又21个

promised

C:\ABC\样本.rar:\LYMANGR.DLL - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\MSDEG32.DLL - 特征码 'Generic.PWS.Games.3' 被发现
C:\ABC\样本.rar:\0.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\1.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqi' 被发现
C:\ABC\样本.rar:\2.exe - 可疑代码段 被发现 (Level: 45)
C:\ABC\样本.rar:\3.exe - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本.rar:\4.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\5.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\6.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本.rar:\9.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hhm' 被发现
C:\ABC\样本.rar:\11.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hhi' 被发现
C:\ABC\样本.rar:\12.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\13.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\15.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\16.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hhj' 被发现
C:\ABC\样本.rar:\17.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\18.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.hqh' 被发现
C:\ABC\样本.rar:\19.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\intest.exe - 特征码 'Trojan-PWS.Win32.WOW.vd' 被发现
C:\ABC\样本.rar:\608769MM.DLL - 特征码 'Trojan-PWS.Win32.Lmir.bos' 被发现
C:\ABC\样本.rar:\LYLOADER.EXE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本.rar
22 文件被扫描
   (1 压缩档 21 文件)
20 特征码被侦测
1 可疑代码段被发现
耗时: 0:02.453

Nerazzurri

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpo        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/LYMANGR.DLL//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpp        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/MSDEG32.DLL//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqi        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/1.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/2.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/3.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/4.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/5.exe
deleted: Trojan program Trojan-PSW.Win32.Lmir.bou        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/6.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/9.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/11.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/12.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/13.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/15.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/16.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/17.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/18.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/19.exe
deleted: Trojan program Trojan-PSW.Win32.Lmir.bos        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/intest.exe
deleted: Trojan program Trojan-PSW.Win32.Lmir.bos        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/608769MM.DLL
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpl        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/LYLOADER.EXE//PE_Patch//UPack

The EQs

C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » MSDEG32.DLL - Win32/PSW.OnLineGames.DVV trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 1.exe - Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 2.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 3.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 4.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 5.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 6.exe - Win32/PSW.WOW.WU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 9.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 11.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 12.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 13.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 15.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 16.exe - Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 17.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 18.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 19.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » intest.exe - Win32/PSW.WOW.WU trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » 608769MM.DLL - Win32/PSW.Legendmir.NFF trojan
C:\Documents and Settings\Don johnson\桌面\样本(1).rar » RAR » LYLOADER.EXE - Win32/PSW.Agent.NEC trojan

残缺的唯美

mcafee  19

hahacomcn

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> 0.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> intest.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 608769MM.DLL
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2


End of the scan: 2007年11月16日  13:16
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     23 Files were scanned
     20 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpo    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/LYMANGR.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpp    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/MSDEG32.DLL//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.KillAV.ge    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/0.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqi    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/1.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/2.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/3.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/4.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/5.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Lmir.bou    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/6.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/9.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/11.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/12.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/13.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/15.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/16.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/17.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/18.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/19.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Lmir.bos    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/intest.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Lmir.bos    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/608769MM.DLL
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpl    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/LYLOADER.EXE//PE_Patch//UPack


２１个

yclidong

nod32
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?LYMANGR.DLL - Win32/PSW.OnLineGames.DTR 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?MSDEG32.DLL - Win32/PSW.OnLineGames.DVV 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?1.exe - Win32/PSW.Agent.NEC 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?2.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?3.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?4.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?5.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?6.exe - Win32/PSW.WOW.WU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?9.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?11.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?12.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?13.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?15.exe - 可能是 Win32/PSW.OnLineGames.NGU 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?16.exe - Win32/PSW.OnLineGames.NGU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?17.exe - 可能是 Win32/PSW.OnLineGames.NGU 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?18.exe - 可能是 Win32/PSW.OnLineGames.NGU 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?19.exe - 可能是 Win32/PSW.OnLineGames.NGU 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?intest.exe - Win32/PSW.WOW.WU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?608769MM.DLL - Win32/PSW.Legendmir.NFF 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本2.rar ?RAR ?LYLOADER.EXE - Win32/PSW.Agent.NEC 特洛伊木马

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.XYOnline.jy
病毒： Trojan.PSW.Win32.XYOnline.rv
病毒： Trojan.PSW.Win32.GameOnline.ix
病毒： Dropper.Win32.XYOnline.v
病毒： Trojan.PSW.Win32.ZhengTu.ylv
病毒： Trojan.PSW.Win32.AskTao.en
病毒： Trojan.PSW.Win32.GameOnline.adw
病毒： Trojan.Win32.Agent.zri   
病毒： Trojan.PSW.Win32.GameOnline.zo
病毒： Trojan.PSW.Win32.GameOnline.zm
病毒： Trojan.PSW.Win32.DJOnline.as
病毒： Trojan.PSW.Win32.QQSG.aa
病毒： Trojan.PSW.Win32.GameOnline.adu
病毒： Trojan.PSW.Win32.ZhengTu.ylt
病毒： Trojan.PSW.Win32.XYOnline.sa
病毒： Trojan.PSW.Win32.WoWar.afd
病毒： Trojan.PSW.Win32.XYOnline.sh
病毒： Trojan.PSW.Win32.WoWar.uz
病毒： Trojan.PSW.Win32.LMir.yym
病毒： Trojan.PSW.Win32.XYOnline.hy

用户来源：互联网

软件版本：20.18.40
瑞星全杀

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.XYOnline.jy
病毒： Trojan.PSW.Win32.XYOnline.rv
病毒： Trojan.PSW.Win32.GameOnline.ix
病毒： Dropper.Win32.XYOnline.v
病毒： Trojan.PSW.Win32.ZhengTu.ylv
病毒： Trojan.PSW.Win32.AskTao.en
病毒： Trojan.PSW.Win32.GameOnline.adw
病毒： Trojan.Win32.Agent.zri   
病毒： Trojan.PSW.Win32.GameOnline.zo
病毒： Trojan.PSW.Win32.GameOnline.zm
病毒： Trojan.PSW.Win32.DJOnline.as
病毒： Trojan.PSW.Win32.QQSG.aa
病毒： Trojan.PSW.Win32.GameOnline.adu
病毒： Trojan.PSW.Win32.ZhengTu.ylt
病毒： Trojan.PSW.Win32.XYOnline.sa
病毒： Trojan.PSW.Win32.WoWar.afd
病毒： Trojan.PSW.Win32.XYOnline.sh
病毒： Trojan.PSW.Win32.WoWar.uz
病毒： Trojan.PSW.Win32.LMir.yym
病毒： Trojan.PSW.Win32.XYOnline.hy

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.18.41

碧水寒潭

Start of the scan: 2007年11月16日  20:40

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\样本.rar
  [0] Archive type: RAR
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
  --> 0.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 18.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
  --> intest.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 608769MM.DLL
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
      [INFO]      The file was deleted!


End of the scan: 2007年11月16日  20:40
Used time: 00:16 min

The scan has been done completely.

      1 Scanning directories
     22 Files were scanned
     20 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes