41pcs

显示全部楼层 · 发表于 2008-1-11 15:40:49

去除两个包里面不是病毒的和重复的  群本样本是36个
Avast! 杀17个：
"Win32:OnLineGames-BBH [Trj]" 10.exe
"Win32:OnLineGames-BSI [Trj]" 13.exe
"Win32:OnLineGames-BSI [Trj]" 19.ex
"Win32:OnLineGames-BBH [Trj]" 2.exe
"Win32:OnLineGames-BSI [Trj]" 20.exe
"Win32:OnLineGames-BSI [Trj]" 21.exe
"Win32:Small-HEQ [Trj]"    23.exe
"Win32:OnLineGames-BBH [Trj]" 27.exe
"Win32:OnLineGames-AUT [Trj]" 28.exe
"Win32:OnLineGames-BBH [Trj]" 3.exe
"Win32:OnLineGames-BBH [Trj]" 32.exe
"Win32:Agent-CNF [Trj]"    35.exe
"Win32:Agent-CNF [Trj]"    41.exe
"Win32:OnLineGames-BSI [Trj]" 42.exe
"Win32:OnLineGames-AUT [Trj]" 5.exe
"Win32:OnLineGames-AUT [Trj]" 6.exe
"Win32:Delf-FVM [Trj]"       7.exe

显示全部楼层 · 发表于 2008-1-11 16:21:52

一共报了37

D:\download\29.rar>>12.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>4.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>7.exe TrojanPSW.OnLineGames.lhc.jjfy 木马还未处理
D:\download\29.rar>>10.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>1.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>13.exe TrojanPSW.OnLineGames.nmc.svwd 木马还未处理
D:\download\29.rar>>16.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>19.exe Trojan.DiskAutorun.auk.rmya 木马还未处理
D:\download\29.rar>>28.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>8.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>11.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>5.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>25.exe Trojan.Cap81110.dwdl 木马还未处理
D:\download\29.rar>>2.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>22.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>14.exe TrojanDropper.Agent.esh.ifud 木马还未处理
D:\download\29.rar>>29.exe W32.Viking.k 病毒还未处理
D:\download\29.rar>>9.exe Trojan.Cap81114.cxtg 木马还未处理
D:\download\29.rar>>26.exe Trojan.Cap81110.dwdl 木马还未处理
D:\download\29.rar>>6.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>3.exe TrojanPSW.OnLineGames.nmc.ogwy 木马还未处理
D:\download\29.rar>>21.exe Trojan.Cap81110.kavm 木马还未处理
D:\download\29.rar>>27.exe Heuri.Suspicious.ERNM 启发式扫描还未处理
D:\download\29.rar>>24.exe Trojan.Cap81110.dwdl 木马还未处理
D:\download\12.rar>>39.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>30.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>31.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>34.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>37.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>40.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>42.exe Trojan.Cap81114.fluw 木马还未处理
D:\download\12.rar>>32.exe TrojanPSW.OnLineGames.nmc.ogwy 木马还未处理
D:\download\12.rar>>35.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>38.exe Trojan.Cap81110.dwdl 木马还未处理
D:\download\12.rar>>41.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>33.exe W32.Viking.k 病毒还未处理
D:\download\12.rar>>36.exe W32.Viking.k 病毒还未处理

显示全部楼层 · 发表于 2008-1-11 17:21:36

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Ermilov Maxim
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-1-11 17:32:03

木马程序 Trojan-PSW.Win32.OnLineGames.nnl 文件　: C:\Documents and Settings\tf\桌面\29.rar/4.exe//UPack//PE_Patch
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nhw 文件　: C:\Documents and Settings\tf\桌面\29.rar/10.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/1.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/13.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nob 文件　: C:\Documents and Settings\tf\桌面\29.rar/16.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/28.exe//PE_Patch//UPack
已删除：病毒 Heur.Trojan.Generic 文件　: C:\Documents and Settings\tf\桌面\29.rar/8.exe//UPack
已删除：病毒 Heur.Trojan.Generic 文件　: C:\Documents and Settings\tf\桌面\29.rar/11.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/5.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.njv 文件　: C:\Documents and Settings\tf\桌面\29.rar/2.exe//PE_Patch//UPack
已删除：病毒 Heur.Trojan.Generic 文件　: C:\Documents and Settings\tf\桌面\29.rar/22.exe//UPack
已删除：病毒 Worm.Win32.Downloader.dx 文件　: C:\Documents and Settings\tf\桌面\29.rar/14.exe//#
已删除：病毒 Heur.Trojan.Generic 文件　: C:\Documents and Settings\tf\桌面\29.rar/29.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/6.exe//PE_Patch//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.nmc 文件　: C:\Documents and Settings\tf\桌面\29.rar/3.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-1-11 19:13:07

ClamAV 15个

[ 本帖最后由 DFXBB 于 2008-1-11 19:14 编辑 ]

显示全部楼层 · 发表于 2008-1-11 19:15:03

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.lfm
病毒： Trojan.PSW.Win32.GameOL.lfe
病毒： Trojan.PSW.Win32.GamesOnline.fw
病毒： Trojan.PSW.Win32.QQGame.bq
病毒： Trojan.PSW.Win32.GameOL.lfd
病毒： Worm.Win32.PaBug.gj
病毒： Trojan.PSW.Win32.GameOL.lek
病毒： Trojan.PSW.Win32.GameOL.lex
病毒： Trojan.PSW.Win32.OnlineGames.GEN
病毒： Trojan.PSW.Win32.WorldOnline.mc
病毒： Trojan.PSW.Win32.GameOL.lfk
病毒： Trojan.PSW.Win32.GameOL.lfg
病毒： Trojan.PSW.Win32.GameOL.lfl

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.26.42

显示全部楼层 · 发表于 2008-1-13 16:34:32

Scanning folder C:\Documents and Settings\David\桌面\29
Found possible trojan file: C:\Documents and Settings\David\桌面\29\12.exe (Generic.FSG)
Found trojan file: C:\Documents and Settings\David\桌面\29\4.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\7.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\10.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\1.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\13.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\16.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\28.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\8.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\11.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\5.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\25.exe (TrojanClicker.VB.334)
Found trojan file: C:\Documents and Settings\David\桌面\29\2.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\22.exe (Upack)
Found trojan file: C:\Documents and Settings\David\桌面\29\29.exe (Upack)
Found possible trojan file: C:\Documents and Settings\David\桌面\29\9.exe (Generic.FSG)
Found trojan file: C:\Documents and Settings\David\桌面\29\26.exe (TrojanClicker.VB.334)
Found trojan file: C:\Documents and Settings\David\桌面\29\6.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\3.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\21.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\27.exe (PWSteal.OnLineGames.567)
Found trojan file: C:\Documents and Settings\David\桌面\29\24.exe (TrojanClicker.VB.334)

显示全部楼层 · 发表于 2008-1-13 16:49:45

NOD32

显示全部楼层 · 发表于 2008-1-13 16:50:02

六个不杀。。。。

显示全部楼层 · 发表于 2008-1-13 17:06:33

nod一共扫出35个

[病毒样本] 41pcs

本帖子中包含更多资源

52/22