1个

显示全部楼层 · 发表于 2008-2-11 18:22:32

hxxp://www.51yws.com/ms1.html
>http://www.51yws.com/aa.exe

显示全部楼层 · 发表于 2008-2-11 18:25:18

Starting the file scan:

Begin scan in 'E:\virus\aa.rar'
E:\virus\aa.rar
  [0] Archive type: RAR
  --> aa.exe
   [DETECTION] Contains suspicious code HEUR/Malware
   [WARNING] The file was ignored!

上报~

显示全部楼层 · 发表于 2008-2-11 18:25:33

金山miss

显示全部楼层 · 发表于 2008-2-11 18:27:13

费尔杀了，NIS2007 MISS

显示全部楼层 · 发表于 2008-2-11 18:27:56

显示全部楼层 · 发表于 2008-2-11 18:59:24

FS
结果: 发现1个恶意软件
Trojan-PSW.Win32.OnLineGames.qpe (病毒)
C:\Documents and Settings\GUNDAM\桌面\aa.rar\aa.exe

显示全部楼层 · 发表于 2008-2-11 19:06:20

detected: Trojan program Trojan-PSW.Win32.OnLineGames.qpe URL: http://bbs.kafan.cn/attachment.p ... xe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-2-11 19:27:20

rising20.30.60未认得！

显示全部楼层 · 发表于 2008-2-11 19:55:34

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://bbs.kafan.cn/attachment.php?aid=199094

The folowing error was encountered:

The requested object is INFECTED. The following viruses Trojan-PSW.Win32.OnLineGames.qpe were found

Please contact your service provider if you feel this is incorrect.

--------------------------------------------------------------------------------

Generated Mon Feb 11 19:54:41 2008 by Kaspersky Anti-Virus 7.0

显示全部楼层 · 发表于 2008-2-11 20:58:01

The file 'aa.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.qpe.13. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.02.118. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[病毒样本] 1个

本帖子中包含更多资源

本帖子中包含更多资源

5/0

回复 2楼 Graybird 的帖子