16个

显示全部楼层 · 发表于 2007-7-28 07:29:18

最近流行冒充xp补丁的毒？

[MD5: 68E844 CC207B 491D1C CA2B86 A996A1 2EB7FC 67A511 A3DC20 831B74 580CC2 7BF1C9 F79EFE E31EF5 FE51DD 646412 49D55C]

显示全部楼层 · 发表于 2007-7-28 07:31:24

6个

显示全部楼层 · 发表于 2007-7-28 07:38:09

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.PSW.Win32.OnlineGames.dqn
病毒： Trojan.PSW.Win32.OnlineGames.drd
病毒： Trojan.PSW.Win32.OnlineGames.dpt
病毒： Trojan.PSW.Win32.OnlineGames.dqm
病毒： Trojan.PSW.Win32.OnlineGames.dqt

MAC地址：00:D0:F8:38:4B:7A

用户来源：局域网

软件版本：19.33.42

5个[:26:]

显示全部楼层 · 发表于 2007-7-28 07:39:26

D:\download\t3\virus.rar:\svchost.exe - Signature 'Backdoor.Win32.Rizo.a' found
D:\download\t3\virus.rar:\wpcap.dll - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\virus.rar:\WindowsXP-KB888303-x86-CHS.exe
D:\download\t3\virus.rar:\WanPacket.dll - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\virus.rar:\msccrt.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\download\t3\virus.rar:\sys299.exe - Signature 'Backdoor.Win32.Agent.ahj' found
D:\download\t3\virus.rar:\cmdbcs.dll - Signature 'Trojan-PWS.Win32.OnLineGames.es' found
D:\download\t3\virus.rar:\RemoteDbg.dll - Signature 'Trojan-PWS.OnlineGames.AYD' found
D:\download\t3\virus.rar

9 Files scanned
(1 Archive with 8 files)
7 Signatures found
0 Suspect code-parts found
Used time: 0:00.371

大家意识上去了反而被利用了……

显示全部楼层 · 发表于 2007-7-28 07:40:30

--> msccrt.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> sys299.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
  --> cmdbcs.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> RemoteDbg.dll
   [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> upxdnd.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> AVPSrv.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> zxepri.dll
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.15916
  --> msccrt.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> cmdbcs.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> AVPSrv.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> upxdnd.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> WindowsXP-KB423807-x86-CHS.exe
   [DETECTION] Is the Trojan horse TR/Hook.Shell.209

   17 Files were scanned
   12 viruses and/or unwanted programs were found

显示全部楼层 · 发表于 2007-7-28 07:43:15

已检测到: 病毒 Invader (变种) 文件: G:\样本\样本\virus\msccrt.exe//PE_Patch.UPX
已检测到: 病毒 Invader (变种) 文件: G:\样本\样本\virus\cmdbcs.exe//PE_Patch.UPX
已检测到: 病毒 Invader (变种) 文件: G:\样本\样本\virus\AVPSrv.exe//PE_Patch.UPX
已检测到: 病毒 Invader (变种) 文件: G:\样本\样本\virus\upxdnd.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-7-28 07:43:21

ik的解包……

显示全部楼层 · 发表于 2007-7-28 07:52:47

ESS最后砍下还剩4个

显示全部楼层 · 发表于 2007-7-28 08:08:03

金山杀9个
江民杀11个
光华杀12个
安铁诺杀4个

显示全部楼层 · 发表于 2007-7-28 08:22:51

2007-7-28 8:21:10 Scanning Log
2007-7-28 8:21:10 Version of virus signature database: 2426 (20070727)
2007-7-28 8:21:10 Date: 28.7.2007 Time: 08:21:10
2007-7-28 8:21:10 Scanned disks, folders and files: E:\新建文件夹\
2007-7-28 8:21:18 E:\新建文件夹\virus.rar - multiple threats - deleted - quarantined
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » svchost.exe - Win32/TrojanDropper.Rime.Gen trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » sys299.exe - a variant of Win32/TrojanDownloader.Delf.NSA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » cmdbcs.dll - probably a variant of Win32/Genetik trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » RemoteDbg.dll - a variant of Win32/Agent.NIK trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » upxdnd.dll - probably a variant of Win32/Genetik trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » AVPSrv.dll - a variant of Win32/PSW.OnLineGames.NBZ trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » zxepri.dll - a variant of Win32/PSW.OnLineGames.NDA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » msccrt.exe - a variant of Win32/PSW.OnLineGames.YA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » cmdbcs.exe - a variant of Win32/PSW.OnLineGames.YA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » AVPSrv.exe - a variant of Win32/PSW.OnLineGames.YA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
2007-7-28 8:21:18 E:\新建文件夹\virus.rar » RAR » WindowsXP-KB423807-x86-CHS.exe - a variant of Win32/PSW.OnLineGames.NDA trojan
2007-7-28 8:21:18 Number of scanned files: 17
2007-7-28 8:21:18 Number of threats found: 12
2007-7-28 8:21:18 Time of completion: 08:21:18 Total scanning time: 8 sec (00:00:08)

[病毒样本] 16个

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块