8

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.GameOL.nfp
病毒： Trojan.PSW.Win32.GameOL.niw
病毒： Trojan.PSW.Win32.GameOL.nkl

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.47.50

欠妳緈諨

D:\病毒测试\临时解压\system32.rar:\tencent.sys3
D:\病毒测试\临时解压\system32.rar:\sysme.bat3
D:\病毒测试\临时解压\system32.rar:\msssc.dll2
D:\病毒测试\临时解压\system32.rar:\Procmon1.exe2
D:\病毒测试\临时解压\system32.rar:\sperls.dll2 - 特征码 'Trojan-PWS.Win32.OnLineGames.abzd' 被发现
D:\病毒测试\临时解压\system32.rar:\hujfgt.dll2 - 特征码 'Virus.Win32.OnLineGames.DJV' 被发现
D:\病毒测试\临时解压\system32.rar:\jmkcgt.dll2 - 特征码 'Virus.Win32.OnLineGames.DJV' 被发现
D:\病毒测试\临时解压\system32.rar:\an006[1].Vexe - 特征码 'Virus.Win32.Agent.GRW' 被发现
D:\病毒测试\临时解压\system32.rar

        9 文件被扫描
          (1 压缩档 8 文件)
        4 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:02.784

woai_jolin

扫描开始于2008年6月7日 23:07:09
G:\v\sperls.dll2,查到病毒: Spy/OnLineGames, 操作: 删除/隔离
G:\v\Procmon1.exe2,查到病毒: Suspicious, 操作: <无>
G:\v\an006[1].Vexe,查到病毒: Suspicious, 操作: <无>
扫描结束于2008年6月7日 23:07:09
总共扫描了8个文件, 其中感染病毒文件为3个. 总共扫描了0个引导区, 感染的引导区为0个.

hj5abc

sbbdms

Hello,

an006[1].Vexe - Trojan-Downloader.Win32.Agent.sfj

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

msssc.dll2, Procmon1.exe_, sysme.bat_, tencent.sys3

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: system32.rar

sam.to

有勞

sam.to

Filename         Result
hujfgt.dll2          MALWARE

The file 'hujfgt.dll2' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.ajng.4. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.157. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.
Filename         Result
jmkcgt.dll2          MALWARE

The file 'jmkcgt.dll2' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.ajya. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.157. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.
Filename         Result
msssc.dll2          CLEAN

The file 'msssc.dll2' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
Procmon1.exe2          MALWARE

The file 'Procmon1.exe2' has been determined to be 'MALWARE'. Our analysts named the threat W32/Huhk.A.2. The term "W32/" denotes a file virus or malware that runs on 32 Bit Windows systems (Windows 95 and higher) only.Detection will be added to our virus definition file (VDF) with one of the next updates.
Filename         Result
sysme.bat3          CLEAN

The file 'sysme.bat3' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.
Filename         Result
tencent.sys3          CLEAN

The file 'tencent.sys3' has been determined to be 'CLEAN'. Our analysts did not discovered any malicious content.