11

sam.to

已刪除: 病毒 Worm.Win32.Downloader.ia        檔案: C:\Documents and Settings\kato9096\桌面\複製 -200842716361699.rar/080427\explorer.exe
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acch        檔案: C:\Documents and Settings\kato9096\桌面\複製 -200842716361699.rar/080427\anistio.exE//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.acai        檔案: C:\Documents and Settings\kato9096\桌面\複製 -200842716361699.rar/080427\csjqgijp.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xyz        檔案: C:\Documents and Settings\kato9096\桌面\複製 -200842716361699.rar/080427\dqDXYDXY1006.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xzu        檔案: C:\Documents and Settings\kato9096\桌面\複製 -200842716361699.rar/080427\dqNNBNNB1051.exe//PE_Patch//UPack

5,不报的已上报卡巴


Hello,

batmeter.dll, devcon.exed, GuiHelp.sys, stobject.dll, sxs.dll, vsnp2uvc.dll

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-4-27 20:11 编辑 ]

wangjay1980

K

Starting the file scan:

Begin scan in 'E:\AV\080427'
E:\AV\080427\explorer.exe2
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.IA.7
      [NOTE]      The file was deleted!
E:\AV\080427\anistio.exE2
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\AV\080427\csjqgijp.exe2
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
      [NOTE]      The file was deleted!
E:\AV\080427\dqDXYDXY1006.exe2
  [0] Archive type: OVL
  --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xyz
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajv
      [NOTE]      The file was deleted!
E:\AV\080427\dqNNBNNB1051.exe2
  [0] Archive type: OVL
  --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xzu
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ajv
      [NOTE]      The file was deleted!


End of the scan: 2008年4月28日  06:37
Used time: 00:11 min

The scan has been done completely.

      1 Scanning directories
     11 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

[ 本帖最后由 Exia 于 2008-4-28 06:36 编辑 ]

598068  devcon.exe2  54.5 KB  CLEAN
25001684  explorer.exe2  954 KB  UNDER ANALYSIS
25001685  GuiHelp.sys2  8.15 KB  UNDER ANALYSIS
25001686  vsnp2uvc.dll  292 KB  UNDER ANALYSIS
736257  batmeter.dll2  30.5 KB  KNOWN CLEAN
738005  stobject.dll  119 KB  KNOWN CLEAN
738015  sxs.dll  736.5 KB  KNOWN CLEAN

28654621

D:\download\200842716361699.rar>>080427\explorer.exe2        Worm.Downloader.ia.zjgt        木马        还未处理
D:\download\200842716361699.rar>>080427\anistio.exE2        TrojanSpy.Gen.omde        木马        还未处理
D:\download\200842716361699.rar>>080427\csjqgijp.exe2        TrojanOnlinegames.NVI.lovf        木马        还未处理
D:\download\200842716361699.rar>>080427\dqDXYDXY1006.exe2        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理
D:\download\200842716361699.rar>>080427\dqNNBNNB1051.exe2        TrojanPSW.OnLineGames.wlu.kjdk        木马        还未处理

sam.to

Hello,

batmeter.dll, devcon.exed, GuiHelp.sys, stobject.dll, sxs.dll, vsnp2uvc.dll

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

wangjay1980

果然

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\200842716361699.rar<RAR>:explorer.exe2 <- Variant:Trojan.Agent.Fb : No action
C:\Documents and Settings\All Users\Documents\Test\200842716361699.rar<RAR>:csjqgijp.exe2 <- Trojan.Psw.Onlinegames.Acai : No action



Scanned objects : 20

Infected objects : 2

边缘vip

驱逐舰:
Trojan.DownLoader.36403 2007.11.07 Normal

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GamesOnline.vp
病毒： Trojan.PSW.Win32.QQSG.dr

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.41.62