New malware.

显示全部楼层 · 发表于 2008-5-20 23:10:42

\武師練金鍾罩鐵布衫,用腦袋擋住衝擊鑽(組圖)
http://www.newlookyahoo.tw/rompw/qwys.rar

显示全部楼层 · 发表于 2008-5-20 23:19:29

不NEW

显示全部楼层 · 发表于 2008-5-20 23:24:31

kv 0

显示全部楼层 · 发表于 2008-5-20 23:31:02

C:\Users\Administrator\Desktop\qwys.rar » RAR » msn.bat - a variant of Win32/PSW.OnLineGames.NNS trojan

显示全部楼层 · 发表于 2008-5-20 23:35:55

红伞：HIDDENEXT/CRYPTED

显示全部楼层 · 发表于 2008-5-20 23:47:52

[发现安全风险： ] <W32/Agent.J.gen!Eldorado (not disinfectable, 普通)> C:\Documents and Settings\Administrator\桌面\qwys.rar->msn.bat
[包含被传染的对象] C:\Documents and Settings\Administrator\桌面\qwys.rar
[已隔离] C:\Documents and Settings\Administrator\桌面\qwys.rar->msn.bat

---------------------------------------------------------------------
扫描已结束: 2008-5-20, 23:47:18
用时: 0:00:07

扫描结果:

已扫描的文件:    1
已感染的对象:    1
已清除的对象:    0
已隔离的文件:    1
---------------------------------------------------------------------

显示全部楼层 · 发表于 2008-5-21 02:59:54

The file 'C:\TDDOWNLOAD\qwys.rar'
contained a virus or unwanted program 'DR/Delphi.Gen' [dropper]
Action(s) taken:
The file was deleted!

显示全部楼层 · 发表于 2008-5-21 06:12:24

Antivirus Version Last Update Result
AhnLab-V3 - - -
AntiVir - - DR/Delphi.Gen
Authentium - - W32/Agent.J.gen!Eldorado
Avast - - Win32:Neptunia-KN
AVG - - PSW.OnlineGames.APIH
BitDefender - - Dropped:Trojan.PWS.OnlineGames.QZR
CAT-QuickHeal - - Win32.Packed.NSAnti.r
ClamAV - - -
DrWeb - - Trojan.PWS.Gamania.origin
eSafe - - suspicious Trojan/Worm
eTrust-Vet - - -
Ewido - - -
F-Prot - - W32/Agent.J.gen!Eldorado
F-Secure - - W32/Suspicious_N.gen
Fortinet - - W32/LineDLL.B!tr.pws
GData - - Trojan-PSW.Win32.Magania.pqg
Ikarus - - Trojan-PWS.Win32.OnLineGames.hna
Kaspersky - - Trojan-PSW.Win32.Magania.pqg
McAfee - - New Malware.aq
Microsoft - - Trojan:Win32/Helpud.A
NOD32v2 - - a variant of Win32/PSW.OnLineGames.NNS
Norman - - W32/Suspicious_N.gen
Panda - - Suspicious file
Prevx1 - - -
Rising - - Packer.Win32.PePatch.c
Sophos - - Mal/LineDLL-B
Sunbelt - - -
Symantec - - Infostealer.Gampass
TheHacker - - W32/Behav-Heuristic-063
VBA32 - - MalwareScope.Trojan-PSW.Game.14
VirusBuster - - Packed/NSPack
Webwasher-Gateway - - Trojan.Dropper.Delphi.Gen
Additional information
MD5: 635497e0490fb36fe6cd6f6c078d6a10
SHA1: dc000a82e53cd1271bfc4bda1d0b37d67dbc4abf
SHA256: 6a5d255e4843b5a8918418b5dd3a108654416e43ec5ceffa0e23f0639ca1ffbe
SHA512: da9b85c5b7d6e025b279d5cb3090d8487ae2061509afb3b51832c33c8d49404f4cd825c44dbc6e06d4f4e26f985aa42f9de6925b39340621bf929160d15e623a

显示全部楼层 · 发表于 2008-5-21 08:09:32

detected: Trojan program Trojan-PSW.Win32.Magania.pqg URL: http://www.newlookyahoo.tw/rompw ... ck//PE_Patch.MaskPE

显示全部楼层 · 发表于 2008-5-21 10:34:36

微点砍掉

[病毒样本] New malware.

本帖子中包含更多资源

扫了7秒，不知道为什么，没显示脱壳

本帖子中包含更多资源

浏览过的版块