NOD found nothing...

显示全部楼层 · 发表于 2007-4-5 13:36:57

RT...

显示全部楼层 · 发表于 2007-4-5 13:37:31

卡巴斯基反病毒 7.0 测试版
The requested URL http://bbs.kafan.cn/attachment.php?aid=51949 is infected with Trojan-PSW.Win32.OnLineGames.mf virus

显示全部楼层 · 发表于 2007-4-5 13:37:47

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\svchost.rar'
C:\Documents and Settings\morgan\My Documents\
  svchost.rar
[0] Archive type: RAR
--> svchost.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-5 13:37:58

TrendMicro PC-cillin 2007掛了

显示全部楼层 · 发表于 2007-4-5 13:38:12

过了飞塔

显示全部楼层 · 发表于 2007-4-5 13:38:17

已上报。。。。

显示全部楼层 · 发表于 2007-4-5 13:39:08

File: svchost.rar
Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)
MD5 4026820228b43d8827788ad47f614326
Packers detected: NSPACK

Scanner results
Scan taken on 05 Apr 2007 05:36:30 (GMT)
AntiVir Found HEUR/Crypted
ArcaVir Found nothing
Avast Found nothing
AVG Antivirus Found nothing
BitDefender Found Trojan.PWS.OnLineGames.ARO
ClamAV Found nothing
Dr.Web Found Trojan.PWS.Gamania
F-Prot Antivirus Found Possibly a new variant of W32/Threat-IKNP-based!Maximus
F-Secure Anti-Virus Found Trojan-PSW.Win32.OnLineGames.mf
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-PSW.Win32.OnLineGames.mf
NOD32 Found nothing
Norman Virus Control Found nothing
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found Packed/NSPack
VBA32 Found nothing

显示全部楼层 · 发表于 2007-4-5 15:08:27

在2003下执行出错，提示该内存不能为“read”.

显示全部楼层 · 发表于 2007-4-5 15:49:00

结果: 发现 1 个恶意程序
Trojan-PSW.Win32.OnLineGames.mf (病毒)
E:\下载\svchost.rar\svchost.exe

--------------------------------------------------------------------------------

统计
已扫描:
文件: 2
未扫描: 0
结果:
病毒: 1
间谍程序: 0
可疑对象: 0
风险软件: 0
操作:
已杀毒: 0
已重命名: 0
已删除: 0
已隔离: 0
失败: 0
引导区:
已扫描: 0
已感染: 0
可疑对象: 0
已杀毒: 0

--------------------------------------------------------------------------------

选项
病毒库版本:
病毒: 2007-04-05_02
间谍程序: 2007-04-05_02
扫描引擎：
F-Secure AVP: 7.00.171, 2007-04-05
F-Secure Libra: 2.04.01, 2007-04-04
F-Secure Orion: 1.02.37, 2007-04-04
F-Secure Draco: 1.00.35, 2007-03-05
扫描选项：
扫描所有文件
扫描压缩包內部
操作:
病毒: 对染毒文件杀毒
间谍程序: 隔离和删除

--------------------------------------------------------------------------------

版权所有 © 1998-2006 产品支持 | 发送病毒样本到 F-Secure

显示全部楼层 · 发表于 2007-4-5 16:01:57

Dr.web beta
>>Trojan.PWS.Gamania

[病毒样本] NOD found nothing...

本帖子中包含更多资源