f37b15,盗号的！

显示全部楼层 · 发表于 2007-9-4 12:14:04

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\18.rar'
C:\Documents and Settings\Administrator\My Documents\
  18.rar
[0] Archive type: RAR
--> 18.exe
      [DETECTION] Is the Trojan horse TR/Agent.ABOY.4
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-4 12:14:48

detected: Trojan program Trojan-PSW.Win32.OnLineGames.bkd URL: http://bbs.kafan.cn/attachment.php?aid=123158//18.exe//ASPack

显示全部楼层 · 发表于 2007-9-4 12:32:33

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.jti

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

显示全部楼层 · 发表于 2007-9-4 12:59:55

结果: 找到 1 恶意软件
Trojan-PSW.Win32.OnLineGames.bkd (病毒)
C:\Documents and Settings\ssy\桌面\18.rar\18.exe

显示全部楼层 · 发表于 2007-9-4 13:00:35

诺顿飘过

显示全部楼层 · 发表于 2007-9-4 13:05:53

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=123158 is infected with Trojan-PSW.Win32.OnLineGames.bkd virus

显示全部楼层 · 发表于 2007-9-4 13:06:05

Scan performed at: 2007-9-4 13:05:41
Scanning Log
NOD32 version 2501 (20070903) NT
Command line: C:\Documents and Settings\Don johnson\桌面\18.rar
Operating memory - is OK

Date: 4.9.2007 Time: 13:05:45
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\18.rar
C:\Documents and Settings\Don johnson\桌面\18.rar ?RAR ?18.exe - probably unknown NewHeur_PE virus [7]
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 13:05:45 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.

显示全部楼层 · 发表于 2007-9-4 13:22:05

解压红伞报了，扫描也会报。
Begin scan in 'C:\BOOT\18.rar'
C:\BOOT\18.rar
  [0] Archive type: RAR
  --> 18.exe
   [DETECTION] Is the Trojan horse TR/Agent.ABOY.4
   [INFO]    The file was moved to '470aebb0.qua'!

显示全部楼层 · 发表于 2007-9-4 13:32:01

AhnLab-V3 2007.9.1.0 2007.09.03 -
AntiVir 7.4.1.66 2007.09.03 TR/Agent.ABOY.4
Authentium 4.93.8 2007.09.04 -
Avast 4.7.1029.0 2007.09.03 -
AVG 7.5.0.485 2007.09.03 PSW.OnlineGames.HVX
BitDefender 7.2 2007.09.04 Dropped:Trojan.Agent.ABOY
CAT-QuickHeal 9.00 2007.09.03 -
ClamAV 0.91.2 2007.09.04 -
DrWeb 4.33 2007.09.03 DLOADER.Trojan
eSafe 7.0.15.0 2007.09.03 Win32.OnLineGames.bk
eTrust-Vet 31.1.5105 2007.09.03 -
Ewido 4.0 2007.09.03 -
FileAdvisor 1 2007.09.04 -
Fortinet 3.11.0.0 2007.09.04 W32/OnLineGames.BKD!tr.pws
F-Prot 4.3.2.48 2007.09.04 -
F-Secure 6.70.13030.0 2007.09.04 Trojan-PSW.Win32.OnLineGames.bkd
Ikarus T3.1.1.12 2007.09.04 Trojan.Agent.ABOY
Kaspersky 4.0.2.24 2007.09.04 Trojan-PSW.Win32.OnLineGames.bkd
McAfee 5111 2007.09.03 -
Microsoft 1.2803 2007.09.04 -
NOD32v2 2501 2007.09.03 probably unknown NewHeur_PE virus
Norman 5.80.02 2007.09.03 W32/Suspicious_U.gen
Panda 9.0.0.4 2007.09.04 Suspicious file
Prevx1 V2 2007.09.04 -
Rising 19.39.10.00 2007.09.04 Trojan.PSW.Win32.ZeroOnline.ak
Sophos 4.21.0 2007.09.04 Mal/Behav-119
Sunbelt 2.2.907.0 2007.08.31 -
Symantec 10 2007.09.04 -
TheHacker 6.1.9.177 2007.09.04 Trojan/PSW.OnLineGames.bkd
VBA32 3.12.2.3 2007.09.03 Trojan-PSW.Win32.OnLineGames.bje
VirusBuster 4.3.26:9 2007.09.03 -
Webwasher-Gateway 6.0.1 2007.09.04 Trojan.Agent.ABOY.4

[病毒样本] f37b15,盗号的！

本帖子中包含更多资源