sample 1

000110

卡巴掃到

Graybird

Starting the file scan:

Begin scan in 'E:\Sample 1.rar'
E:\Sample 1.rar
  [0] Archive type: RAR
  --> Sample 1\aa1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.x
      [INFO]      The file was deleted!

冷冷

IK
I:\virus\1.rar:\1 - Signature 'Virus.Win32.VB.bu' found
I:\virus\1.rar

        2 Files scanned
          (1 Archiv with 1 file)
        1 Signature found
        0 Suspect code-parts found
        Used time: 0:00.047

-----------------------


[ 本帖最后由 冷_冷 于 2008-2-6 15:10 编辑 ]

kkgh

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.XYOnline.abe
病毒： Trojan.PSW.Win32.XYOnline.abe
病毒： Trojan.PSW.Win32.XYOnline.abe

用户来源：互联网

软件版本：20.30.20

Graybird

Starting the file scan:

Begin scan in 'E:\system32.rar'
E:\system32.rar
  [0] Archive type: RAR
  --> system32\LYLOADER.EXE
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> system32\LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> system32\MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/PSW.Online.gyo.2
      [WARNING]   The file was ignored!

Graybird

The file 'REGKEY.hiv' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 6.38.1.229.

spaceplane

avast 报木马

leonfg

ESET
C:\Documents and Settings\GUNDAM\桌面\Sample » RAR » Sample 1\aa1.exe - Win32/PSW.Agent.NGZ trojan

leonfg

原帖由 冷_冷 于 2008-2-6 15:08 发表
IK
I:\virus\1.rar:\1 - Signature 'Virus.Win32.VB.bu' found
I:\virus\1.rar

        2 Files scanned
          (1 Archiv with 1 file)
        1 Signature found
        0 Suspect code-parts found
...

ESET
C:\Documents and Settings\GUNDAM\桌面\system32.rar » RAR » system32\LYLOADER.EXE - Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\GUNDAM\桌面\system32.rar » RAR » system32\LYMANGR.DLL - Win32/PSW.OnLineGames.DTR trojan
C:\Documents and Settings\GUNDAM\桌面\system32.rar » RAR » system32\MSDEG32.DLL - Win32/PSW.OnLineGames.DVV trojan

电影结束了

对象: system32 LYLOADER.EXE
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pvw (KAV 引擎)
对象: system32 LYMANGR.DLL
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pum (KAV 引擎)
对象: system32 MSDEG32.DLL
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.pul (KAV 引擎)
对象: system32\LYLOADER.EXE
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Dropped:Generic.PWS.Games.3.C6BCD2A7 (BD 引擎)
对象: system32\MSDEG32.DLL
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Generic.PWS.Games.3.C6BCD2A7 (BD 引擎)
对象: system32\REGKEY.hiv
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\system32.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnlineGames.NWE (BD 引擎)