又来一对，DLL的！

显示全部楼层 · 发表于 2007-11-24 20:47:11

检测到：木马程序 Trojan-PSW.Win32.OnLineGames.hys 文件: C:\Documents and Settings\Administrator\桌面\样本.rar/svcctrl01.dll
检测到：木马程序 Trojan-PSW.Win32.OnLineGames.hyi 文件: C:\Documents and Settings\Administrator\桌面\样本.rar/procsvr01.dll
Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> svcctrl01.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hys.2
  --> procsvr01.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hyi.2
   [WARNING] The file was ignored!
24:11:2007 20:46:49 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\Administrator\桌面\样本.rar
File scanned: C:\Documents and Settings\Administrator\桌面\样本.rar - SIGNATURE FOUND "Virus.Win32.Nilage.JY"
24:11:2007 20:46:49 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 1
Virus found: 1
----------------------------------------------------

显示全部楼层 · 发表于 2007-11-24 20:47:53

已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hys 網址: http://bbs.kafan.cn/attachment.php?aid=157749//svcctrl01.dll
已偵測: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.hyi 網址: http://bbs.kafan.cn/attachment.php?aid=157749//procsvr01.dll

显示全部楼层 · 发表于 2007-11-24 20:49:21

木马名称:Trojan-PSW.Win32.OnLineGames.xmo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SVCCTRL01.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.xaa

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\PROCSVR01.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-11-24 20:50:41

费尔通杀

显示全部楼层 · 发表于 2007-11-24 20:57:22

又没有扫描报告？

显示全部楼层 · 发表于 2007-11-24 20:57:57

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\样本.rar
  [0] Archive type: RAR
  --> svcctrl01.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hys.2
  --> procsvr01.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hyi.2
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-11-24 20:59:48

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOnline.afu
病毒： Trojan.PSW.Win32.GameOnline.afs

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.19.52

显示全部楼层 · 发表于 2007-11-25 02:10:29

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 977
Paranoia Database - 49098
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\svcctrl01.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\procsvr01.dll - Infected TROJAN-PSW.ONLINEGAMES.43 - Deleted

2 Files scanned
2 Infected files found
0 Suspected files found
0 Files disinfected
2 Files deleted

显示全部楼层 · 发表于 2007-11-25 07:17:53

C:\Users\Administrator\Desktop\样本.rar » RAR » svcctrl01.dll - probably a variant of Win32/PSW.OnLineGames.NFL trojan
C:\Users\Administrator\Desktop\样本.rar » RAR » procsvr01.dll - Win32/PSW.OnLineGames.NFL trojan

显示全部楼层 · 发表于 2007-11-25 07:55:37

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hys File: C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar/svcctrl01.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hyi File: C:\Documents and Settings\Administrator\×ÀÃæ\Ñù±¾.rar/procsvr01.dll

[病毒样本] 又来一对，DLL的！

本帖子中包含更多资源

回复 4楼 sweeb 的帖子

3/2

ESET Smart Security

浏览过的版块