查看: 2525|回复: 13
收起左侧

[病毒样本] 24

[复制链接]
promised
发表于 2007-11-16 12:58:11 | 显示全部楼层 |阅读模式
C:\ABC\样本.rar:\样本\10.exe - 特征码 'Trojan-Downloader.Win32.Pux.d' 被发现
C:\ABC\样本.rar:\样本\5.exe - 特征码 'Generic.PWS.Games.1' 被发现
C:\ABC\样本.rar:\样本\avwgemn.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\avwgest.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\avzxfmn.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\avzxfst.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\jh.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\kapjeaz.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\kapjezy.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\kvdxiis.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\kvdxima.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\kvdxsiis.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\kvdxsima.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\kvmxhis.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\kvmxhma.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\my.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\rarjepi.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\ratbjpi.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\ratbjtl.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\rsmyhpm.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\rsztipm.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar:\样本\rsztisp.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\sidjdaz.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本.rar:\样本\sidjdzy.dll - 特征码 'BehavesLikeTrojan.WUDisable' 被发现
C:\ABC\样本.rar
25 文件被扫描
   (1 压缩档 24 文件)
24 特征码被侦测
0 可疑代码段被发现
耗时: 0:00.218

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
残缺的唯美
发表于 2007-11-16 13:02:00 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Nerazzurri
发表于 2007-11-16 13:03:09 | 显示全部楼层

23

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\10.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpg        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\5.exe//UPX
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hyd        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\avwgemn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hxo        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\avwgest.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hnm        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\avzxfmn.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hnm        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\avzxfst.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpe        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\jh.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hkl        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kapjeaz.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hkl        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kapjezy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hoc        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvdxiis.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hoc        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvdxima.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hwt        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvdxsiis.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hwt        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvdxsima.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.htv        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvmxhis.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.htv        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\kvmxhma.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.htv        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\my.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hpe        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\rarjepi.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hxe        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\ratbjpi.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hxc        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\ratbjtl.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hws        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\rsztipm.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hws        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\rsztisp.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hsy        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\sidjdaz.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hsy        File: C:\Users\Jack Jones\Desktop\Ñù±¾.rar/Ñù±¾\sidjdzy.dll
The EQs
发表于 2007-11-16 13:04:27 | 显示全部楼层

24

C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\10.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\5.exe - a variant of Win32/PSW.OnLineGames.NFN trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\avwgemn.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\avwgest.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\avzxfmn.dll - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\avzxfst.exe - Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\jh.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kapjeaz.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kapjezy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvdxiis.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvdxima.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvdxsiis.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvdxsima.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvmxhis.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\kvmxhma.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\my.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\rarjepi.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\ratbjpi.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\ratbjtl.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\rsmyhpm.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\rsztipm.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\rsztisp.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\sidjdaz.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
C:\Documents and Settings\Don johnson\桌面\样本(2).rar » RAR » 样本\sidjdzy.dll - a variant of Win32/PSW.OnLineGames.FDY trojan
无尽藏海
发表于 2007-11-16 13:07:22 | 显示全部楼层
样本.rar
    [0] Archive type: RAR
    --> Ñù±¾\10.exe
        [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\5.exe
        [DETECTION] Is the Trojan horse TR/PSW.Online.ddm.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\avwgemn.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\avwgest.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\avzxfmn.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hnm
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\avzxfst.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hnm
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\jh.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hpe
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kapjeaz.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hkl
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kapjezy.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hkl
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvdxiis.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hoc
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvdxima.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hoc
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvdxsiis.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvdxsima.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvmxhis.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\kvmxhma.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\my.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\rarjepi.dll
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hpe
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\ratbjpi.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\ratbjtl.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\rsmyhpm.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\rsztipm.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\rsztisp.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\sidjdaz.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> Ñù±¾\sidjdzy.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was moved to '476b8c02.qua'!


End of the scan: 2007年11月16日  13:04
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     25 Files were scanned
     17 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      1 Archives were scanned
     24 Warnings
      0 Notes
sam.to
发表于 2007-11-16 13:09:09 | 显示全部楼层
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hqh    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\10.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpg    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\5.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hyd    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\avwgemn.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hxo    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\avwgest.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hnm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\avzxfmn.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hnm    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\avzxfst.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpe    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\jh.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hkl    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kapjeaz.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hkl    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kapjezy.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hoc    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvdxiis.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hoc    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvdxima.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hwt    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvdxsiis.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hwt    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvdxsima.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.htv    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvmxhis.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.htv    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\kvmxhma.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.htv    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\my.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hpe    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\rarjepi.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hxe    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\ratbjpi.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hxc    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\ratbjtl.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hws    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\rsztipm.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hws    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\rsztisp.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hsy    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\sidjdaz.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hsy    檔案: C:\Documents and Settings\kato9096\桌面\样本.rar/欴掛\sidjdzy.dll


