3个[MD5: E550FE 6BA10A 116E22]

显示全部楼层 · 发表于 2007-12-2 17:13:10

C:\ABC\con32.dll
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\con32.dll
C:\ABC\gq.exe
>>> Virus 'Troj/PWS-Gen' found in file C:\ABC\gq.exe
C:\ABC\gq.exe\FILE:0000
>>> Virus 'Mal/GamePSW-C' found in file C:\ABC\gq.exe\FILE:0000
C:\ABC\setup.exe
>>> Virus 'Mal/EncPk-AZ' found in file C:\ABC\setup.exe

显示全部楼层 · 发表于 2007-12-2 17:17:38

G:\Users\Administrator\Desktop\3.zip » ZIP » gq.exe - a variant of Win32/PSW.Lineage.ACN trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\3.zip » ZIP » con32.dll - a variant of Win32/PSW.Lineage.DN trojan - was a part of the deleted object
G:\Users\Administrator\Desktop\3.zip - multiple threats - deleted - quarantined

显示全部楼层 · 发表于 2007-12-2 17:17:45

detected: Trojan program Trojan-PSW.Win32.OnLineGames.jhc File: C:\Documents and Settings\a\Desktop\3.zip/gq.exe
detected: virus Packed.Win32.NSAnti.r File: C:\Documents and Settings\a\Desktop\3.zip/setup.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.jhc File: C:\Documents and Settings\a\Desktop\3.zip/con32.dll

kav 7

显示全部楼层 · 发表于 2007-12-2 17:23:23

4个文件报了2个，赶紧上报.

显示全部楼层 · 发表于 2007-12-2 17:28:44

Begin scan in 'D:\3.zip'
D:\3.zip
  [0] Archive type: ZIP
  --> gq.exe
   [DETECTION] Contains suspicious code HEUR/Malware
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> con32.dll
   [DETECTION] Contains suspicious code HEUR/Malware
   [INFO]    The file was moved to '47cc7ae4.qua'!

显示全部楼层 · 发表于 2007-12-2 17:49:10

三个文件，两个EXE，一个DLL，

删了后剩setup.exe 运行后没动作

微点报2个

显示全部楼层 · 发表于 2007-12-2 18:10:52

KAV7.0报不让下了

显示全部楼层 · 发表于 2007-12-2 19:46:27

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.PSW.Gamania.wn
病毒： Trojan.PSW.Win32.Lineage.djn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.20.62

显示全部楼层 · 发表于 2007-12-2 19:53:31

kav7通杀

显示全部楼层 · 发表于 2007-12-2 19:56:42

过FS扫描

[病毒样本] 3个[MD5: E550FE 6BA10A 116E22]

本帖子中包含更多资源

ESS报了两个

4/2