大小: 30720 字节
teTXO0#w 修改时间: 2007年9月13日, 9:47:16
j70I'H~ MD5: 119C2D7E9B941D19F13391E9730231FE
+*+9vD
n SHA1: 06453033C1964D213B9973E1EB73BEED1DFD7CB0
FWK}]/~ CRC32: 6675DD20
mCg<, <~ Dt,HZQ%H 病毒发作过程：
=,?P) 6 创建文件项
3";vJi+[ C:\WINNT\mppds.exe
/Qc(->@ C:\WINNT\system32\mppds.dll
,'EfE"Hhl b<>E6A`2 注册表动作
m i x( HKLM\SOFTWARE\MICROSOFT\Windows\CURRENTVERSION\RUN
Bbl4dZ $*
h>>tJ? 简单清除方法：
e> m0S" 删除病毒创建在系统盘的病毒文件mppds.exe，mppds.dll
0&6_$${c 请在安全模式下操作。开机按F8进入安全模式
]V64rWX 最后删除病毒注册表动作，即可。
Kl7{}+zj)! >vO [ File: mppds.exe
CgRY3'? Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's
U'IK"oa* YG%$!6qUg scan results will not be stored in the database)
I Y<+:g\ MD5: 119c2d7e9b941d19f13391e9730231fe
tnqL)VSlU Packers detected: -
^ 7MZyF{% Bit9 reports: Not analyzed yet (more info)
Qi +s6o HAobO,-&?r Scanner results
IF`2zJQ4m Scan taken on 05 Oct 2007 14:45:31 (GMT)
:J !TB! A-Squared Found nothing
c`L,N6w4 AntiVir Found TR/OnLineGames.23552.1
>T/| &@ ArcaVir Found nothing
+}3|Q/7( Avast Found Win32:Onlinegames-AUJ
{`<zrPkN AVG Antivirus Found Generic7.KYW
5DOl.f\%u BitDefender Found DeepScan:Generic.PWS.Games.1.A20C0005
)<s5"|'' ClamAV Found Trojan.Spy-12790
`UaW/hF CPsecure Found Troj.PSW.W32.OnLineGames.cur
(50O(m$ Dr.Web Found Trojan.PWS.Gamania.3990
-fnQjT? F-Prot Antivirus Found nothing
Z:{}%@P4 F-Secure Anti-Virus Found Trojan-PSW.Win32.OnLineGames.cur
2##G.ol Fortinet Found W32/Dropper.CUR!tr.pws
3xT\O Kaspersky Anti-Virus Found Trojan-PSW.Win32.OnLineGames.cur
C*?!fO-j>M NOD32 Found a variant of Win32/PSW.OnLineGames.NFL
k'J( V Norman Virus Control Found W32/OnLineGames.MNK
4.;&aN%=/ Panda Antivirus Found Trj/Lineage.FJU
7P;$='es Rising Antivirus Found Trojan.PSW.Win32.OnlineGames.ypz
WO5o43ln8w Sophos Antivirus Found Mal/Gampass-A, Mal/Dropper-P
=||>).kSh` VirusBuster Found Trojan.OnlineGames.Gen.43
<1 A6UhN VBA32 Found MalwareScope.Trojan-PSW.Game.12
,X -Oc9Hy 9 -$~Gj\ 病毒样本位置：
D?f:0d}D http://avfbbs.80port.net/read-htm-tid-18373.html