kis 7.0.0.125
病毒庳日期:
16/11/2007,12:10:51
有一个沒,已上报

[ 本帖最后由 kato9096 于 2007-11-16 13:13 编辑 ]
kkgh
发表于 2007-11-16 14:59:04 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.PSW.Win32.GameOnline.adi
病毒: Trojan.PSW.Win32.GameOnline.aer
病毒: Trojan.PSW.Win32.GameOnline.acg
病毒: Trojan.PSW.Win32.GameOnline.acb
病毒: Trojan.PSW.Win32.XYOnline.ru
病毒: Trojan.PSW.Win32.NSword.cj
病毒: Trojan.PSW.Win32.NSword.cj
病毒: Trojan.PSW.Win32.GameOnline.acc
病毒: Trojan.PSW.Win32.GameOnline.ace
病毒: Trojan.PSW.Win32.XYOnline.sf
病毒: Trojan.PSW.Win32.XYOnline.sf
病毒: Trojan.PSW.Win32.XYOnline.sg
病毒: Trojan.PSW.Win32.XYOnline.sg
病毒: Trojan.PSW.Win32.DJOnline.ar
病毒: Trojan.PSW.Win32.DJOnline.ar

用户来源:互联网

软件版本:20.18.40

日期: 16.11.2007  时间:14:59:59
已开启反隐藏功能.
已扫描的磁盘,文件夹及文件:C:\样本.rar
C:\样本.rar >>RAR >>样本\10.exe - 可能是 Win32/PSW.OnLineGames.NGU 木马 的一个变种
C:\样本.rar >>RAR >>样本\5.exe - Win32/PSW.OnLineGames.NFN 木马的变种
C:\样本.rar >>RAR >>样本\avwgemn.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\avwgest.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\avzxfmn.dll - Win32/PSW.OnLineGames.FDY 木马
C:\样本.rar >>RAR >>样本\avzxfst.exe - Win32/PSW.OnLineGames.FDY 木马
C:\样本.rar >>RAR >>样本\jh.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kapjeaz.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kapjezy.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvdxiis.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvdxima.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvdxsiis.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvdxsima.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvmxhis.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\kvmxhma.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\my.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\rarjepi.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\ratbjpi.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\ratbjtl.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\rsmyhpm.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\rsztipm.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\rsztisp.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\sidjdaz.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar >>RAR >>样本\sidjdzy.dll - Win32/PSW.OnLineGames.FDY 木马的变种
C:\样本.rar - 多重感染 - 已删除
已扫描的文件数目:25
已发现的病毒数目:24
已清除病毒的文件数目:1
完成时间: 15:00:06 总扫描时间:7 秒 (00:00:07)
nod32全杀
sam.to
发表于 2007-11-16 15:06:10 | 显示全部楼层
Hello,

rsmyhpm.dll - Trojan-PSW.Win32.OnLineGames.hyj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Alexander Romanenko
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
豫孤鸟
发表于 2007-11-16 16:18:55 | 显示全部楼层
我的计算机上的安装的5种杀软都报毒,在卡巴,nod32,瑞星,江民,金山的夹击下病毒全部清楚干净
qigang
发表于 2007-11-16 20:04:52 | 显示全部楼层

38/19

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.GameOnline.adi
病毒: Trojan.PSW.Win32.GameOnline.aer
病毒: Trojan.PSW.Win32.GameOnline.acg
病毒: Trojan.PSW.Win32.GameOnline.acb
病毒: Trojan.PSW.Win32.XYOnline.ru
病毒: Trojan.PSW.Win32.NSword.cj
病毒: Trojan.PSW.Win32.NSword.cj
病毒: Trojan.PSW.Win32.GameOnline.acc
病毒: Trojan.PSW.Win32.GameOnline.ace
病毒: Trojan.PSW.Win32.XYOnline.sf
病毒: Trojan.PSW.Win32.XYOnline.sf
病毒: Trojan.PSW.Win32.XYOnline.sg
病毒: Trojan.PSW.Win32.XYOnline.sg
病毒: Trojan.PSW.Win32.GameOnline.agd
病毒: Trojan.PSW.Win32.LMir.yyr
病毒: Trojan.PSW.Win32.DJOnline.ar
病毒: Trojan.PSW.Win32.DJOnline.ar

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.18.41
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-21 05:05 , Processed in 0.128747 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表