2008年11月21日下午收集的40个可疑样本

will

  Total Command-Line Scanner Report
-------------------------------------------------------------------------
  Report for Jiangmin Command-Line Scanner :

  01.exe ----- Trojan/PSW.OnLineGames.aopl  
  02.exe ----- TrojanDropper.Agent.qfe  
  03.exe ----- Trojan/Ck88866.Gen  
  08.exe ----- Trojan/PSW.GamePass.ahgf  
  09.exe ----- TrojanDropper.Agent.qsu  
  10.exe ----- TrojanDropper.Agent.qqx  
  11.exe ----- Trojan/PSW.OnLineGames.aote  
  12.exe ----- Trojan/PSW.Magania.ldc  
  13.exe ----- TrojanSpy.OnLineGames.epy  
  14.exe ----- Trojan/PSW.Agent.gqt  
  15.exe ----- Trojan/Agent.bpsf  
  16.exe ----- TrojanSpy.OnLineGames.euu  
  17.exe ----- Trojan/PSW.Magania.lax  
  18.exe ----- Trojan/PSW.OnLineGames.aopt  
  19.exe ----- TrojanSpy.OnLineGames.jzc  
  20.exe ----- Trojan/Hijacker.dt  
  21.exe ----- Trojan/PSW.OnLineGames.aopn  
  23.exe ----- Trojan/PSW.OnLineGames.aost  
  25.exe ----- Trojan/Agent.bprg  
  27.exe ----- TrojanSpy.Agent.hau  
  28.exe ----- Trojan/PSW.OnLineGames.aosv  
  30.exe ----- TrojanDropper.Win32.Delf.d  
  31.exe ----- TrojanSpy.OnLineGames.fbd  
  32.exe ----- Trojan/PSW.Magania.lbl  
  33.exe ----- TrojanSpy.OnLineGames.fbd  
  37.exe ----- Trojan/PSW.Agent.gqb  
  47.exe ----- AdWare/Cinmus.Gen  
  49.exe ----- Backdoor/Agent.bwee  
  50.exe ----- Trojan/PSW.OnLineGames.aonx  
  52.exe ----- TrojanSpy.Agent.hda  

  Jiangmin found 30 detections in 40 files.
-------------------------------------------------------------------------
  Task done @ 2008/11/21 五 17:24:49.55

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\01.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 975EA6A11C323C5197D422703152F056

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8637
Eset ----- a variant of Win32/PSW.OnLineGames.NSG trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin ----- Trojan/PSW.OnLineGames.aopl
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttii
Kingsoft ----- Win32.Troj.OnLineGames.ad.65536
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tsvy

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\02.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 5A57E99181B2908F0A5B7CB1E85E07DC

A-squared ----- Trojan-Dropper.Delf!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.Generic6.AOMK  
AntiVir ----- TR/PSW.Delf.ctu
BitDefender ----- Trojan.Generic.1095925
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wow.798
Eset ----- Win32/PSW.WOW.CHF trojan
Ikarus ----- Trojan-Dropper.Delf
Jiangmin ----- TrojanDropper.Agent.qfe
Kaspersky ----- Trojan-PSW.Win32.Delf.ctv
Kingsoft ----- Win32.PSWTroj.OnlineGames.ch.98668
Vba32 ----- Trojan-PSW.Win32.Delf.ctv

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\03.exe
Type: Generic Win/DOS Executable / Extension: .EXE
MD5 Hash: C89603159BC7DA9488DA5612C578A7DB

A-squared ----- Win32.SuspectCrc!IK
Avast ----- Win32:Lmir-OK [Trj]
Avg -----Nothing
AntiVir ----- TR/Spy.Gen
BitDefender ----- Dropped:Trojan.OnlineGames.ZV
ClaimWin -----Nothing
Dr.Web ----- MULDROP.Trojan
Eset ----- probably unknown NewHeur_PE virus
Ikarus ----- Win32.SuspectCrc
Jiangmin ----- Trojan/Ck88866.Gen
Kaspersky ----- Heur.Trojan.Generic
Kingsoft -----Nothing
Vba32 -----Nothing

