两枚 IG.exe & IGM.exe （72183B9F & 30A9F978 ）

remind_me

同学机器（配小红伞C版）上发现的，系统启动不起来（删除文件后也启动不起来）

小心，加隐藏，系统，只读……绿色卡巴不报，McAfee 8.5i 不报

残缺的唯美

Result: 2 malware found
Trojan-PSW.Win32.WOW.uv (virus)
C:\Users\Administrator\Desktop\IG.rar\IG.exe
Trojan-PSW.Win32.Lmir.bna (virus)
C:\Users\Administrator\Desktop\IG.rar\IGM.e

woai_jolin

Scanning Log
Version of virus signature database: 2573 (20071005)
Date: 5.10.2007  Time: 18:59:15
Scanned disks, folders and files: G:\V\IG.rar
G:\V\IG.rar » RAR » IG.exe - Win32/PSW.WOW.WZ trojan
G:\V\IG.rar » RAR » IGM.exe - a variant of Win32/PSW.WOW.WU trojan

promised

盗wow的还真流行

jimmyleo

--> IG.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.UV
  --> IGM.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen

uhthn2002

C:\Documents and Settings\uhthn\Desktop\New Folder\IG.exe - Infected Win32.Generic.Malware.4b1
C:\Documents and Settings\uhthn\Desktop\New Folder\IGM.exe - Infected Win32.Generic.Malware.6

remind_me

File IG.rar received on 10.05.2007 12:58:11 (CET)
Current status: Loading ... queued waiting scanning finished NOT FOUND STOPPED

Result: 26/32 (81.25%)

Antivirus	Version	Last Update	Result
AhnLab-V3	2007.10.5.2	2007.10.05	-
AntiVir	7.6.0.20	2007.10.05	TR/PSW.Wow.UV
Authentium	4.93.8	2007.10.04	Possibly a new variant of W32/Blocker-based!Maximus
Avast	4.7.1051.0	2007.10.05	Win32:Wow-FVN
AVG	7.5.0.488	2007.10.04	PSW.OnlineGames.HTV
BitDefender	7.2	2007.10.05	Dropped:Trojan.Pws.WOW
CAT-QuickHeal	9.00	2007.10.05	TrojanPSW.WOW.uv
ClamAV	0.91.2	2007.10.05	Trojan.WoW-43
DrWeb	4.44.0.09170	2007.10.05	Trojan.PWS.Wow
eSafe	7.0.15.0	2007.10.04	Win32.WOW.uv
eTrust-Vet	31.2.5188	2007.10.05	-
Ewido	4.0	2007.10.05	Trojan.WOW.uv
FileAdvisor	1	2007.10.05	-
Fortinet	3.11.0.0	2007.10.05	W32/OnLineGames.OU!tr.pws
F-Prot	4.3.2.48	2007.10.04	W32/Blocker-based!Maximus
F-Secure	6.70.13030.0	2007.10.05	Trojan-PSW.Win32.WOW.uv
Ikarus	T3.1.1.12	2007.10.05	Trojan-PWS.Win32.WOW.vd
Kaspersky	7.0.0.125	2007.10.05	Trojan-PSW.Win32.WOW.uv
McAfee	5134	2007.10.04	-
Microsoft	1.2803	2007.10.04	PWS:Win32/Frethog.O
NOD32v2	2573	2007.10.05	Win32/PSW.WOW.WZ
Norman	5.80.02	2007.10.05	-
Panda	9.0.0.4	2007.10.05	Trj/Wow.QD
Prevx1	V2	2007.10.05	Malware.Gen
Rising	19.43.40.00	2007.10.05	Trojan.PSW.Win32.Wowar.vr
Sophos	4.22.0	2007.10.05	Mal/Generic-A
Sunbelt	2.2.907.0	2007.10.04	-
Symantec	10	2007.10.05	Infostealer.Gampass
TheHacker	6.2.6.076	2007.10.03	Trojan/PSW.WOW.uv
VBA32	3.12.2.4	2007.10.05	MalwareScope.Trojan-PSW.Game.16
VirusBuster	4.3.26:9	2007.10.04	Trojan.PWS.WOW.AAV
Webwasher-Gateway	6.0.1	2007.10.05	Trojan.PSW.Wow.UV

Additional information

File size: 50652 bytes

MD5: 0be023ea182da91bf156ebb0b1e7bda2

SHA1: 46c7a3b217b7e50b1a7053e3fdb9f691c5d09b3d

Prevx info: http://fileinfo.prevx.com/filein ... 0A92601BC004A1FB77B

[ 本帖最后由 remind_me 于 2007-10-5 19:09 编辑 ]

linsicky

微点先拦截，提示木马然后红伞删除

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Win32.Wowar.vr
病毒： Trojan.PSW.Win32.OnlineGames.zcd

MAC地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：19.43.40

king6808

已删除：木马程序 Trojan-PSW.Win32.WOW.uv        文件　: G:\10.5\IG.rar/IG.exe
已删除：木马程序 Trojan-PSW.Win32.Lmir.bna        文件　: G:\10.5\IG.rar/IGM.exe