cmdbcs.exe/cmdbcs.dll病毒分析

病毒信息：

病毒名称：cmdbcs.exe

病毒大小：16,896 字节

加壳方式：未加（有其他版本为北斗异变壳）

编写语言：Microsoft Visual C++ 6.0

病毒预警：1级

病毒指纹：

SHA-160               : 0FAA55DD0F4B0E80C78876181F2E2C6CD4D3A437

MD5                   : ABA7DDA9CFC16174BAB09EC9CEDB3D87

RIPEMD-160            : B39895DFC76A4C04ED944772DCE7BEC519911425

CRC-32                : 6614D3FC

命名对照：

http://scanner.virus.org：

ArcaVir 1.0.4 Trojan.Psw.Onlinegames.Lc 2.67315 secs

avast! 3.0.0 Clean 0.0375321 secs

AVG Anti Virus 7.5.47 PSW.Generic3.SVG 2.64461 secs

BitDefender 7.1 Generic.Malware.SdldgPWS.3C917128 4.51119 secs

CAT QuickHeal 9.00 TrojanPSW.OnLineGames.lc 4.50552 secs

ClamAV 0.90/3273 Trojan.Spy-3309 0.0166101 secs

Dr. Web 4.33.0 Trojan.PWS.Wsgame 8.4816 secs

F-PROT 4.6.7 W32/Gamania.EX 0.714088 secs

F-Secure 1.02 Trojan-PSW.Win32.OnLineGames.lc [AVP] 0.100839 secs

H+BEDV AntiVir 2.1.10-40 NULL 5.74798 secs

McAfee Virusscan 5.10.0 PWS-LegMir.gen.b 1.67387 secs

NOD32 2.51.1 Win32/PSW.Agent.NCC trojan 2.412 secs

Norman Virus Control 5.70.01 W32/OnLineGames.CHQ 6.82475 secs

Panda 9.00.00 Trj/Legmir.ANS 1.54246 secs

Sophos Sweep 4.17.0 Troj/PSW-Gen 5.25109 secs

Trend Micro 8.310-1002 TSPY_ONLINEG.BCB 0.00994015 secs

VBA32 3.12.0 Trojan.PWS.Wsgame 2.42116 secs

VirusBuster 1.3.3 Trojan.DL.OnlineGames.Gen.3 2.03587 secs

http://www.virustotal.com：

Antivirus Version Update Result

AhnLab-V3 2007.5.16.1 05.21.2007 Win-Trojan/KorGameHack.16896.D

AntiVir 7.4.0.23 05.21.2007 TR/PSW.OnLineGames.LC.47

Authentium 4.93.8 05.18.2007 W32/Gamania.EX

Avast 4.7.997.0 05.21.2007 Win32:Trojan-gen. {Other}

AVG 7.5.0.467 05.20.2007 PSW.Generic3.SVG

BitDefender 7.2 05.21.2007 Generic.Malware.SdldgPWS.3C917128

CAT-QuickHeal 9.00 05.18.2007 TrojanPSW.OnLineGames.lc

ClamAV devel-20070416 05.21.2007 Trojan.Spy-3309

DrWeb 4.33 05.21.2007 Trojan.PWS.Wsgame

eSafe 7.0.15.0 05.20.2007 Win32.OnLineGames.lc

eTrust-Vet 30.7.3649 05.21.2007 Win32/Frethog!generic

Ewido 4.0 05.20.2007 Trojan.OnLineGames.lc

FileAdvisor 1 05.21.2007  no virus found

Fortinet 2.85.0.0 05.21.2007 SPY/LegMir

F-Prot 4.3.2.48 05.18.2007 W32/Gamania.EX

F-Secure 6.70.13030.0 05.21.2007 Trojan-PSW.Win32.OnLineGames.lc

Ikarus T3.1.1.7 05.21.2007 Trojan-PWS.Win32.OnLineGames.lc

Kaspersky 4.0.2.24 05.21.2007 Trojan-PSW.Win32.OnLineGames.lc

McAfee 5034 05.18.2007 PWS-LegMir.gen.b

Microsoft 1.2503 05.20.2007 PWS:Win32/Lmir!A7AB

NOD32v2 2279 05.21.2007 Win32/PSW.Agent.NCC

Norman 5.80.02 05.18.2007 W32/OnLineGames.CHQ

Panda 9.0.0.4 05.20.2007 Trj/Legmir.ANS

Prevx1 V2 05.21.2007 Covert.Sys.Exec

Sophos 4.17.0 05.20.2007 Troj/PSW-Gen

Sunbelt 2.2.907.0 05.17.2007 Trojan-PWS.Win32.Lmir.gen

Symantec 10 05.21.2007 Infostealer.Gampass

TheHacker 6.1.6.119 05.21.2007 Trojan/PSW.OnLineGames.lc

VBA32 3.12.0 05.20.2007 Trojan.PWS.Wsgame

VirusBuster 4.3.7:9 05.20.2007 Trojan.DL.OnlineGames.Gen.3

Webwasher-Gateway 6.0.1 05.21.2007 Trojan.PSW.OnLineGames.LC.47