老顾客S168

显示全部楼层 · 发表于 2007-8-14 23:17:22

S168.exe - Win32/PSW.OnLineGames.NBR 木马的变种

显示全部楼层 · 发表于 2007-8-15 00:03:22

咖啡木马，PWS-OnlineGames.a

显示全部楼层 · 发表于 2007-8-15 00:14:12

江民哑

显示全部楼层 · 发表于 2007-8-15 01:03:22

C:\Documents and Settings\uhthn\Desktop\S168.rar:<RAR>\S168.exe : is suspected of Trojan-PSW.Game.18 (paranoid heuristics)

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 1    - total    : 1
- scanned       : 1    -  scanned : 1    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 0
- deleted       : 0    -  suspicious : 1    - suspicious  : 1

显示全部楼层 · 发表于 2007-8-15 03:17:10

看我在樣本的回覆~~~~pass

显示全部楼层 · 发表于 2007-8-15 10:41:17

C:\Documents and Settings\huaxun\桌面\S168.rar
  [0] Archive type: RAR
  --> S168.exe
   [DETECTION] Is the Trojan horse TR/Autorun.BK
   [INFO]    The file was moved to '46f867f1.qua'!

显示全部楼层 · 发表于 2007-8-15 10:43:02

2007-8-15 10:42:21 Deleted WHUT-D9193C067E\gho WinRAR.exe C:\Documents and Settings\gho\桌面\S168.exe PWS-OnlineGames.a (Trojan)

显示全部楼层 · 发表于 2007-8-15 10:51:45

过不也卡7

显示全部楼层 · 发表于 2007-8-15 13:38:38

Virus: Win32:Autorun-U

Virus found while downloading Web content.

Address: bbs.kafan.cn

显示全部楼层 · 发表于 2007-8-15 22:27:12

BitDefender

This web page has been blocked by BitDefender Antivirus Real-time Protection!

The blocked web page included objects that were either infected or likely to be infected with a virus. Your system has NOT been infected.
http://www.bitdefender.com/vfind/?q=Win32.Worm.Autoruner.Q

[病毒样本] 老顾客S168

本帖子中包含更多资源