三个病毒之一

bjfhj

G DATA AntiVirus检测
版本 18.7.8155.555
病毒特征库日期 2008/8/31
开始时间： 2008/8/31 10:56
引擎： 引擎A (AVK 19.225), 引擎B (AVB 19.11)
启发式： 开启
档案文件： 开启
系统区域： 开启
检测系统区域...
检测以下目录和文件：
  C:\Documents and Settings\Administrator\桌面\1.rar
对象： 22.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\1.rar
状态： 发现病毒
病毒： Trojan-PSW.Win32.OnLineGames.wph (引擎A)
对象： 18.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\1.rar
状态： 发现病毒
病毒： Trojan-PSW.Win32.OnLineGames.wkm (引擎A)
对象： 1.rar
路径: C:\Documents and Settings\Administrator\桌面
状态： 发现病毒
病毒： Trojan-PSW.Win32.OnLineGames.wph, Trojan-PSW.Win32.OnLineGames.wkm (引擎A)
扫描完成于： 2008/8/31 10:56
    1个文件已检测
    1个受感染文件已发现
    0个可疑文件被发现

fzz8848

Begin scan in 'E:\Download\Virus\1.rar'
E:\Download\Virus\1.rar
    [0] Archive type: RAR
    --> 22.exe
      [DETECTION] Is the TR/Drop.Agent.12265 Trojan
    --> 18.exe
      [DETECTION] Is the TR/PSW.OnlineGames.wkm.4 Trojan
    [NOTE]      The file was deleted!

will

Multi Command-Line Scanner Report
echo.
-------------------------------------------
D:\Desk\Samples\Collect\MCLS\18.exe
MD5 Hash: 6739B66D05768205B3D49059E3051C26

A-squared ----- Trojan-PSW.Win32.OnLineGames.wch
Avast ----- Win32:OnLineGames-DEH [Trj]
Antivir ----- TR/PSW.OnlineGames.wkm.4
BitDefender ----- Trojan.PWS.Small.1
Dr.Web ----- Trojan.PWS.Wsgame.4168
Eset NOD32 ----- Win32/PSW.OnLineGames.PBQ trojan
F-prot ----- W32/Heuristic-KPP!Eldorado
Kaspersky ----- Trojan-PSW.Win32.OnLineGames.wkm
Ikarus ----- Trojan-PWS.Win32.OnLineGames.yip
Kingsoft ----- Win32.Troj.OnlineGamesT.af.57344
Mcafee ----- PWS-WoW.gen.a
Norman ----- Trojan W32/DLoader.GITF
Panda ----- Trj/Lineage.BZE
Sophos ----- Sus/ComPack-K
Trend Micro ----- AP_MALPK-2
Vba32 ----- Trojan-PSW.Win32.OnLineGames.wkm
-------------------------------------------
D:\Desk\Samples\Collect\MCLS\22.exe
MD5 Hash: 49955F5A9603D7AE0320B3005EE1EBD4

A-squared ----- Trojan-PSW.Win32.OnLineGames.wch
Avast ----- Win32:OnLineGames-DEH [Trj]
Antivir ----- TR/Drop.Agent.12265
BitDefender ----- Trojan.PWS.Small.1
Dr.Web ----- Trojan.PWS.Wsgame.4170
Eset NOD32 ----- Win32/PSW.OnLineGames.PBQ trojan
F-prot ----- W32/Agent.L.gen!Eldorado
Kaspersky ----- Trojan-PSW.Win32.OnLineGames.wph
Ikarus ----- Trojan-PWS.Win32.OnLineGames.yip
Kingsoft ----- Win32.Troj.OnlineGamesT.af.57344
Mcafee ----- PWS-WoW.gen.a
Norman ----- Trojan W32/DLoader.GGGE
Panda ----- Trj/Lineage.BZE
Sophos ----- Sus/ComPack-K
Trend Micro ----- AP_MALPK-2
Vba32 ----- Trojan-PSW.Win32.OnLineGames.wph
-------------------------------------------
D:\Desk\Samples\Collect\MCLS\6to4svc.dll
MD5 Hash: FE70B589AC507EEB313BA8DBAA8E4549

A-squared ----- Nothing
Avast ----- Nothing
AntiVir ----- Nothing
BitDefender ----- Nothing
Dr.Web ----- Nothing
Eset ----- Nothing
F-prot ----- Nothing
Kaspersky ----- Nothing
Ikarus ----- Nothing
Kingsoft ----- Nothing
Mcafee ----- Nothing
Norman ----- Nothing
Panda ----- Nothing
Sophos ----- Nothing
Trend Micro ----- Nothing
Vba32 ----- Nothing
-------------------------------------------

Task done @ 2008/08/31 日 11:43:23.54

woai_jolin

Scan Log
Version of virus signature database: 3401 (20080829)
Date: 2008-8-31  Time: 11:49:15
Scanned disks, folders and files: G:\v\1.rar
G:\v\1.rar » RAR » 22.exe - Win32/PSW.OnLineGames.PBQ trojan - was a part of the deleted object
G:\v\1.rar » RAR » 6to4svc.dll - is OK
G:\v\1.rar » RAR » 18.exe - Win32/PSW.OnLineGames.PBQ trojan - was a part of the deleted object
Number of scanned objects: 3
Number of threats found: 2
Number of cleaned objects: 2
Time of completion: 11:49:15  Total scanning time: 0 sec (00:00:00)

hzyw

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  http://bbs.kafan.cn/attachment.p ... cb&t=1220161181
Information:  Is the TR/Drop.Agent.12265 Trojan  


--------------------------------------------------------------------------------
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.23, VDF 7.0.6.93

kkgh

费尔2个

尤金卡巴斯基

2008/8/31 19:56:32        已清除        木马程序 Trojan-PSW.Win32.OnLineGames.wph        G:\Temp\Virus\1.rar/22.exe//PE_Patch//UPack               
2008/8/31 19:56:32        已清除        木马程序 Trojan-PSW.Win32.OnLineGames.wkm        G:\Temp\Virus\1.rar/18.exe//PE_Patch//UPack

拂晓时分

nod32 报特洛伊木马

allinwonderi

[Scanning : C:\Download Files]


C:\Download Files\1.rar<RAR>:22.exe<UPack>:22.exe <- Trojan.Psw.Onlinegames.Wph : No action
C:\Download Files\1.rar<RAR>:18.exe<UPack>:18.exe <- Trojan.Psw.Onlinegames.Wkm : No action



Scanned objects : 6

Infected objects : 2

allinwonderi

[发现安全风险： ]        <W32/Agent.L.gen!Eldorado (not disinfectable, 普通)>        C:\Download Files\1.rar->22.exe->exefile->(UPack)
[发现可能安全风险：]        <W32/Heuristic-KPP!Eldorado (损坏, not disinfectable)>        C:\Download Files\1.rar->18.exe->exefile->(UPack)

---------------------------------------------------------------------
扫描已结束:        2008-8-31, 20:47:59
用时:        0:00:01

扫描结果:

已扫描的文件:                 6
已感染的对象:         2
已清除的对象:         0
已隔离的文件:         0
---------------------------------------------------------------------