6个DLL[MD5: 24D295 32698A A04F24 CA2B86 CC207B 636B4E]

显示全部楼层 · 发表于 2007-8-14 11:46:10

detected: Trojan program Trojan-PSW.Win32.OnLineGames.abo File: C:\Documents and Settings\Owner\×ÀÃæ\dll.rar/LYMANGR.DLL//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn File: C:\Documents and Settings\Owner\×ÀÃæ\dll.rar/MSDEG32.DLL//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.uv File: C:\Documents and Settings\Owner\×ÀÃæ\dll.rar/ztmpri.dll
DER.EXE//PE_Patch//UPack

显示全部楼层 · 发表于 2007-8-14 11:48:51

为PC护航风暴微塔
_____________________________________________

         风暴微塔反病毒
                        [内测版]
               http://www.v0day.com/
----------------------------------------------
开始扫描……

正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\dll\MSDEG32.DLL]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\dll\Packet.dll]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\dll\Packet.dll]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\dll\WanPacket.dll]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\dll\WanPacket.dll]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\dll\wpcap.dll]
                  …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\dll\wpcap.dll]
                  …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\dll\ztmpri.dll]
                  …………引擎[3]发现病毒
文件数:5 病毒数:8  比重:1.6
OK  扫描完毕！

显示全部楼层 · 发表于 2007-8-14 11:49:00

另外三个没问题

显示全部楼层 · 发表于 2007-8-14 11:50:51

费尔2个

显示全部楼层 · 发表于 2007-8-14 11:52:24

原帖由 wangjay1980 于 2007-8-14 11:49 发表
另外三个没问题

看看多引擎怎么说……

显示全部楼层 · 发表于 2007-8-14 11:53:22

真的没问题。。。。

显示全部楼层 · 发表于 2007-8-14 11:53:54

nod32的虚拟机模拟不出dll的动作。。。。

显示全部楼层 · 发表于 2007-8-14 11:58:35

avast也是三个

显示全部楼层 · 发表于 2007-8-14 12:01:03

--> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.abo.4
      [WARNING] Infected files in archives cannot be repaired!
--> MSDEG32.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING] Infected files in archives cannot be repaired!
--> Packet.dll
--> WanPacket.dll
--> wpcap.dll
--> ztmpri.dll
      [DETECTION] Is the Trojan horse TR/Agent.18468
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    A backup was created as '472d293b.qua'  ( QUARANTINE )
      [INFO]    The file was deleted!

红伞3个

[病毒样本] 6个DLL[MD5: 24D295 32698A A04F24 CA2B86 CC207B 636B4E]

本帖子中包含更多资源

回复 #6 FBAV 的帖子

本帖子中包含更多资源