未知

mofunzone

可以很明确的告诉你wanpacket.dll和wpcap.dll都是误报

jimmyleo

那两个是抓包用的

Graybird

Starting the file scan:

Begin scan in 'E:\Virus\New Folder.rar'
E:\Virus\New Folder.rar
  [0] Archive type: RAR
  --> SSLDyn.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kwk
      [WARNING]   The file was ignored!

Graybird

207448         npf.sys         31.75 KB         KNOWN CLEAN
1006662         Packet.dll         26.32 KB         CLEAN
3600878         ratboni.dll         49 Byte         CLEAN
557879         REGKEY.hiv         8 KB                       FALSE POSITIVE
3600879         sidjhcsa.dll         57 Byte         CLEAN
3600880         SSLDyn.dll         131.5 KB         MALWARE
1006659         WanPacket.dll 21.24 KB         CLEAN
540509         wpcap.dll         80.58 KB         CLEAN
3600881         wszjdcj.dll         56 Byte         CLEAN
3600882         avwghina.dll         59 Byte         CLEAN
3600883         avwlgin.dll         47 Byte         CLEAN
3600884         avzxkina.dll         59 Byte         CLEAN
3600885         kvdxskcfa.dll         53 Byte         CLEAN

qigang

RX20.23.01一个未报。。

hero1202

When closing file "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QX2PQPGT\New Folder[1].rar" the virus "Trojan-PSW.Win32.OnLineGames.kwk" from engine "Engine A" has been detected. File cleaned: no. File deleted: no. Quarantine: yes.
When opening file "C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\QX2PQPGT\New Folder[1].rar" the virus "Trojan-PSW.Win32.OnLineGames.kwk" from engine "Engine A" has been detected. File cleaned: no. File deleted: no. Quarantine: no.