dll 一个[MD5: E69ED6]

蓝色牛仔裤

最后一个，不发了。。。被人耍了。。

promised

?           Copyright (c) 1993-2007 by VBA Ltd.            ?
酝屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯屯?
License expired
License #000000119 Valid till 2006-12-31
Demo mode
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\样本.rar:<RAR>\Ghook.dll : infected MalwareScope.Trojan-PSW.Game.7
Program execution terminated by user


Directories       : 3       Files in archives:      Files on disks:
Archives:                   - total       : 1       - total       : 21
- scanned         : 1       -  scanned    : 1       - scanned     : 20
- contain viruses : 1       -  infected   : 1       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 0

Startup    : 19:16:26 19-06-2007
End        : 19:16:30 19-06-2007
Total time : 00:00:04
终止批处理操作吗(Y/N)?
壳王也杀了，图不贴了

[ 本帖最后由 promised 于 2007-6-19 19:14 编辑 ]

小邪邪

DLL木马，咖啡：PWS-LegMir.dll (特洛伊)

欠妳緈諨

woai_jolin

ess pass
上报

1688388728

病毒: Win32:OnLineGames-CN [Trj]
檔案: 样本[1].rar
目錄: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\VM1NGYS8
處理序: Defendio.exe

taihuxian

Virus: Win32:OnLineGames-CN [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> Ghook.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

kp2006

rising

Trojan.PSW.OnlineGames.jj

wangjay1980

Ghook.dll - Trojan-PSW.Win32.OnLineGames.hu

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.