37e9f7，金山报！

显示全部楼层 · 发表于 2007-9-9 11:49:20

金山毒霸 2007.6.20.249 2007.9.8 2007-09-08 Trash.OnlineGamesT.aq.2615 0.909
瑞星 19.0 19.39.60.00 2007-09-08 - 1.859
江民杀毒 10.00.650 2007.09.08 2007-09-08 - 0.774

显示全部楼层 · 发表于 2007-9-9 11:51:32

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.ECC8917B72F64E7\桌面\GG\GG.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVGJMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVGJMON.DAT
是否删除木马程序及其衍生物?

显示全部楼层 · 发表于 2007-9-9 11:57:42

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\gg.rar'
C:\Documents and Settings\Administrator\My Documents\
  gg.rar
[0] Archive type: RAR
--> gg.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING] Infected files in archives cannot be repaired!
      [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-9-9 11:58:49

已删除：病毒 Heur.Trojan.Generic (修改) 文件　: F:\v\gg.rar/gg.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2007-9-9 12:01:39

玩下Norton Internet Security 2007

显示全部楼层 · 发表于 2007-9-9 12:03:38

HEUR/Malware

显示全部楼层 · 发表于 2007-9-9 16:18:16

Scan performed at: 2007-9-9 16:17:46
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: C:\Documents and Settings\Don johnson\桌面\gg.rar
Operating memory - is OK

Date: 9.9.2007 Time: 16:17:49
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\gg.rar
C:\Documents and Settings\Don johnson\桌面\gg.rar ?RAR ?gg.exe - probably a variant of Win32/PSW.OnLineGames.NEP trojan
Number of scanned files: 2
Number of threats found: 1
Number of files cleaned: 1
Time of completion: 16:17:50 Total scanning time: 1 sec (00:00:01)

显示全部楼层 · 发表于 2007-9-9 19:27:25

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3953
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\gg.exe

C:\Documents and Settings\uhthn\Desktop\gg.exe - Suspicious of Trojan-PSW.OnLineGames.2

1 Files scanned
0 Infected files found
1 Suspicious files found
0 Files cured
0 Files deleted

显示全部楼层 · 发表于 2007-9-9 19:39:43

瑞星19.39.62 Trojan.PSW.Win32.OnlineGames.ykv

显示全部楼层 · 发表于 2007-9-9 20:52:34

已删除：病毒 Heur.Trojan.Generic (修改) 文件　: F:\v\gg.rar/gg.exe//PE_Patch//UPack

[病毒样本] 37e9f7，金山报！

本帖子中包含更多资源

本帖子中包含更多资源