KAVO变种

醉一生爱妍

解压密码：virus

费尔杀，无法在沙盘运行的

kiki

小红伞**了

说也不说一解压 就**

mofunzone

我记得这个样本nod32常年miss
一会看看
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\nncu6kk.com'
C:\Documents and Settings\Administrator\My Documents\
  nncu6kk.com
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [WARNING]   The file was ignored!

su-tt

Virus or unwanted program 'TR/Crypt.NSPM.Gen [TR/Crypt.NSPM.Gen]'
detected in file 'C:\Documents and Settings\Administrator\桌面\nncu6kk.com.
Action performed: Delete file

被监控干掉了

mofunzone

居然查到了。。
不过应该很久了，居然说已经被扫描过了
File:  nncu6kk.com  
Status:  INFECTED/MALWARE (Note: this file has been scanned before. Therefore, this file's scan results will not be stored in the database)  
MD5:  ff1c460d98b620c3abd5387f3deed7ad  
Packers detected:  -
Bit9 reports:  File not found  

Scanner results  
Scan taken on 31 Jan 2008 06:28:25 (GMT)  
A-Squared  Found nothing
AntiVir  Found TR/Crypt.NSPM.Gen  
ArcaVir  Found Trojan.Psw.Onlinegames.Prs  
Avast  Found nothing
AVG Antivirus  Found Worm/AutoRun.Y  
BitDefender  Found Packer.Malware.NSAnti.K  
ClamAV  Found nothing
CPsecure  Found nothing
Dr.Web  Found Trojan.MulDrop.6474  
F-Prot Antivirus  Found nothing
F-Secure Anti-Virus  Found Trojan-PSW.Win32.OnLineGames.prs  
Fortinet  Found nothing
Ikarus  Found Trojan-PWS.Win32.OnLineGames.prs  
Kaspersky Anti-Virus  Found Trojan-PSW.Win32.OnLineGames.prs  
NOD32  Found Win32/PSW.OnLineGames.NLE  
Norman Virus Control  Found W32/OnLineGames.AJJW  
Panda Antivirus  Found W32/Lineage.HHE.worm  
Rising Antivirus  Found nothing
Sophos Antivirus  Found Mal/EncPk-CE  
VirusBuster  Found Trojan.Lineage.Gen!Pac.3  
VBA32  Found nothing

xxwpk007

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NNCU6KK.COM
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\8OC.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\0X3UBCU.SYS
是否删除木马程序及其衍生物?

s7964926

原帖由 garyyan456 于 2008-1-31 14:05 发表
解压密码：virus

费尔杀，无法在沙盘运行的

这个是什么病毒。。

样本区不是灌水区，下次请注意

[ 本帖最后由 lanvin 于 2008-1-31 15:05 编辑 ]

sam.to

又加密码

qigang

rising20.29.30未报！

冷冷

皇帝 小海螺 也是光头