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\05.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: E5CBED653528CFF4C5AD8217695E645C

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast -----Nothing
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.origin
Eset ----- Win32/PSW.OnLineGames.NSG trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft -----Nothing
Vba32 -----Nothing

*** 7/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\07.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 9C6B3ADFA03FC3B9016D15E3598915DA

A-squared ----- Trojan.Injector.AF!IK
Avast ----- Win32:Spyware-gen [Trj]
Avg ----- Downloader.Zlob.AGPF  
AntiVir ----- TR/Spy.Gen
BitDefender ----- Trojan.Zlob.41936
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wow.767
Eset ----- Win32/PSW.WOW.NFP trojan
Ikarus ----- Trojan.Injector.AF
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft ----- Win32.Troj.OnlineGames.cf.98668
Vba32 ----- MalwareScope.Trojan-PSW.Game.7

*** 10/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\08.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 30826D8496730FFE4A3FCC98E1C5DA2B

A-squared ----- Trojan-Spy.Win32.Treemz.A!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/PSW.Online.bir
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClamWin ----- Trojan.Spy-55627
Dr.Web ----- Trojan.PWS.Wsgame.8127
Eset ----- Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Trojan-Spy.Win32.Treemz.A
Jiangmin ----- Trojan/PSW.GamePass.ahgf
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttxe
Kingsoft ----- Win32.Troj.OnlineGames.ak.61440
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tsxn

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\09.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: E7E0165FEA0DB55B189835B5C2A4F5F0

A-squared ----- Trojan.Injector.AF!IK
Avast ----- Win32:Spyware-gen [Trj]
Avg ----- PSW.OnlineGames.BHGV  
AntiVir ----- DR/Delphi.Gen
BitDefender ----- Trojan.Generic.1123574
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wow.767
Eset ----- Win32/PSW.Delf.NNH trojan
Ikarus ----- Trojan.Injector.AF
Jiangmin ----- TrojanDropper.Agent.qsu
Kaspersky -----Nothing
Kingsoft ----- Win32.Troj.Delf.94754
Vba32 ----- MalwareScope.Trojan-PSW.Game.7

*** 11/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\10.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 459A06082220A8F1971CF27D974C05C9

A-squared ----- Trojan-Dropper.Delf!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHEB  
AntiVir ----- DR/Delphi.Gen
BitDefender ----- Trojan.Generic.1134752
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Gamania.16294
Eset ----- Win32/PSW.WOW.CRA trojan
Ikarus ----- Trojan-Dropper.Delf
Jiangmin ----- TrojanDropper.Agent.qqx
Kaspersky ----- Trojan-GameThief.Win32.WOW.crg
Kingsoft ----- Win32.Troj.PswWOW.oj.111684
Vba32 ----- MalwareScope.Trojan-PSW.Game.7

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\11.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: B02CF7C018255F458083E8B895500C02

A-squared ----- Trojan-Spy.Win32.Treemz!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8638
Eset ----- Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Trojan-Spy.Win32.Treemz
Jiangmin ----- Trojan/PSW.OnLineGames.aote
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttmm
Kingsoft ----- Win32.Troj.OnLineGames.ad.65536
Vba32 ----- Embedded.Trojan-GameThief.Win32.OnLineGames.ttjt

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\12.exe
Type: Win32 EXE Yoda's Crypter / Extension: .EXE
MD5 Hash: 8F659697CBADE10DE1CB9D0DC7EF8B6E

A-squared ----- Trojan.Rincux!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHBM  
AntiVir ----- TR/Thief.Magania.5025
BitDefender ----- Trojan.Rincux.AW
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset -----Nothing
Ikarus ----- Trojan.Rincux
Jiangmin ----- Trojan/PSW.Magania.ldc
Kaspersky ----- Trojan-GameThief.Win32.Magania.akuj
Kingsoft ----- Win32.PSWTroj.MyssDs.a.40960
Vba32 ----- Embedded.Trojan-GameThief.Win32.Magania.gen

