[病毒样本] 包

显示全部楼层 · 发表于 2007-10-23 16:20:17

C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 20.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 23.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 24.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 02.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan
C:\Documents and Settings\Don johnson\桌面\桌面.rar » RAR » 08.exe - probably a variant of Win32/PSW.OnLineGames.NGU trojan

显示全部楼层 · 发表于 2007-10-23 17:17:32

Attack all

2007-10-23 17:17:09 1193131029 Administrator 3892 Sign of "Win32:Onlinegames-BGZ [Trj]" has been found in "D:\Downloads\桌面.rar\20.exe\[Upack]\[Embedded#7838]\[Upack]" file.
2007-10-23 17:17:11 1193131031 Administrator 3892 Sign of "Win32:Onlinegames-ATY [Trj]" has been found in "D:\Downloads\桌面.rar\23.exe\[Upack]\[Embedded#8090]\[Upack]" file.
2007-10-23 17:17:11 1193131031 Administrator 3892 Sign of "Win32:Onlinegames-BGZ [Trj]" has been found in "D:\Downloads\桌面.rar\24.exe\[Upack]\[Embedded#7940]\[Upack]" file.
2007-10-23 17:17:11 1193131031 Administrator 3892 Sign of "Win32:Agent-IYU [Trj]" has been found in "D:\Downloads\桌面.rar\02.exe\[Upack]\[Embedded#50e0]\[Upack]" file.
2007-10-23 17:17:11 1193131031 Administrator 3892 Sign of "Win32:Onlinegames-BEI [Trj]" has been found in "D:\Downloads\桌面.rar\08.exe\[Upack]\[Embedded#7090]\[Upack]" file.

显示全部楼层 · 发表于 2007-10-23 17:31:31

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面.rar'
C:\Documents and Settings\Administrator\桌面\桌面.rar
  [0] Archive type: RAR
  --> 20.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 23.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 24.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 02.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
  --> 08.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
   [INFO]    The file was deleted!

显示全部楼层 · 发表于 2007-10-23 17:55:34

又是微点直接试了一下。

显示全部楼层 · 发表于 2007-10-23 19:25:23

RX20.15.12一个未杀，沉默。

显示全部楼层 · 发表于 2007-10-23 22:09:07

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 659
Paranoia Database - 48035
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\000

C:\Documents and Settings\Uhthn\Desktop\000\20.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\000\23.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\000\24.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\000\02.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\000\08.exe - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted

5 Files scanned
5 Infected files found
0 Suspected files found
0 Files cured
5 Files deleted

显示全部楼层 · 发表于 2007-10-24 10:23:30

似乎是同一个病毒的若干变种

显示全部楼层 · 发表于 2007-10-24 11:10:22

咖啡报了5个!

[病毒样本] 包

本帖子中包含更多资源

都是同一个病毒

本帖子中包含更多资源

本帖子中包含更多资源