倆启发AE724A

taitan001

md5  
劳驾XX··
F:\New Folder\moon.exe : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)
F:\New Folder\147.exe : is suspected of Trojan-PSW.Game.63 (paranoid heuristics)

[ 本帖最后由 promised 于 2007-9-15 09:16 编辑 ]

mofunzone

easy

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\New'
C:\Documents and Settings\Administrator\My Documents\
  New
    [0] Archive type: RAR
    --> New Folder\moon[1].exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> New Folder\147.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

1688388728

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=127690 is infected with Heur.Trojan.Generic virus

scottxzt

运行了.AUTORUN病毒.

[ 本帖最后由 scottxzt 于 2007-9-15 00:37 编辑 ]

The EQs

Scan performed at: 2007-9-14 23:37:51
Scanning Log
NOD32 version 2530 (20070914) NT
Command line: C:\Documents and Settings\Don johnson\桌面\New_Folder.rar
Operating memory - is OK

Date: 14.9.2007  Time: 23:37:55
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\New_Folder.rar
C:\Documents and Settings\Don johnson\桌面\New_Folder.rar ?RAR ?New Folder\moon[1].exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\Don johnson\桌面\New_Folder.rar ?RAR ?New Folder\147.exe - probably a variant of Win32/Genetik trojan
Number of scanned files: 3
Number of threats found: 2
Number of files cleaned: 1
Time of completion: 23:37:55 Total scanning time: 0 sec (00:00:00)

曲中求

传说中NOD的火药质料：Win32/Genetik trojan

uhthn2002

啟發
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4918
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\moon[1].exe - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\147.exe - Suspicious of Trojan-PSW.Game.8

2 Files scanned
0 Infected files found
2 Suspicious files found
0 Files cured
0 Files deleted

欠妳緈諨

不需要启发，已知病毒

wangjay1980

Hello.
Virus.Win32.AutoRun.ml
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Yury Nesmachny
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: New Folder.rar

timhas266

Kaspersky Internet Security 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=127690 is infected with Virus.Win32.AutoRun.ml virus