*** 10/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\13.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: E8466C15CAAD452861A87672D1E7ACCD

A-squared ----- Trojan.Zlob!IK
Avast ----- Win32:Agent-WVL [Trj]
Avg ----- PSW.OnlineGames.AZKS  
AntiVir ----- TR/Spy.Gen
BitDefender ----- Trojan.PWS.Onlinegames.6
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.7286
Eset ----- Win32/PSW.OnLineGames.MUG trojan
Ikarus ----- Trojan.Zlob
Jiangmin ----- TrojanSpy.OnLineGames.epy
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.tcqi
Kingsoft ----- Win32.Troj.OnLineGames.ad.249916
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tcqi

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\14.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: C461ADBD202A9E3F21BB844F71AA18CA

A-squared ----- Trojan-Spy.Win32.Banker.anv!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.Agent.WFV  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Generic.PWStealer.E0BA938E
ClamWin ----- Trojan.Downloader-35380
Dr.Web ----- Trojan.PWS.Mgame.origin
Eset ----- a variant of Win32/PSW.OnLineGames.ODD trojan
Ikarus ----- Trojan-Spy.Win32.Banker.anv
Jiangmin ----- Trojan/PSW.Agent.gqt
Kaspersky ----- Trojan-PSW.Win32.Delf.cuh
Kingsoft ----- Win32.PSWTroj.Agent.126976
Vba32 ----- MalwareScope.Trojan-PSW.Game.13

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\15.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 614C191D4E406353DB134746F782F633

A-squared ----- Net-Worm.Win32.Mytob!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- BackDoor.Generic10.YGO  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZLE
ClaimWin -----Nothing
Dr.Web ----- Trojan.MulDrop.23101
Eset ----- a variant of Win32/Rootkit.Agent.NGW trojan
Ikarus ----- Net-Worm.Win32.Mytob
Jiangmin ----- Trojan/Agent.bpsf
Kaspersky ----- Trojan.Win32.Agent.angj
Kingsoft ----- Win32.TrojDownloader.Mnless.65536
Vba32 ----- Trojan.Win32.Agent.angj

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\16.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: D856A0BB6287DB72AE6CBFEC11DFC715

A-squared ----- Win32.SuspectCrc!IK
Avast ----- Win32:OnLineGames-FDQ [Trj]
Avg ----- Agent.ALHK  
AntiVir ----- TR/Spy.Gen
BitDefender ----- Trojan.Dropper.OnlineGames.CK
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.2838
Eset ----- Win32/PSW.OnLineGames.NRD trojan
Ikarus ----- Win32.SuspectCrc
Jiangmin ----- TrojanSpy.OnLineGames.euu
Kaspersky ----- Trojan-GameThief.Win32.Magania.akee
Kingsoft ----- Win32.Troj.OnlineGamesT.vy.90588
Vba32 ----- Trojan.Win32.Agent.amtx

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\17.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: A18228FB682DE7FC0E8F95AB1B196328

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- BACKDOOR.Trojan
Eset ----- a variant of Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin ----- Trojan/PSW.Magania.lax
Kaspersky ----- Trojan-GameThief.Win32.Magania.akma
Kingsoft ----- Win32.Troj.OnLineGames.ad.61440
Vba32 ----- Trojan-GameThief.Win32.Magania.akma

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\18.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 85012AC64026132B6F865F071ECC7471

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.DownLoad.14247
Eset ----- Win32/PSW.OnLineGames.NSG trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin ----- Trojan/PSW.OnLineGames.aopt
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttkn
Kingsoft ----- Win32.Troj.OnLineGames.ad.61440
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tteu

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\19.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 2262AF18A21AA19C16F749EB383D4926

