再来一个[MD5: 8E1BE4]

显示全部楼层 · 发表于 2007-8-30 15:39:47

[MD5: 8E1BE4]

显示全部楼层 · 发表于 2007-8-30 15:41:47

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=121111 is infected with Heur.Invader virus

显示全部楼层 · 发表于 2007-8-30 15:42:38

C:\Documents and Settings\uhthn\Desktop\virus\MsIMMs32.exe : infected MalwareScope.Trojan-PSW.Game.3

Directories    : 0    Files in archives:    Files on disks:
Archives:                - total    : 0    - total    : 1
- scanned       : 0    -  scanned : 0    - scanned    : 1
- contain viruses : 0    -  infected : 0    - infected : 1
- deleted       : 0    -  suspicious : 0    - suspicious  : 0

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\MsIMMs32.exe - Suspicious of Trojan-PSW.Game.1

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-8-30 15:43:03

显示全部楼层 · 发表于 2007-8-30 15:46:08

金山毒霸 2007.6.20.249 2007.8.30 2007-08-30 Win32.Troj.OnlineGamesT

显示全部楼层 · 发表于 2007-8-30 15:48:52

Starting the file scan:

Begin scan in 'F:\病毒样本\样本1.rar'
F:\病毒样本\样本1.rar
  [0] Archive type: RAR
  --> MsIMMs32.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-8-30 15:50:19

C:\Documents and Settings\Shaw\桌面\样本1.rar >>RAR >>MsIMMs32.exe - Win32/PSW.OnLineGames.YA 木马的变种

NOD的

卡巴6没动静

显示全部楼层 · 发表于 2007-8-30 15:52:13

NOD32报

费尔过

显示全部楼层 · 发表于 2007-8-30 15:52:26

F:\virus\��1.rar - a variant of Win32/PSW.OnLineGames.YA trojan - deleted - quarantined
F:\virus\��1.rar » RAR » MsIMMs32.exe - a variant of Win32/PSW.OnLineGames.YA trojan

显示全部楼层 · 发表于 2007-8-30 15:58:08

蜘蛛4.44最近表现完美，砍掉．

[ 本帖最后由 spiderman_xu 于 2007-8-30 16:38 编辑 ]

[病毒样本] 再来一个[MD5: 8E1BE4]

本帖子中包含更多资源

本帖子中包含更多资源