maran变种[MD5: D4D63E B59CE8 409CE9 4F6612 292366 8F94C0 671A42]

promised

The EQs

C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » 2ACE4CFBAF2C.dll - probably a variant of Win32/PSW.Lineage.DN trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » Setup_SL.exe - a variant of Win32/PSW.OnLineGames.NFF trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » od3mdi.dll - Win32/PSW.Maran.NT trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » Setup.exe - Win32/PSW.Maran.NT trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » fun.dll - a variant of Win32/PSW.Lineage.DN trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » t.exe - a variant of Win32/PSW.Lineage.ACN trojan
C:\Documents and Settings\Don johnson\桌面\样本.rar » RAR » avp.exe - a variant of Win32/PSW.Maran trojan7个

Nerazzurri

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hmx        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/2ACE4CFBAF2C.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpq        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Setup_SL.exe
deleted: Trojan program Trojan-PSW.Win32.Maran.sy        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/od3mdi.dll
deleted: Trojan program Trojan-PSW.Win32.Maran.sz        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Setup.exe
deleted: Trojan program Trojan-PSW.Win32.Maran.sy        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/avp.exe

sweeb

金山只搞定4个

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\样本.rar'
C:\Users\morgan\Documents\
  样本.rar
    [0] Archive type: RAR
    --> 2ACE4CFBAF2C.dll
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> Setup_SL.exe
        [DETECTION] Contains detection pattern of the Windows virus W32/Delf.aq.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> od3mdi.dll
        [DETECTION] Is the Trojan horse TR/Drop.Ag.115200.D
        [WARNING]   Infected files in archives cannot be repaired!
    --> Setup.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> fun.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> t.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> avp.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年11月15日  22:05
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      4 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      8 Warnings
      0 Notes

无敌敏敏

Starting the file scan:

Begin scan in 'E:\样本.rar'
E:\样本.rar
  [0] Archive type: RAR
  --> 2ACE4CFBAF2C.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Setup_SL.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Delf.aq.2
  --> od3mdi.dll
      [DETECTION] Is the Trojan horse TR/Drop.Ag.115200.D
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> fun.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> t.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> avp.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月16日  14:06
Used time: 00:22 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      4 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      1 Archives were scanned
      0 Warnings

Nerazzurri

Hello,

fun.dll - Trojan-PSW.Win32.Magania.bez,
t.exe_ - Trojan-PSW.Win32.Magania.bfa

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Ermilov Maxim
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

秋叶濛濛

Starting the file scan:

Begin scan in 'F:\Virus\样本.rar'
F:\Virus\样本.rar
  [0] Archive type: RAR
  --> 2ACE4CFBAF2C.dll
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> Setup_SL.exe
      [DETECTION] Contains detection pattern of the Windows virus W32/Delf.aq.2
  --> od3mdi.dll
      [DETECTION] Is the Trojan horse TR/Drop.Ag.115200.D
  --> Setup.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> fun.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> t.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> avp.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.OnlineGames.xyq
病毒： Trojan.PSW.Gamania.wn   

用户来源：互联网

软件版本：20.18.40

豫孤鸟

我的计算机上安装的5种杀软报全的只有nod32，卡巴报5个，瑞星报2个，金山没有报毒，江民2个