A-squared ----- Trojan.Patched.CH!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.Generic6.ARBY  
AntiVir ----- TR/Crypt.XPACK.Gen
BitDefender ----- Trojan.Crypt.EV
ClamWin ----- Trojan.Crypt-78
Dr.Web -----Nothing
Eset -----Nothing
Ikarus ----- Trojan.Patched.CH
Jiangmin ----- TrojanSpy.OnLineGames.jzc
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttkr
Kingsoft -----Nothing
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.trkf

*** 10/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\20.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 2B5F84773348537D329166589146922E

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.Generic6.AQZR  
AntiVir ----- TR/Hijacker.Gen
BitDefender ----- Trojan.PWS.OnlineGames.AACN
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8759
Eset ----- Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin ----- Trojan/Hijacker.dt
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.aryk
Kingsoft ----- Win32.Troj.Agent.bm.65536
Vba32 -----Nothing

*** 11/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\21.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 36A57226A588CC25A51CEF49E714AAEE

A-squared ----- Trojan-Spy.Win32.Treemz.A!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/PSW.Online.bir
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8639
Eset ----- Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Trojan-Spy.Win32.Treemz.A
Jiangmin ----- Trojan/PSW.OnLineGames.aopn
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.tton
Kingsoft ----- Win32.Troj.OnLineGames.ad.65536
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tswf

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\23.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 23CF1558BC99D8811A1451D3CA5D1343

A-squared ----- Trojan-Spy.Win32.Treemz.A!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8957
Eset ----- Win32/PSW.OnLineGames.NSG trojan
Ikarus ----- Trojan-Spy.Win32.Treemz.A
Jiangmin ----- Trojan/PSW.OnLineGames.aost
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttkc
Kingsoft ----- Win32.TrojDownloader.Agent.ak.65536
Vba32 ----- Embedded.Trojan-GameThief.Win32.OnLineGames.ttkb

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\24.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 6260C7FD78F926268D18CA01EDCF0F7E

A-squared ----- Virus.Win32.Agent.ZRP!IK
Avast -----Nothing
Avg ----- Agent_r.L  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.ZWU
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8944
Eset ----- a variant of Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- Virus.Win32.Agent.ZRP
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft ----- Win32.Troj.Agent.te.61440
Vba32 -----Nothing

*** 8/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\25.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 3C5F8D3E561F57E162CAC7D97C8E7023

A-squared ----- Trojan-Downloader.Win32.Delf.zd!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHEM  
AntiVir ----- TR/ATRAPS.Gen
BitDefender ----- Generic.PWStealer.3031FFCD
ClamWin ----- Trojan.Downloader-35380
Dr.Web ----- Trojan.PWS.Mgame.19
Eset ----- a variant of Win32/PSW.OnLineGames.ODD trojan
Ikarus ----- Trojan-Downloader.Win32.Delf.zd
Jiangmin ----- Trojan/Agent.bprg
Kaspersky ----- Trojan-GameThief.Win32.Lmir.ghq
Kingsoft ----- Win32.PSWTroj.Delf.98304
Vba32 ----- MalwareScope.Trojan-PSW.Game.13

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\26.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 13A7B7F7C6CD89D4F8B8638122515605

A-squared ----- Trojan-PWS.Win32.Agent.hf!IK
Avast -----Nothing
Avg -----Nothing
AntiVir ----- TR/Spy.Gen
BitDefender ----- Dropped:Generic.Malware.dldgPWS.C24FD5AE
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- probably unknown NewHeur_PE virus
Ikarus ----- Trojan-PWS.Win32.Agent.hf
Jiangmin -----Nothing
Kaspersky ----- Trojan.Win32.Inject.kee
Kingsoft -----Nothing
Vba32 ----- Win32.Trojan.Downloader

*** 7/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\27.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: A3600C276B74A33E05F321A93CDFBFAB

