avast!抓到的网马

显示全部楼层 · 发表于 2007-4-8 14:59:11

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.np URL: http:/bbs.kafan.cn/attachment.php?aid=53558\wm.exe/FSG

显示全部楼层 · 发表于 2007-4-8 15:29:35

BitDefender Antivirus Plus v10
wm.zip=>wm.exe Infected: DeepScan:Generic.Malware.SFBdld.F94CE1AF

显示全部楼层 · 发表于 2007-4-8 15:30:37

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\wm.zip'
C:\Documents and Settings\morgan\My Documents\
  wm.zip
[0] Archive type: ZIP
--> wm.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
      [WARNING] Infected files in archives cannot be repaired!
      [WARNING] The file was ignored!

显示全部楼层 · 发表于 2007-4-8 15:31:00

McAfee 已自動封鎖並移除特洛伊病毒。

詳細資料
偵測: PWS-LegMir.dll (特洛伊病毒), PWS-LegMir.dll (特洛伊病毒)
檔案路徑: C:\Documents and Settings\all.HOME\桌面\wm.exe

显示全部楼层 · 发表于 2007-4-8 15:31:06

我看今天nod就没杀到几个。。
File: wm.zip
Status: INFECTED/MALWARE
MD5 9d7e6aede7db004f5bb2b290adda347e
Packers detected: FSG

Scanner results
Scan taken on 08 Apr 2007 07:30:12 (GMT)
AntiVir Found TR/Proxy.Delf.CA
ArcaVir Found nothing
Avast Found Win32:Delf-DOV
AVG Antivirus Found nothing
BitDefender Found DeepScan:Generic.Malware.SFBdld.F94CE1AF
ClamAV Found nothing
Dr.Web Found nothing
F-Prot Antivirus Found nothing
F-Secure Anti-Virus Found nothing
Fortinet Found nothing
Kaspersky Anti-Virus Found Trojan-PSW.Win32.OnLineGames.np
NOD32 Found nothing
Norman Virus Control Found Suspicious_F.gen
Panda Antivirus Found nothing
Rising Antivirus Found nothing
VirusBuster Found Packed/FSG
VBA32 Found nothing

显示全部楼层 · 发表于 2007-4-8 15:34:16

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-7
Start time: 2007-4-8 15:32
Engine(s): KAV engine (AVK 17.3820), BD-Engine (BD 17.2635)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: wm.exe
In archive: C:\Documents and Settings\Administrator\桌面\wm.zip
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.np (KAV engine), DeepScan:Generic.Malware.SFBdld.F94CE1AF (BD-Engine)
Object: wm.zip
Path: C:\Documents and Settings\Administrator\桌面
Status: Virus detected
Virus: Trojan-PSW.Win32.OnLineGames.np (KAV engine), DeepScan:Generic.Malware.SFBdld.F94CE1AF (BD-Engine)
Analysis complete: 2007-4-8 15:32
1 files checked
1 infected files detected
0 suspected files detected

显示全部楼层 · 发表于 2007-4-8 15:35:22

2007-4-8 15:34:31
已删除WM\WM.EXE
PWS-LegMir.dll (特洛伊)

显示全部楼层 · 发表于 2007-4-8 15:43:38

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
___________病毒查杀结果__________________

===============================================

2007年4月8日15时43分1秒开始查杀C:\Documents and Settings\worm\桌面\eyi\wm
C:\Documents and Settings\worm\桌面\eyi\wm\wm.exe 发现未知可疑文件:Win32.NkHack.FSG.A 操作:阻止运行
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

-----------------------------------------

2007年4月8日15时43分1秒收起线程…100% 查杀完毕！
扫描文件：1查杀病毒：1

显示全部楼层 · 发表于 2007-4-8 15:45:11

原帖由 mofunzone 于 2007-4-8 17:01 发表
我看今天nod就没杀到几个。。

最近的确有点不正常，不知道是不是官方在忙着ESS的缘故

[病毒样本] avast!抓到的网马

本帖子中包含更多资源

MCAFEE