[病毒样本] 19

显示全部楼层 · 发表于 2008-4-10 20:31:01

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ubd 檔案: C:\Documents and Settings\kato9096\桌面\MS0Cache.rar/MS0Cache\2147483646\adld.dat

上报卡巴

Hello,

adld.dat - Trojan-PSW.Win32.OnLineGames.aaab

This file is already detected. Please update your antivirus bases.

Autosetup.exe_ - Trojan-Dropper.Win32.Agent.qji

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

boot.exe_, Cnzz.Visa.Certification.dll, CSPlatform.dll, csp_ex.dll, st.dll, Start.exe_

No malicious code were found in these files.

c0.exe_, c1.exe_

These files are corrupted.

Setup.exe_ - not-a-virus:AdWare.Win32.BHO.aom

This file is an Advertizing Tool, It's detection will be included in the next
update of extended databases set. See more info about
extended databases here: http://www.kaspersky.com/extraavupdates

[ 本帖最后由 kato9096 于 2008-4-11 11:06 编辑 ]

显示全部楼层 · 发表于 2008-4-10 20:32:30

Starting the file scan:

Begin scan in 'E:\新建文件夹 (2)\MS0Cache.rar'
E:\新建文件夹 (2)\MS0Cache.rar
  [0] Archive type: RAR
  --> MS0Cache\2147483646\adld.dat
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.61952
  --> MS0Cache\2147483647\adld.dat
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.61952
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2008-4-10 20:35:14

AdWare.Win32.Agent.zxn

显示全部楼层 · 发表于 2008-4-10 20:37:28

D:\download\MS0Cache.rar>>MS0Cache\2147483646\adld.dat TrojanPSW.OnLineGames.ubd.wgoy 木马还未处理

显示全部楼层 · 发表于 2008-4-10 21:08:43

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ubd 文件: G:\virus\MS0Cache.rar/MS0Cache\2147483646\adld.dat

显示全部楼层 · 发表于 2008-4-10 21:11:26

ArcaVir , FP6 pass.

显示全部楼层 · 发表于 2008-4-10 21:20:29

C:\Documents and Settings\Administrator\桌面\MS0Cache.rar>>MS0Cache\2147483646\adld.dat TrojanPSW.OnLineGames.ubd.wgoy 木马还未处理
C:\Documents and Settings\Administrator\Local Settings\Temp\TWIEX1\MS0Cache\2147483646\adld.dat TrojanPSW.OnLineGames.ubd.wgoy 木马还未处理
C:\Documents and Settings\Administrator\桌面\MS0Cache.rar>>MS0Cache\79\CSPlatform.dll Packed.UPX.a 带壳程序还未处理

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\MS0Cache.rar'
C:\Documents and Settings\Administrator\桌面\MS0Cache.rar
  [0] Archive type: RAR
  --> MS0Cache\2147483646\adld.dat
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.61952
  --> MS0Cache\2147483647\adld.dat
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.61952
   [INFO]    The file was deleted!

[:16:]

显示全部楼层 · 发表于 2008-4-10 21:38:46

看能扫出几个来！！！！！！！！！！！

显示全部楼层 · 发表于 2008-4-10 21:50:11

3814934  boot.exe  44 KB  CLEAN
3814935  Cnzz.Visa.Certifi...on.dll  293.38 KB  CLEAN
3814936  CSPlatform.dll  268 KB  CLEAN
3814937  csp_ex.dll  229 KB  CLEAN
3814938  fl.dat  94 Byte  CLEAN
3814939  sign.dat  512 Byte  CLEAN
3814940  st.dll  228 KB  CLEAN
3814941  Start.exe  24.5 KB  CLEAN
3814942  fl.dat  30 Byte  CLEAN
3814943  Setup.exe  150.96 KB  MALWARE
3814944  sign.dat  511 Byte  CLEAN
3814945  start.exe  24.5 KB  CLEAN
3786856  adld.dat  60.5 KB  MALWARE
3786857  fl.dat  18 Byte  CLEAN
3786858  sign.dat  512 Byte  CLEAN
3814946  adld.dat  59.5 KB  MALWARE
3786857  fl.dat  18 Byte  CLEAN
3814947  sign.dat  512 Byte  CLEAN
3814948  Cache.ini  92 Byte  CLEAN

显示全部楼层 · 发表于 2008-4-10 21:54:38

EAV 蜘蛛全PASS。。。。

[病毒样本] 19

本帖子中包含更多资源

27/1