A-squared ----- PWS.Win32.OnLineGames!IK
Avast ----- Win32:Spyware-gen [Trj]
Avg ----- PSW.OnlineGames.BGJE  
AntiVir ----- TR/Spy.Gen
BitDefender ----- Trojan.PWS.OnlineGames.AACN
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8934
Eset ----- Win32/PSW.OnLineGames.NXI trojan
Ikarus ----- PWS.Win32.OnLineGames
Jiangmin ----- TrojanSpy.Agent.hau
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttxf
Kingsoft ----- Win32.Troj.OnLineGames.fd.57344
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tsbr

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\28.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 35279A4B596BC7DF12C9A30BF4007384

A-squared ----- Trojan-Spy.Win32.Treemz!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.Generic6.AQZZ  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.PWS.OnlineGames.AACN
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Wsgame.8760
Eset ----- Win32/PSW.OnLineGames.NSG trojan
Ikarus ----- Trojan-Spy.Win32.Treemz
Jiangmin ----- Trojan/PSW.OnLineGames.aosv
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.ttxd
Kingsoft ----- Win32.Troj.OnLineGames.ad.65536
Vba32 -----Nothing

*** 11/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\30.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: F466D15D4B72B4FC8DAC1AEF2B38FD88

A-squared ----- Win32.SuspectCrc!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHJH  
AntiVir ----- TR/Thief.Wow.cum
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Gamania.16293
Eset ----- Win32/PSW.WOW.CUG trojan
Ikarus ----- Win32.SuspectCrc
Jiangmin ----- TrojanDropper.Win32.Delf.d
Kaspersky ----- Trojan-GameThief.Win32.WOW.cun
Kingsoft ----- Win32.Troj.PswWOW.oj.111684
Vba32 ----- MalwareScope.Trojan-PSW.Game.7

*** 11/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\31.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 47EFD73395B9E0005582753ABB2A2E5A

A-squared ----- Trojan-PWS.Win32.Agent.hf!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHKW  
AntiVir ----- TR/PSW.Magania.dx
BitDefender ----- Trojan.PWS.Agent.SGC
ClamWin ----- Trojan.Starter-12
Dr.Web ----- Trojan.MulDrop.23001
Eset ----- a variant of Win32/PSW.OnLineGames.NRF trojan
Ikarus ----- Trojan-PWS.Win32.Agent.hf
Jiangmin ----- TrojanSpy.OnLineGames.fbd
Kaspersky ----- Trojan-GameThief.Win32.Magania.gen
Kingsoft ----- Win32.Troj.OnlineGamesT.fd.119081
Vba32 ----- Trojan-GameThief.Win32.Magania.gen

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\32.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 9F82B1EB0A2096331EE74BFE40E553D0

A-squared ----- Trojan-PWS.Win32.Agent.hf!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Downloader.Agent.APAF  
AntiVir ----- TR/PSW.Magania.dx
BitDefender ----- Trojan.PWS.Agent.SGC
ClamWin ----- Trojan.Starter-12
Dr.Web ----- Trojan.MulDrop.23001
Eset ----- a variant of Win32/PSW.OnLineGames.NRF trojan
Ikarus ----- Trojan-PWS.Win32.Agent.hf
Jiangmin ----- Trojan/PSW.Magania.lbl
Kaspersky ----- Trojan-GameThief.Win32.Magania.gen
Kingsoft ----- Win32.Troj.OnlineGamesT.fd.119081
Vba32 ----- Trojan-GameThief.Win32.Magania.gen

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\33.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 636433A267681B33A5217BEF510A142F

A-squared ----- Trojan-PWS.Win32.Agent.hf!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BGPJ  
AntiVir ----- TR/PSW.Magania.dx
BitDefender ----- Trojan.PWS.Agent.SGC
ClamWin ----- Trojan.Starter-12
Dr.Web ----- Trojan.MulDrop.23001
Eset ----- a variant of Win32/PSW.OnLineGames.NRF trojan
Ikarus ----- Trojan-PWS.Win32.Agent.hf
Jiangmin ----- TrojanSpy.OnLineGames.fbd
Kaspersky ----- Trojan-GameThief.Win32.Magania.gen
Kingsoft ----- Win32.Troj.OnlineGamesT.fd.119081
Vba32 ----- Trojan-GameThief.Win32.Magania.gen

