Trojan-PSW.Win32.OnLineGames.cur手工分析解决报告

大小: 30720 字节 !V6}J
g|+  
修改时间: 2007年9月13日, 9:47:16 IeW>V9  
MD5: 119C2D7E9B941D19F13391E9730231FE mq0qMjd  
SHA1: 06453033C1964D213B9973E1EB73BEED1DFD7CB0 zCq3'~e&aC  
CRC32: 6675DD20 AbWWZ_  
BH\-6tViP  
病毒发作过程： PO.2@^H  
创建文件项 +}w\O  
C:\WINNT\mppds.exe 7s=|qDPrf  
C:\WINNT\system32\mppds.dll FHR!}r[x  
5DgmN/cy  
注册表动作 g-MKaYJ  
HKLM\SOFTWARE\MICROSOFT\Windows\CURRENTVERSION\RUN u3 @EhxfK  
m+Q=9XS\  
简单清除方法： 6|Z)JLd  
删除病毒创建在系统盘的病毒文件mppds.exe，mppds.dll ugl#R8  
请在安全模式下操作。开机按F8进入安全模式 JlG~[zk6  
最后删除病毒注册表动作，即可。 mgW+UwJDU  
q1
i# D  
File:  mppds.exe  cWnaa,uS  
Status:  INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's "sFAMM5U  
Si8w?cpa  
scan results will not be stored in the database)  m*|RV*3.  
MD5:  119c2d7e9b941d19f13391e9730231fe  j)=G2F  
Packers detected:  - chy|?uTyR  
Bit9 reports:  Not analyzed yet (more info)  S!x>4~b:  
w4}zrT:2  
Scanner results  3bWU.0  
Scan taken on 05 Oct 2007 14:45:31 (GMT)  pTBf69  
A-Squared  Found nothing |Hj%##  
AntiVir  Found TR/OnLineGames.23552.1  :9mZg`u=j  
ArcaVir  Found nothing xVQh|sD  
Avast  Found Win32:Onlinegames-AUJ  wofioLvX  
AVG Antivirus  Found Generic7.KYW  | 4j~#/6O  
BitDefender  Found DeepScan:Generic.PWS.Games.1.A20C0005  0Ma9J^&ae  
ClamAV  Found Trojan.Spy-12790  :6!2h<I  
CPsecure  Found Troj.PSW.W32.OnLineGames.cur  8 )};P2Z  
Dr.Web  Found Trojan.PWS.Gamania.3990  )M``oG7sQ  
F-Prot Antivirus  Found nothing <pe%_~X^v  
F-Secure Anti-Virus  Found Trojan-PSW.Win32.OnLineGames.cur  2P^|6:TM?  
Fortinet  Found W32/Dropper.CUR!tr.pws  P{S1x3^}  
Kaspersky Anti-Virus  Found Trojan-PSW.Win32.OnLineGames.cur  O 9WMy'  
NOD32  Found a variant of Win32/PSW.OnLineGames.NFL  [ |/.dh%E  
Norman Virus Control  Found W32/OnLineGames.MNK  8xEOg#9xa  
Panda Antivirus  Found Trj/Lineage.FJU  b!uGobw%v  
Rising Antivirus  Found Trojan.PSW.Win32.OnlineGames.ypz  #i=L[{NUuZ  
Sophos Antivirus  Found Mal/Gampass-A, Mal/Dropper-P  `k$!%z5T\  
VirusBuster  Found Trojan.OnlineGames.Gen.43  }1i3N@3(  
VBA32  Found MalwareScope.Trojan-PSW.Game.12  !|*[r -p  
Eb
;pn >  
病毒样本位置： d; ij|'P  
http://avfbbs.80port.net/read-htm-tid-18373.html