番茄每日精选 20080624

ronliang

f-secure的启发那么差居然都能在这里独报。。。

欠妳緈諨

怀疑是误报

dolphin

木马名称：Trojan/Win32.Rodog.lal
路径：E:\20080624\20080624\XX_630.exe
查杀时间 ：2008-06-24 10:48
木马名称：Trojan/Win32.HZJ.aaa
路径：E:\20080624\20080624\XX_600.exe
查杀时间 ：2008-06-24 10:48
木马名称：Trojan/Win32.Rodog.lya
路径：E:\20080624\20080624\XX_593.exE
查杀时间 ：2008-06-24 10:48
木马名称：Trojan-PSW/Win32.GameOL.GEN
路径：E:\20080624\20080624\XX_592.exe
查杀时间 ：2008-06-24 10:48
木马名称：Trojan/Win32.Rodog.lxa
路径：E:\20080624\20080624\XX_589.exe
查杀时间 ：2008-06-24 10:48
木马名称：Trojan/Win32.Agent.dex[Downloader]
路径：E:\20080624\20080624\XX_588.exe
查杀时间 ：2008-06-24 10:48

残缺的唯美

D:\Users\ekincheng\Desktop\20080624.rar
  [0] Archive type: RAR
    --> 20080624\XX_576.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hhq
  --> 20080624\XX_585.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YZD
  --> 20080624\XX_588.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.GOC.1
    --> 20080624\XX_592.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.zdt
    --> 20080624\XX_593.exE
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.zdl
  --> 20080624\XX_600.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.RPD.2
  --> 20080624\XX_609.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.eko.427 Backdoor server programs
  --> 20080624\XX_630.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 20080624\XX_636.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      A backup was created as '489068f4.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!

tgzw1680

费尔10个

fzys2

AVG 7.5     
10个

[ 本帖最后由 fzys2 于 2008-6-24 13:47 编辑 ]

wangjay1980

XX-578

2008-6-24 JAY12:01:42 XX_578.exe  Process exit C:\Documents and Settings\Owner\桌面\XX_578.exe
2008-6-24 JAY12:01:42 XX_578.exe Denied: KLPrivileges/KLSelfStart Autorun  
2008-6-24 JAY12:01:42 XX_578.exe  Process start C:\Documents and Settings\Owner\桌面\XX_578.exe
2008-6-24 JAY12:01:42 XX_578.exe  Placed in group Untrusted
2008-6-24 JAY12:01:25 Windows Explorer  Rename C:\Documents and Settings\Owner\桌面\XX_578.exe
2008-6-24 JAY12:01:25 Windows Explorer  Create C:\Documents and Settings\Owner\桌面\XX_578.exe

河洛星光

10个

ssy275

10

woai_jolin

2008-6-24 15:54:57        Real-time file system protection        file        G:\v\20080624\XX_630.exe        a variant of Win32/Agent.NEJ trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:56        Real-time file system protection        file        G:\v\20080624\XX_609.exe        probably a variant of Win32/Genetik trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:54        Real-time file system protection        file        G:\v\20080624\XX_600.exe        a variant of Win32/PSW.OnLineGames.PBQ trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:53        Real-time file system protection        file        G:\v\20080624\XX_593.exE        probably a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:51        Real-time file system protection        file        G:\v\20080624\XX_592.exe        Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:50        Real-time file system protection        file        G:\v\20080624\XX_589.exe        a variant of Win32/PSW.OnLineGames.NFL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:49        Real-time file system protection        file        G:\v\20080624\XX_588.exe        Win32/Drowor.NAE virus        deleted - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:47        Real-time file system protection        file        G:\v\20080624\XX_585.exe        probably a variant of Win32/Poison trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-6-24 15:54:45        Real-time file system protection        file        G:\v\20080624\XX_576.exe        a variant of Win32/PSW.Delf.VL trojan        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.