样本1

0106

同学电脑中

红心王子

已删除: 病毒 Invader (变种)        文件: C:\Documents and Settings\Administrator\桌面\mppds.rar/mppds.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\msccrt.rar/msccrt.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.vd        文件: C:\Documents and Settings\Administrator\桌面\MsIMMs32.rar/MsIMMs32.exe//FSG
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\shualai.rar/shualai.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.qy        文件: C:\Documents and Settings\Administrator\桌面\testexe.rar/testexe.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.wq        文件: C:\Documents and Settings\Administrator\桌面\upxdnd.rar/upxdnd.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.oe        文件: C:\Documents and Settings\Administrator\桌面\wincour.rar/wincour.exe//PE_Patch//UPack
卡巴7里面有的报了壳，不错，一共报了七个

观弈书童

testexe.exe - Win32/PSW.Agent.NCC 木马的变种
upxdnd.exe - 可能是 Win32/PSW.OnLineGames.NAL 木马 的一个变种
wincour.exe - Win32/PSW.OnLineGames.NAG 木马的变种
mppds.exe - 可能是 Win32/PSW.OnLineGames.NAL 木马 的一个变种
msccrt.exe - Win32/PSW.Agent.NCC 木马的变种
MsIMMs32.exe - 可能是 Win32/PSW.OnLineGames.NAL 木马 的一个变种
shualai.exe - Win32/Agent.NHN 木马

1688388728

回复

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\wincour'
C:\Documents and Settings\Administrator\My Documents\wincour\
  mppds.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
  msccrt.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.1776
      [WARNING]   The file was ignored!
  MsIMMs32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.VD.1
      [WARNING]   The file was ignored!
  shualai.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.1893
      [WARNING]   The file was ignored!
  testexe.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.22
      [WARNING]   The file was ignored!
  upxdnd.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
  wincour.exe
      [DETECTION] Is the Trojan horse TR/PSW.11264.7
      [WARNING]   The file was ignored!


End of the scan: 2007年6月6日  23:16
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
      7 Files were scanned
      7 viruses and/or unwanted programs were found
      2 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -2 Files not concerned
      0 Archives were scanned
      7 Warnings
      0 Notes
      0 Hidden objects were found

wangjay1980

请用新的发帖方法!

taihuxian

Virus: Win32:OnLineGames-PL [Trj]

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.es

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.vd

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.es

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.qy

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.wq

Virus found while downloading Web content.

Address: bbs.kafan.cn

Virus: Trojan-PSW.Win32.OnLineGames.oe

Virus found while downloading Web content.

Address: bbs.kafan.cn

欠妳緈諨

AVAST报了5个

harry_chang2003

PC-cillin 2005DIY版

殺6個

3個已知,3個啟發,0報殼

woai_jolin

ess 7个

2007/6/8 0:02:59        Scanning Log
2007/6/8 0:02:59        Version of virus signature database: 2316 (20070607)
2007/6/8 0:02:59        Date: 8.6.2007  Time: 00:02:59
2007/6/8 0:02:59        Scanned disks, folders and files: E:\病毒测试\
2007/6/8 0:02:59        E:\病毒测试\mppds.rar - probably a variant of Win32/PSW.OnLineGames.NAL trojan - deleted - quarantined
2007/6/8 0:02:59        E:\病毒测试\mppds.rar » RAR » mppds.exe - probably a variant of Win32/PSW.OnLineGames.NAL trojan
2007/6/8 0:02:59        E:\病毒测试\msccrt.rar - a variant of Win32/PSW.Agent.NCC trojan - deleted - quarantined
2007/6/8 0:02:59        E:\病毒测试\msccrt.rar » RAR » msccrt.exe - a variant of Win32/PSW.Agent.NCC trojan
2007/6/8 0:02:59        E:\病毒测试\MsIMMs32.rar - probably a variant of Win32/PSW.OnLineGames.NAL trojan - deleted - quarantined
2007/6/8 0:02:59        E:\病毒测试\MsIMMs32.rar » RAR » MsIMMs32.exe - probably a variant of Win32/PSW.OnLineGames.NAL trojan
2007/6/8 0:02:59        E:\病毒测试\shualai.rar - Win32/Agent.NHN trojan - deleted - quarantined
2007/6/8 0:02:59        E:\病毒测试\shualai.rar » RAR » shualai.exe - Win32/Agent.NHN trojan
2007/6/8 0:03:00        E:\病毒测试\testexe.rar - a variant of Win32/PSW.Agent.NCC trojan - deleted - quarantined
2007/6/8 0:03:00        E:\病毒测试\testexe.rar » RAR » testexe.exe - a variant of Win32/PSW.Agent.NCC trojan
2007/6/8 0:03:00        E:\病毒测试\upxdnd.rar - probably a variant of Win32/PSW.OnLineGames.NAL trojan - deleted - quarantined
2007/6/8 0:03:00        E:\病毒测试\upxdnd.rar » RAR » upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.NAL trojan
2007/6/8 0:03:00        E:\病毒测试\wincour.rar - a variant of Win32/PSW.OnLineGames.NAG trojan - deleted - quarantined
2007/6/8 0:03:00        E:\病毒测试\wincour.rar » RAR » wincour.exe - a variant of Win32/PSW.OnLineGames.NAG trojan
2007/6/8 0:03:00        Number of scanned files: 14
2007/6/8 0:03:00        Number of threats found: 7
2007/6/8 0:03:00        Time of completion: 00:03:00  Total scanning time: 1 sec (00:00:01)