[C541F4 B79069]多个未知

tracydk

原帖由 EQ2 于 2007-6-6 17:14 发表
avast的潜力还是很大的。。。。一旦启发式发展起来的话。。。

5.0据说有启发,主动防御,和自我保护

taihuxian

Virus: Trojan-PSW.Win32.Magania.om

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.Magania.om (2x)

Virus found while downloading Web content.

Address: bbs.kafan.cn

wangjay1980

Hello,

94b.dll, PDLL.dll, svchost.exe_ - Trojan-PSW.Win32.Magania.om,
fksdy.dll, wfdrd.dll, wgptl.dll, wtrmm.dll, zkjjx.dll - Trojan-PSW.Win32.OnLineGames.tn

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Yury Nesmachny
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.



> Attachment: h.zip
> Attachment: svchost.zip

woai_jolin

ESS
2007/6/6 19:10:33        Scanning Log
2007/6/6 19:10:33        Version of virus signature database: 2312 (20070606)
2007/6/6 19:10:33        Date: 6.6.2007  Time: 19:10:33
2007/6/6 19:10:33        Scanned disks, folders and files: E:\病毒测试\
2007/6/6 19:10:36        E:\病毒测试\h.rar - Win32/Delf.NFH trojan - deleted
2007/6/6 19:10:36        E:\病毒测试\h.rar » RAR » fksdy.dll - Win32/Delf.NFH trojan
2007/6/6 19:10:36        E:\病毒测试\h.rar » RAR » zkjjx.dll - Win32/Delf.NFH trojan
2007/6/6 19:10:36        E:\病毒测试\h.rar » RAR » wfdrd.dll - Win32/Delf.NFH trojan
2007/6/6 19:10:36        E:\病毒测试\h.rar » RAR » wtrmm.dll - Win32/Delf.NFH trojan
2007/6/6 19:10:36        E:\病毒测试\h.rar » RAR » wgptl.dll - Win32/Delf.NFH trojan
2007/6/6 19:10:36        Number of scanned files: 9
2007/6/6 19:10:36        Number of threats found: 5
2007/6/6 19:10:36        Time of completion: 19:10:36  Total scanning time: 3 sec (00:00:03)

rasis

h.rar
  [0] Archive type: RAR
  --> fksdy.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 94b.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> PDLL.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> zkjjx.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> wfdrd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> wtrmm.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> wgptl.dll
      [DETECTION] Contains suspicious code HEUR/Malware

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\svchost.rar'
C:\Documents and Settings\Administrator\My Documents\
  svchost.rar
    [0] Archive type: RAR
    --> svchost.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\h.rar'
C:\Documents and Settings\Administrator\My Documents\
  h.rar
    [0] Archive type: RAR
    --> fksdy.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 94b.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> PDLL.dll
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> zkjjx.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> wfdrd.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> wtrmm.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> wgptl.dll
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年6月6日  08:04
Used time: 00:11 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      8 viruses and/or unwanted programs were found
      5 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      2 Archives were scanned
     10 Warnings
      0 Notes
      0 Hidden objects were found

鼻耳盖子

运行后报未知间谍 剩下的都是dll文件 不能运行。