两个.sys的驱动文件

显示全部楼层 · 发表于 2008-4-28 21:44:44

msyecp.sys
HBKernel.sys

显示全部楼层 · 发表于 2008-4-28 21:46:22

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹\桌面.rar'
E:\AV\新建文件夹\桌面.rar
  [0] Archive type: RAR
  --> HBKernel.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> msyecp.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-4-28 21:48:25

显示全部楼层 · 发表于 2008-4-28 21:53:17

[Found security risk] <W32/OnlineGames.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\桌面.rar->msyecp.sys

---------------------------------------------------------------------
Scan ended: 2008-4-28, 21:53:15
Duration: 0:00:00

Scan result:

Scanned files:    6
Infected objects:    1
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-4-28 21:53:54

C:\\HBKernel.sys - infected with Trojan.NtRootKit.1028
C:\msyecp.sys - infected with Trojan.PWS.Wsgame.3415

DRWEB kill

显示全部楼层 · 发表于 2008-4-28 21:53:58

ArcaVir
[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:HBKernel.sys <- Trojan.Psw.Agent.Ahl : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:msyecp.sys <- Trojan.Psw.Onlinegames.Rji : No action

Scanned objects : 3

Infected objects : 2

显示全部楼层 · 发表于 2008-4-28 22:01:36

D:\firefox download\桌面.rar » RAR » HBKernel.sys - Win32/PSW.OnLineGames.NOE trojan - was a part of the deleted object
D:\firefox download\桌面.rar » RAR » msyecp.sys - Win32/PSW.OnLineGames.MYG trojan - was a part of the deleted object

显示全部楼层 · 发表于 2008-4-28 22:03:42

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.GameHack.GEN

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.42.02

显示全部楼层 · 发表于 2008-4-28 22:28:38

红伞全杀

显示全部楼层 · 发表于 2008-4-28 23:48:43

木马名称:Trojan-PSW.Win32.OLGames.znl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\MSYECP.SYS
是木马程序!
已成功阻止其运行,是否要删除此文件?

[病毒样本] 两个.sys的驱动文件

本帖子中包含更多资源

本帖子中包含更多资源

3/1