[病毒样本] 3

显示全部楼层 · 发表于 2008-3-23 00:33:05

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.usl 檔案: C:\Documents and Settings\kato9096\桌面\a.rar/weizi.exe//PE_Patch//UPack

上报到卡巴

satisfiedadvertizing.exe_ - Trojan-Clicker.Win32.Agent.ye

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

a.rar, S.rar

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-3-24 23:53 编辑 ]

显示全部楼层 · 发表于 2008-3-23 00:34:26

C:\Documents and Settings\Don johnson\桌面\a.rar » RAR » weizi.exe - probably a variant of Win32/PSW.OnLineGames.NMQ trojan

显示全部楼层 · 发表于 2008-3-23 00:41:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\s.rar'
Begin scan in 'C:\Documents and Settings\Administrator\桌面\a.rar'
C:\Documents and Settings\Administrator\桌面\a.rar
  [0] Archive type: RAR
  --> weizi.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\satisfiedadvertizing.rar'
C:\Documents and Settings\Administrator\桌面\satisfiedadvertizing.rar
  [0] Archive type: RAR
  --> satisfiedadvertizing.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-3-23 00:49:51

木马名称:Trojan-PSW.Win32.OLGame.mdk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\WEIZI.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Agent.qwq

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\SATISFIEDADVERTIZING.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2008-3-23 00:54:26

satisfiedadvertizing.exe_ - Trojan-Clicker.Win32.Agent.ye

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

a.rar, S.rar

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

显示全部楼层 · 发表于 2008-3-23 14:51:52

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\a.rar->weizi.exe->(embedded)
[Contains infected objects] C:\a.rar
[Quarantined] C:\a.rar->weizi.exe->(embedded)

显示全部楼层 · 发表于 2008-3-23 15:15:27

江民杀毒软件报告文件

北京江民新科技术有限公司

扫描引擎 11.00.703
病毒库日期 2008-03-23
更新日期 2008-03-09

扫描目标 d:\我的文档\桌面\a.rar

开始时间 2008-03-09 10:09:07

在 d:\我的文档\桌面\a.rar->weizi.exe 中发现 Trojan/PSW.OnLineGames.xxg 病毒, 已删除
正常结束。

扫描结果:
               文件数 :2                                  病毒体 :1
               删除 :1                                  解毒 :0
扫描速度(千字节/秒) :2                               扫描时间 :00:00:15
扫描文件速度(个/秒) :0

- - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - - -    - - - - - - - - - - - -

显示全部楼层 · 发表于 2008-3-23 15:55:52

Sign of "Win32:Agent-BQC [Trj]" has been found in "F:\a.rar\weizi.exe\[Upack]\[Embedded#4090]\[Upack]" file.

显示全部楼层 · 发表于 2008-3-23 20:08:10

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.mnp

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.36.62

[病毒样本] 3

本帖子中包含更多资源

5/1第二包杀！

浏览过的版块