大小: 30720 字节
or20=, Z 修改时间: 2007年9月13日, 9:47:16
5zUz-`]T MD5: 119C2D7E9B941D19F13391E9730231FE
uP2f\O@ SHA1: 06453033C1964D213B9973E1EB73BEED1DFD7CB0
)bkOl# F$ CRC32: 6675DD20
#yI{bO $`cT"
. 病毒发作过程:
yWOgrR>ju# 创建文件项
8dbs2JrF C:\WINNT\mppds.exe
j;v:,'.!: C:\WINNT\system32\mppds.dll
2!{3`.G b1R y&S7 注册表动作
w,<%*-4e HKLM\SOFTWARE\MICROSOFT\Windows\CURRENTVERSION\RUN
qLi4ie3?(% sM=H)S 简单清除方法:
,YrJ36Q 删除病毒创建在系统盘的病毒文件mppds.exe,mppds.dll
BWc~8L 请在安全模式下操作。开机按F8进入安全模式
$27z_b.s 最后删除病毒注册表动作,即可。
:2srPkqq .|x^Glr File: mppds.exe
1]SCCG#0 Status: INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's
cQ~fy'C#* mYc|G-TA scan results will not be stored in the database)
>T r%C-G MD5: 119c2d7e9b941d19f13391e9730231fe
&XgXP'e) Packers detected: -
pG5yJkU7c Bit9 reports: Not analyzed yet (more info)
z HX~[{W] bt/\q+j / Scanner results
FYR26R~l Scan taken on 05 Oct 2007 14:45:31 (GMT)
HBcuKSUo2} A-Squared Found nothing
"[yM^B2 AntiVir Found TR/OnLineGames.23552.1
dwQqzN~^` ArcaVir Found nothing
;d<l&
}A Avast Found Win32:Onlinegames-AUJ
f*o}9V~L+ AVG Antivirus Found Generic7.KYW
{4X;oft0 BitDefender Found DeepScan:Generic.PWS.Games.1.A20C0005
]Yrv!V ClamAV Found Trojan.Spy-12790
,Hm!8-F~U CPsecure Found Troj.PSW.W32.OnLineGames.cur
d)T:8i Dr.Web Found Trojan.PWS.Gamania.3990
}Sh_2H_: F-Prot Antivirus Found nothing
T H(yu_KE F-Secure Anti-Virus Found Trojan-PSW.Win32.OnLineGames.cur
*_;?**bD Fortinet Found W32/Dropper.CUR!tr.pws
e{m+_M; Kaspersky Anti-Virus Found Trojan-PSW.Win32.OnLineGames.cur
,v2IWv NOD32 Found a variant of Win32/PSW.OnLineGames.NFL
7rm|2] Norman Virus Control Found W32/OnLineGames.MNK
|vL-uu}T& Panda Antivirus Found Trj/Lineage.FJU
FBa=Pzz1 Rising Antivirus Found Trojan.PSW.Win32.OnlineGames.ypz
,i)t?o Sophos Antivirus Found Mal/Gampass-A, Mal/Dropper-P
y UQ$c#(+g VirusBuster Found Trojan.OnlineGames.Gen.43
2h6VGF\ VBA32 Found MalwareScope.Trojan-PSW.Game.12
)JK< ON $Ctb4 ^jx, 病毒样本位置:
eS.lZ http://avfbbs.80port.net/read-htm-tid-18373.html