查看: 1715|回复: 8
收起左侧

[病毒样本] 病毒一个

[复制链接]
1e3e
头像被屏蔽
发表于 2008-1-28 20:53:48 | 显示全部楼层 |阅读模式
自己机子上抓的
File rsmyjsp.exe received on 01.28.2008 13:42:10 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 28/32 (87.5%)

Loading server information...
Your file is queued in position: 5.
Estimated start time is between 50 and 72 seconds.
Do not close the window until scan is complete.
The scanner that was processing your file is stopped at this moment, we are going to wait a few seconds to try to recover your result.
If you are waiting for more than five minutes you have to resend your file.
Your file is being scanned by VirusTotal in this moment,
results will be shown as they're generated.
Compact
Print results


Your file has expired or does not exists.
Service is stopped in this moments, your file is waiting to be scanned (position:
) for an undefined time. You can wait for web response (automatic reload) or type your email in the form below and click "request" so the system sends you a notification when the scan is finished.  
Email:



AntivirusVersionLast UpdateResult
AhnLab-V32008.1.28.102008.01.28Win-Trojan/KorGameHack.16726
AntiVir7.6.0.562008.01.28TR/WuDisable.B
Authentium4.93.82008.01.26-
Avast4.7.1098.02008.01.27Win32:OnLineGames-BGD
AVG7.5.0.5162008.01.28PSW.OnlineGames.ZEO
BitDefender7.22008.01.28DeepScan:Generic.Dld.Agent.F4EDB086
CAT-QuickHeal9.002008.01.25TrojanPSW.OnLineGames.mra
ClamAV0.91.22008.01.28PUA.Packed.UPack
DrWeb4.44.0.091702008.01.28Trojan.PWS.Gamania.6632
eSafe7.0.15.02008.01.16suspicious Trojan/Worm
eTrust-Vet31.3.54862008.01.26Win32/Storark!generic
Ewido4.02008.01.27Trojan.OnLineGames.mra
FileAdvisor12008.01.28-
Fortinet3.14.0.02008.01.28-
F-Prot4.4.2.542008.01.27W32/Heuristic-162!Eldorado
F-Secure6.70.13260.02008.01.28W32/Smalldrp.PPW
IkarusT3.1.1.202008.01.28Trojan-Spy.Win32.Delf.uv
Kaspersky7.0.0.1252008.01.28Trojan-PSW.Win32.OnLineGames.mra
McAfee52162008.01.26New Malware.n
Microsoft1.31092008.01.28Trojan:Win32/Storark.B
NOD32v228272008.01.28a variant of Win32/PSW.OnLineGames.FDY
Norman5.80.022008.01.24W32/Smalldrp.PPW
Panda9.0.0.42008.01.28Trj/Lineage.GXW
Prevx1V22008.01.28Heuristic: Suspicious File With Code Injection Technology
Rising20.29.01.002008.01.28-
Sophos4.25.02008.01.28Mal/Behav-152
Sunbelt2.2.907.02008.01.25VIPRE.Suspicious
Symantec102008.01.28Infostealer.Gampass
TheHacker6.2.9.2002008.01.28Trojan/PSW.OnLineGames.mra
VBA323.12.2.52008.01.21suspected of Embedded.Trojan-PSW.Win32.OnLineGames.mra
VirusBuster4.3.26:92008.01.27Packed/Upack
Webwasher-Gateway6.6.22008.01.28Trojan.WuDisable.B
Additional information
File size: 17006 bytes
MD5: 4c640908353bf96ce74eadf428135558
SHA1: b4fb757cf379cc3a3c20d0b75e960158acfb039f
PEiD: WinUpack v0.39 final (relocated image base) -> By Dwing (c)2005 (h2)
packers: Upack
packers: UPack
packers: UPack
Prevx info: http://info.prevx.com/aboutprogr ... 0F38104140081A9B205
Sunbelt info: VIPRE.Suspicious is a generic detection for potential threats that are deemed suspicious through heuristics.

ATTENTION: VirusTotal is a free service offered by Hispasec Sistemas. There are no guarantees about the availability and continuity of this service. Although the detection rate afforded by the use of multiple antivirus engines is far superior to that offered by just one product, these results DO NOT guarantee the harmlessness of a file. Currently, there is not any solution that offers a 100% effectiveness rate for detecting viruses and malware.

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
傻猪猪米走鸡
发表于 2008-1-28 21:03:21 | 显示全部楼层
Scan Log
Version of virus signature database: 2827 (20080128)
Date: 2008-1-28  Time: 21:08:06
Scanned disks, folders and files: E:\virus\rsmyjsp.rar
E:\virus\rsmyjsp.rar » RAR » rsmyjsp.exe - a variant of Win32/PSW.OnLineGames.FDY trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Time of completion: 21:08:11  Total scanning time: 5 sec (00:00:05)
天灰
发表于 2008-1-28 21:13:37 | 显示全部楼层
C:\Documents and Settings\77\My Documents\rsmyjsp.rar>>rsmyjsp.exe        TrojanPSW.OnLineGames.lhc.rreg        木马        还未处理
woai_jolin
发表于 2008-1-28 21:24:31 | 显示全部楼层
2008-1-28 21:24:47        Real-time file system protection        file        G:\v\rsmyjsp.exe        a variant of Win32/PSW.OnLineGames.FDY trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred during an attempt to access the file by the application: C:\WINDOWS\Explorer.EXE.
qigang
发表于 2008-1-28 21:34:26 | 显示全部楼层

3/1需要解压出来

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.GameOL.GEN

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.29.02
xlys
发表于 2008-1-28 21:43:11 | 显示全部楼层
对象: rsmyjsp.exe
        在压缩档案里: D:\Documents\桌面\rsmyjsp.rar
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.mra (KAV 引擎)
对象: rsmyjsp.rar
        路径: D:\Documents\桌面
        状态: 已发现病毒
        病毒: Trojan-PSW.Win32.OnLineGames.mra (KAV 引擎)
分析完成: 2008-1-28 21:43
    已扫描 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件
鱼是一只我
发表于 2008-1-28 21:43:50 | 显示全部楼层
江民~~~~

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
挪威的冬天
发表于 2008-1-28 21:45:33 | 显示全部楼层
信息        2008-01-28  21:44:24        您此次查毒共查出1个病毒以及危险代码                       
信息        2008-01-28  21:44:24        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件3个                       
信息        2008-01-28  21:44:24        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-01-28  21:44:24        C:\Users\挪威的冬天\Desktop\rsmyjsp.rar\rsmyjsp.exe        Win32.Troj.OnlineGamesT.zy.90112        跳过,未处理
woai_jolin
发表于 2008-1-28 21:46:57 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-19 15:13 , Processed in 0.137171 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表