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\37.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: 4161D02CA0F7AD4956AC35608E6ED0C6

A-squared ----- Trojan-GameThief.Win32.Magania!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- PSW.OnlineGames.BHBX  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Generic.PWStealer.3CE92FA8
ClamWin ----- Trojan.Downloader-35380
Dr.Web ----- Trojan.PWS.Mgame.18
Eset ----- a variant of Win32/PSW.OnLineGames.ODD trojan
Ikarus ----- Trojan-GameThief.Win32.Magania
Jiangmin ----- Trojan/PSW.Agent.gqb
Kaspersky ----- Trojan-GameThief.Win32.Magania.akzj
Kingsoft ----- Win32.PSWTroj.GameOL.159744
Vba32 ----- MalwareScope.Trojan-PSW.Game.13

*** 13/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\38.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 85DBBEDEE1E4A7301F2E5FD6374C70BB

A-squared ----- Trojan.Rincux!IK
Avast -----Nothing
Avg ----- Generic12.ORS  
AntiVir ----- TR/Dropper.Gen
BitDefender ----- Trojan.Rincux.AW
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset -----Nothing
Ikarus ----- Trojan.Rincux
Jiangmin -----Nothing
Kaspersky ----- Heur.AntiAV
Kingsoft -----Nothing
Vba32 -----Nothing

*** 6/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\46.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 98179A57F3B5521CCAC416DE08B09CEF

A-squared -----Nothing
Avast -----Nothing
Avg -----Nothing
AntiVir ----- TR/Dldr.BHOSta
BitDefender ----- Trojan.Obfuscated.MQ
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- a variant of Win32/Agent.OCX trojan
Ikarus -----Nothing
Jiangmin -----Nothing
Kaspersky -----Nothing
Kingsoft -----Nothing
Vba32 -----Nothing

*** 3/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\48.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: DE598EDC9F6E86547A0641D6CD341E87

A-squared ----- Trojan-PWS.Win32.QQPass!IK
Avast ----- Win32:Agent-ICL [Trj]
Avg -----Nothing
AntiVir ----- TR/ATRAPS.Gen
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- a variant of Win32/PSW.Delf.NMX trojan
Ikarus ----- Trojan-PWS.Win32.QQPass
Jiangmin -----Nothing
Kaspersky ----- Trojan-PSW.Win32.QQPass.ecg
Kingsoft -----Nothing
Vba32 -----Nothing

*** 6/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\49.exe
Type: Generic Win/DOS Executable / Extension: .EXE
MD5 Hash: 30F5D4D33BFB395617245A3D407BAF7E

A-squared ----- Backdoor.Win32.Venik!IK
Avast ----- Win32:Trojan-gen {Other}
Avg ----- Generic12.LHX  
AntiVir ----- BDS/Backdoor.Gen
BitDefender ----- Trojan.Generic.1127739
ClaimWin -----Nothing
Dr.Web ----- Trojan.MulDrop.23717
Eset ----- a variant of Win32/Agent.DKR trojan
Ikarus ----- Backdoor.Win32.Venik
Jiangmin ----- Backdoor/Agent.bwee
Kaspersky ----- Trojan-Dropper.Win32.Agent.zwc
Kingsoft ----- Win32.Troj.Agent.fn.122880
Vba32 ----- Embedded.Trojan.Win32.Agent.anzt

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\50.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: 49F51E0D9DA3BC918B161038CF7F75ED

A-squared ----- PWS.Win32.Qqhook!IK
Avast ----- Win32:OnLineGames-BSI [Trj]
Avg ----- PSW.Delf.CFV  
AntiVir ----- TR/ATRAPS.Gen
BitDefender ----- Generic.PWStealer.50318FAB
ClaimWin -----Nothing
Dr.Web ----- Trojan.PWS.Lineage.4897
Eset ----- probably a variant of Win32/PSW.Delf.NLZ trojan
Ikarus ----- PWS.Win32.Qqhook
Jiangmin ----- Trojan/PSW.OnLineGames.aonx
Kaspersky ----- Trojan-PSW.Win32.QQPass.ebu
Kingsoft ----- Win32.Troj.QQPswT.bs.116858
Vba32 ----- Trojan-PSW.Win32.QQPass.eap

