virus

显示全部楼层 · 发表于 2008-6-16 08:56:00

一包生成物。。。
质量不知道。。。
闪。。。
看NBA去。。。

显示全部楼层 · 发表于 2008-6-16 09:30:14

都是DLL文件

显示全部楼层 · 发表于 2008-6-16 09:45:05

orz.exe..............

Hello,

khfFYRhh.dll - Trojan.Win32.Agent.ruh

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

orz.exe

No malicious code was found in this file.

Please quote all when answering.

--
Best regards, Vladimir Lebedev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: 1.rar

> dsfsdf
> ________________________________
> "????,????" ????!<http://get.live.cn>
>

> drn

[ 本帖最后由 garyyan456 于 2008-6-16 10:19 编辑 ]

显示全部楼层 · 发表于 2008-6-16 10:00:53

C:\Documents and Settings\Administrator\桌面\1.zip>>cdayyv.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>lhefc.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>oljffd.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>ollhff.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>spmjkg.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>spmkkg.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>vvsp.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理
C:\Documents and Settings\Administrator\桌面\1.zip>>vwtqno.dll TrojanPSW.OnLineGames.apeo.gnnu.dll 木马还未处理

显示全部楼层 · 发表于 2008-6-16 10:34:07

D:\firefox download\1.zip » ZIP » orz.exe - is OK
D:\firefox download\1.zip » ZIP » cdayyv.dll - is OK
D:\firefox download\1.zip » ZIP » spmjkg.dll - is OK
D:\firefox download\1.zip » ZIP » gos1B.tmp - is OK
D:\firefox download\1.zip » ZIP » lhefc.dll - is OK
D:\firefox download\1.zip » ZIP » khfFYRhh.dll - a variant of Win32/Adware.Virtumonde application - was a part of the deleted object
D:\firefox download\1.zip » ZIP » spmkkg.dll - is OK
D:\firefox download\1.zip » ZIP » oljffd.dll - is OK
D:\firefox download\1.zip » ZIP » winuqw32.dll - is OK
D:\firefox download\1.zip » ZIP » vvsp.dll - is OK
D:\firefox download\1.zip » ZIP » ollhff.dll - is OK
D:\firefox download\1.zip » ZIP » vwtqno.dll - is OK

显示全部楼层 · 发表于 2008-6-16 10:38:16

Begin scan in 'C:\Documents and Settings\Administrator\桌面\1.zip'
C:\Documents and Settings\Administrator\桌面\
C:\Documents and Settings\Administrator\桌面\1.zip
  [0] Archive type: ZIP
  --> cdayyv.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> spmjkg.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> lhefc.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> spmkkg.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> oljffd.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> vvsp.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> ollhff.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
  --> vwtqno.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.apeo
   [NOTE]    A backup was created as '48cfd1f9.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-6-16 17:09:41

费尔10个

显示全部楼层 · 发表于 2008-6-16 17:46:10

瑞星8个

显示全部楼层 · 发表于 2008-6-16 18:01:53

avira 10个

显示全部楼层 · 发表于 2008-6-16 18:04:03

发现未知间谍软件，是否删除？

[病毒样本] virus

本帖子中包含更多资源

8~