收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › mcafee没有报之二
12
返回列表 发新帖
楼主: kingmuro
 收起左侧

[病毒样本] mcafee没有报之二

[复制链接]
sam.to
发表于 2008-5-15 11:13:03 | 显示全部楼层

回复 10楼 kato9096 的帖子

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ahzh        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/fmsiocps.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aecd        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/fmsjhif.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegv        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/hefcndy.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aecx        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/hefcndy.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aegh        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/mfchlp64.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aenz        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/msosfmsq02.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ahzi        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/okjhaj.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ahzi        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/phbboy.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aelm        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/ticisms.dll
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aelm        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/ticisms.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aelm        檔案: C:\Documents and Settings\kato9096\桌面\b.rar/yphkxa.dll

不报的不是毒
http://www.virustotal.com/zh-tw/ ... ec45857bbad004a501d

[ 本帖最后由 kato9096 于 2008-5-15 11:14 编辑 ]
回复

举报

尽在不言中
发表于 2008-5-15 17:58:53 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

Exia 该用户已被删除
发表于 2008-5-15 18:21:33 | 显示全部楼层
The file 'slrundll.exe' has been determined to be 'CLEAN'.
回复

举报

尤金卡巴斯基
发表于 2008-5-15 22:04:16 | 显示全部楼层
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ahzh        文件　: G:\Temp\b.rar/fmsiocps.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aecd        文件　: G:\Temp\b.rar/fmsjhif.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aegv        文件　: G:\Temp\b.rar/hefcndy.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aecx        文件　: G:\Temp\b.rar/hefcndy.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aegh        文件　: G:\Temp\b.rar/mfchlp64.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aenz        文件　: G:\Temp\b.rar/msosfmsq02.dll//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ahzi        文件　: G:\Temp\b.rar/okjhaj.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ahzi        文件　: G:\Temp\b.rar/phbboy.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aelm        文件　: G:\Temp\b.rar/ticisms.dll
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aelm        文件　: G:\Temp\b.rar/ticisms.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.aelm        文件　: G:\Temp\b.rar/yphkxa.dll
回复

举报

aribeth199
发表于 2008-5-16 15:51:26 | 显示全部楼层
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ahzh        File: F:\Download\b.rar/fmsiocps.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aecd        File: F:\Download\b.rar/fmsjhif.exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aegv        File: F:\Download\b.rar/hefcndy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aecx        File: F:\Download\b.rar/hefcndy.exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aegh        File: F:\Download\b.rar/mfchlp64.exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aenz        File: F:\Download\b.rar/msosfmsq02.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ahzi        File: F:\Download\b.rar/okjhaj.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ahzi        File: F:\Download\b.rar/phbboy.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aelm        File: F:\Download\b.rar/ticisms.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aelm        File: F:\Download\b.rar/ticisms.exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aelm        File: F:\Download\b.rar/yphkxa.dll
回复

举报

allinwonderi
发表于 2008-5-16 18:05:58 | 显示全部楼层

ArcaVir2008

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:fmsiocps.dll <- Trojan.Psw.Onlinegames.Ahzh : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:fmsjhif.exe <- Trojan.Psw.Onlinegames.Aecd : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:fmsjhif.exe<FSG>:fmsjhif.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aegu : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:hefcndy.dll <- Trojan.Psw.Onlinegames.Aegv : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:hefcndy.exe <- Trojan.Psw.Onlinegames.Aecx : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:hefcndy.exe<FSG>:hefcndy.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aegv : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:mfchlp64.exe <- Trojan.Psw.Onlinegames.Aegh : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:msosfmsq02.dll <- Trojan.Psw.Onlinegames.Aenz : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:ticisms.dll <- Trojan.Psw.Onlinegames.Aelm : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:ticisms.exe <- Trojan.Psw.Onlinegames.Aelm : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:ticisms.exe<FSG>:ticisms.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Aelm : No action
C:\Documents and Settings\All Users\Documents\Test\b.rar<RAR>:yphkxa.dll <- Trojan.Psw.Onlinegames.Aelm : No action



Scanned objects : 22

Infected objects : 12
回复

举报

allinwonderi
发表于 2008-5-16 18:06:18 | 显示全部楼层

F-Prot 6.0.9.0

[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->fmsiocps.dll
[Found security risk]        <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->fmsjhif.exe->(FSG)
[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->hefcndy.dll
[Found security risk]        <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->hefcndy.exe->(FSG)
[Found security risk]        <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->mfchlp64.exe->(FSG)
[Found security risk]        <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->msosfmsq02.dll
[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->okjhaj.dll
[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->phbboy.dll
[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->ticisms.dll
[Found security risk]        <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->ticisms.exe->(FSG)
[Found password stealer]        <W32/OnlineGames.AD.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\b.rar->yphkxa.dll

---------------------------------------------------------------------
Scan ended:        2008-5-16, 18:06:08
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         11
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------
回复

举报

12
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 07:57 , Processed in 0.081141 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表