*** 12/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\52.exe
Type: UPX compressed Win32 Executable / Extension: .EXE
MD5 Hash: C3B36050A8BA34A8891873FDCA0AA183

A-squared -----Nothing
Avast ----- Win32:AutoRun-NI
Avg ----- Generic5.WY  
AntiVir ----- TR/Small.BQL
BitDefender ----- Virtool.10959
ClaimWin -----Nothing
Dr.Web ----- Win32.HLLW.Autoruner.3871
Eset ----- Win32/HideProc.D application
Ikarus ----- not-a-virus:RiskTool.Win32.HideProc.c
Jiangmin ----- TrojanSpy.Agent.hda
Kaspersky ----- Trojan-Spy.Win32.Agent.ccb
Kingsoft ----- Win32.Troj.Agent.81920
Vba32 ----- Trojan-Dropper.Win32.Agent.yhq

*** 11/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\abc.exe
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: CB9A401C0674BC57294556EFEA10855C

A-squared ----- Virus.Win32.QQRob.AS!IK
Avast -----Nothing
Avg ----- Win32/Heur  
AntiVir ----- TR/Crypt.XPACK.Gen
BitDefender ----- MemScan:Backdoor.Delf.HRN
ClaimWin -----Nothing
Dr.Web ----- BackDoor.Poison.218
Eset ----- Win32/Hupigon.NJQ trojan
Ikarus ----- Virus.Win32.QQRob.AS
Jiangmin -----Nothing
Kaspersky ----- Backdoor.Win32.Hupigon.eutw
Kingsoft -----Nothing
Vba32 ----- Backdoor.Win32.Hupigon.dtec

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\upx.exe
Type: Win32 Executable Borland Delphi 6 / Extension: .EXE
MD5 Hash: 24130C121AE47A13364110F3A4BA1755

A-squared ----- Trojan-Downloader.Win32.Delf.zd!IK
Avast -----Nothing
Avg -----Nothing
AntiVir ----- TR/ATRAPS.Gen
BitDefender ----- Dropped:Generic.PWStealer.6CFD12CF
ClamWin ----- Trojan.Downloader-35380
Dr.Web ----- Trojan.PWS.Mgame.19
Eset ----- a variant of Win32/PSW.OnLineGames.ODD trojan
Ikarus ----- Trojan-Downloader.Win32.Delf.zd
Jiangmin -----Nothing
Kaspersky ----- Trojan-GameThief.Win32.Lmir.ghq
Kingsoft -----Nothing
Vba32 ----- MalwareScope.Trojan-PSW.Game.13

*** 9/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\yue.exe
Type: DOS Executable Generic / Extension: .EXE
MD5 Hash: D1940C0D45D6C30EB64D2B0FF4443B94

A-squared ----- Trojan-PWS.Win32.QQPass!IK
Avast ----- Win32:Agent-ICL [Trj]
Avg -----Nothing
AntiVir ----- TR/ATRAPS.Gen
BitDefender -----Nothing
ClaimWin -----Nothing
Dr.Web -----Nothing
Eset ----- Win32/PSW.Delf.NMX trojan
Ikarus ----- Trojan-PWS.Win32.QQPass
Jiangmin -----Nothing
Kaspersky ----- Trojan-PSW.Win32.QQPass.ecf
Kingsoft -----Nothing
Vba32 -----Nothing

*** 6/13 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2008/11/21 五 17:32:04.79
Note: The results might be different from that of the GUI version.

