXE - a variant of Win32/PSW.Agent.NEC trojan

残缺的唯美

mcafee  12

hahacomcn

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> ProcSvr01.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> avzxfmn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> AVPSrv.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> DbgHlp32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> avwgemn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> ejpwcinsyd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hnt
  --> avzxfst.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> avwgest.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> AVPSrv.exE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> DbgHlp32.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> aa3.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> aa18.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> e11.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> e13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hnt
  --> e15.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.44157
  --> e17.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> NvSys_54.Sys
      [DETECTION] Is the Trojan horse TR/PSW.Steal.44157
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2


End of the scan: 2007年11月16日  13:14
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     23 Files were scanned
     15 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hyc    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/avzxfmn.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqv    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/AVPSrv.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqq    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/DbgHlp32.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hyd    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/avwgemn.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hnt    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/ejpwcinsyd.dll//UPack//PE_Patch.MaskPE
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hxx    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/avzxfst.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hxo    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/avwgest.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpo    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/LYMANGR.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqy    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/AVPSrv.exE//PE_Patch//UPack//PE_Patch
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hre    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/DbgHlp32.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpj    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/aa3.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/aa18.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Nilage.bty    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/e11.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hnt    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/e13.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.alt    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/e15.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/e17.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.alu    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/NvSys_54.Sys
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpp    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/MSDEG32.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpl    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/LYLOADER.EXE//PE_Patch//UPack


19个，沒杀,已上报

sam.to

Hello,

ProcSvr01.dll - Trojan-PSW.Win32.OnLineGames.hyi

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

REGKEY.hiv

This file is corrupted.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

豫孤鸟

我的计算机上的5种杀软都报毒，卡巴斯基和nod32报的最多，其次瑞星，江民，金山