[病毒样本] sys

显示全部楼层 · 发表于 2008-5-7 16:42:06

早上改后缀不小心双击，结果产生了一大堆东西，这个东西多引擎没一家报，所以选了一家上报。

The file 'msosmsp2p32.sys' has been determined to be 'MALWARE'.
Our analysts named the threat TR/PSW.Online.ddo. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates.

显示全部楼层 · 发表于 2008-5-7 16:43:47

windows清理助手发现，"侠客行"编写的清除脚本。

显示全部楼层 · 发表于 2008-5-7 16:48:53

驱动文件

显示全部楼层 · 发表于 2008-5-7 17:09:23

杀必死不错，处理误报慢了点。双休日可以把它整的很惨。目前处在夏令时，时差6小时。

[ 本帖最后由 aerbeisi 于 2008-5-7 17:12 编辑 ]

显示全部楼层 · 发表于 2008-5-7 17:31:45

金山 0

显示全部楼层 · 发表于 2008-5-7 17:39:37

BD 没报！

显示全部楼层 · 发表于 2008-5-7 19:40:34

TO KL

显示全部楼层 · 发表于 2008-5-7 19:46:57

RS20.43.21未杀！

显示全部楼层 · 发表于 2008-5-7 19:49:17

Hello,

msosmsp2p32.sys - Trojan-PSW.Win32.OnLineGames.adte

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Andrey Ladikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: msosmsp2p32.rar
[:1:]

显示全部楼层 · 发表于 2008-5-7 20:48:17

TO Frisk.

[病毒样本] sys

本帖子中包含更多资源

本帖子中包含更多资源

2/0

浏览过的版块