尤金卡巴斯基

漏掉的To KL

2008/11/21 22:59:38        已杀毒        广告软件 not-a-virus:AdWare.Win32.AdMedia.ed        G:\Temp\Virus\2008.11.21_2_.rar/47.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-Spy.Win32.Agent.ccb        G:\Temp\Virus\2008.11.21_2_.rar/52.exe//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-PSW.Win32.QQPass.ebu        G:\Temp\Virus\2008.11.21_2_.rar/50.exe//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-Dropper.Win32.Agent.zwc        G:\Temp\Virus\2008.11.21_2_.rar/49.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-PSW.Win32.QQPass.ecg        G:\Temp\Virus\2008.11.21_2_.rar/48.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.akzj        G:\Temp\Virus\2008.11.21_2_.rar/37.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\2008.11.21_2_.rar/33.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\2008.11.21_2_.rar/32.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.gen        G:\Temp\Virus\2008.11.21_2_.rar/31.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.WOW.cun        G:\Temp\Virus\2008.11.21_2_.rar/30.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttxd        G:\Temp\Virus\2008.11.21_2_.rar/28.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttxf        G:\Temp\Virus\2008.11.21_2_.rar/27.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan.Win32.Inject.kee        G:\Temp\Virus\2008.11.21_2_.rar/26.exe//#//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Heur.Trojan.Generic        G:\Temp\Virus\2008.11.21_2_.rar/26.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Lmir.ghq        G:\Temp\Virus\2008.11.21_2_.rar/25.exe//FSG               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttkc        G:\Temp\Virus\2008.11.21_2_.rar/23.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.tton        G:\Temp\Virus\2008.11.21_2_.rar/21.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.aryk        G:\Temp\Virus\2008.11.21_2_.rar/20.exe//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttkr        G:\Temp\Virus\2008.11.21_2_.rar/19.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttkn        G:\Temp\Virus\2008.11.21_2_.rar/18.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.akma        G:\Temp\Virus\2008.11.21_2_.rar/17.exe//#               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.akee        G:\Temp\Virus\2008.11.21_2_.rar/16.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan.Win32.Agent.angj        G:\Temp\Virus\2008.11.21_2_.rar/15.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-PSW.Win32.Delf.cuh        G:\Temp\Virus\2008.11.21_2_.rar/14.exe//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.tcqi        G:\Temp\Virus\2008.11.21_2_.rar/13.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Magania.akuj        G:\Temp\Virus\2008.11.21_2_.rar/12.exe//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttmm        G:\Temp\Virus\2008.11.21_2_.rar/11.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.WOW.crg        G:\Temp\Virus\2008.11.21_2_.rar/10.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttxe        G:\Temp\Virus\2008.11.21_2_.rar/08.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-PSW.Win32.Delf.ctv        G:\Temp\Virus\2008.11.21_2_.rar/02.exe//PE_Patch.UPX//UPX               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.OnLineGames.ttii        G:\Temp\Virus\2008.11.21_2_.rar/01.exe//#               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-PSW.Win32.QQPass.ecf        G:\Temp\Virus\2008.11.21_2_.rar/yue.exe//PE_Patch//UPack               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-GameThief.Win32.Lmir.ghq        G:\Temp\Virus\2008.11.21_2_.rar/upx.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Backdoor.Win32.Hupigon.eutw        G:\Temp\Virus\2008.11.21_2_.rar/abc.exe               
2008/11/21 22:59:38        已杀毒        木马程序 Trojan-Spy.Win32.Agent.ccb        G:\Temp\Virus\2008.11.21_2_.rar               
2008/11/21 22:59:37        已隔离        木马程序 Heur.AntiAV        G:\Temp\Virus\2008.11.21_2_.rar/38.exe               
2008/11/21 22:55:35        已隔离        木马程序 Heur.Trojan.Generic        G:\Temp\Virus\2008.11.21_2_.rar/03.exe//FSG               
2008/11/21 22:55:35        已隔离        木马程序 Heur.Trojan.Generic        G:\Temp\Virus\2008.11.21_2_.rar/03.exe