来个样本吧

显示全部楼层 · 发表于 2007-4-13 13:11:57

Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-13
Start time: 2007-4-13 13:11
Engine(s): KAV engine (AVK 17.4015), BD-Engine (BD 17.3672)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 10Sy.exe
Path: C:\Documents and Settings\Administrator\桌面\malware
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.nw (KAV engine)
Object: 11Sy.exe
Path: C:\Documents and Settings\Administrator\桌面\malware
Status: Suspected virus
Virus: Generic.Malware.Fdld.4077FA5E (BD-Engine)
Object: 8Sy.exe
Path: C:\Documents and Settings\Administrator\桌面\malware
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.oe (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 9Sy.exe
Path: C:\Documents and Settings\Administrator\桌面\malware
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.oe (KAV engine), Generic.Malware.SdldgPWS.7D14CD88 (BD-Engine)
Object: slai.exe
Path: C:\Documents and Settings\Administrator\桌面\malware
Status: Move file into quarantine
Virus: Trojan-PSW.Win32.OnLineGames.oe (KAV engine), Generic.Malware.SdldgPWS.7D14CD88 (BD-Engine)
Analysis complete: 2007-4-13 13:11
6 files checked
4 infected files detected
1 suspected files detected

显示全部楼层 · 发表于 2007-4-13 15:30:46

11Sy.exe和ipv6mon.dll微点没报，不过11sy.exe运行后没有动作（是不是加壳加挂了？）

显示全部楼层 · 发表于 2007-4-13 16:19:00

NIS 解压

显示全部楼层 · 发表于 2007-4-13 21:15:21

KIS
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.oe 文件: D:\Downloads\malware.zip/slai.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.oi 文件: D:\Downloads\malware.zip/11Sy.exe//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.oe 文件: D:\Downloads\malware.zip/8Sy.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.oe 文件: D:\Downloads\malware.zip/9Sy.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nw 文件: D:\Downloads\malware.zip/10Sy.exe//FSG

显示全部楼层 · 发表于 2007-4-14 00:09:28

PCC殺兩個

显示全部楼层 · 发表于 2007-4-14 00:51:02

支持一下

显示全部楼层 · 发表于 2007-4-14 03:04:30

壳王杀四个，漏杀了的两个样本看来12楼的微点也没反应

显示全部楼层 · 发表于 2007-4-14 08:24:14

挂了一个都没有出来

[病毒样本] 来个样本吧

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源