MD5: D17C9C

aoyang

MD5: D17C9C
http://bbs.kafan.cn/viewthread.php?tid=95952&pid=1187493&page=1&extra=page%3D1
这个样本生的小崽崽

fanrubin

virus

mofunzone

扫描日志
NOD32版本 2323 (20070611) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\12.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 11.6.2007  时间：20:18:25
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\12.rar
C:\Documents and Settings\Administrator\My Documents\12. ?
?rar >>RAR >>12.exe - Win32/PSW.Agent.NEW 木马的变种
已扫描的文件数目：1
已发现的病毒数目：1
完成时间： 20:18:25 总扫描时间：0 秒 (00:00:00)


[Scan path] C:\Documents and Settings\Administrator\My Documents\12.rar
>>C:\Documents and Settings\Administrator\My Documents\12.rar\12.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\12.rar - archive contains infected objects

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.qw        URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch//UPack

solcroft

1688388728

回复

sjducker

NOD杀

鼻耳盖子

木马名称:Trojan-PSW.Win32.OnLineGames.eau
程序:
I:\TEST\070612\9\12\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

promised

壳王的BEHAVIOUR还是很厉害的

蓝色牛仔裤

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-6-9
Start time: 2007-6-12 17:39
Engine(s): KAV engine (AVK 17.5257), BD-Engine (BD 17.4363)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 12.exe
        In archive: C:\Documents and Settings\Administrator\桌面\12.rar
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.qw (KAV engine), Trojan.PWS.OnlineGames.AUP (BD-Engine)
Object: 12.rar
        Path: C:\Documents and Settings\Administrator\桌面
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.qw (KAV engine), Trojan.PWS.OnlineGames.AUP (BD-Engine)
Analysis complete: 2007-6-12 17:39
    1 files checked
    1 infected files detected
    0 suspected files detected