可疑文件

zhangshaowen

可疑文件

sbbdms

卡巴杀1漏1
TO KL

反病毒引擎	版本	最后更新	扫描结果
AhnLab-V3	2008.7.10.0	2008.07.09	-
AntiVir	7.8.0.64	2008.07.09	TR/Dldr.Delphi.Gen
Authentium	5.1.0.4	2008.07.08	W32/OnlineGames.AJ.gen!Eldorado
Avast	4.8.1195.0	2008.07.09	Win32:Trojan-gen {Other}
AVG	7.5.0.516	2008.07.09	Dropper.Generic.ZMA
BitDefender	7.2	2008.07.10	-
CAT-QuickHeal	9.50	2008.07.09	-
ClamAV	0.93.1	2008.07.10	-
DrWeb	4.44.0.09170	2008.07.09	Trojan.DownLoader.origin
eSafe	7.0.17.0	2008.07.09	-
eTrust-Vet	31.6.5942	2008.07.10	-
Ewido	4.0	2008.07.09	-
F-Prot	4.4.4.56	2008.07.08	W32/OnlineGames.AJ.gen!Eldorado
F-Secure	7.60.13501.0	2008.07.08	W32/Malware
Fortinet	3.14.0.0	2008.07.10	-
GData	2.0.7306.1023	2008.07.09	-
Ikarus	T3.1.1.26.0	2008.07.10	Trojan.Win32.Porsmi.A
Kaspersky	7.0.0.125	2008.07.10	-
McAfee	5335	2008.07.09	-
Microsoft	1.3704	2008.07.10	Trojan:Win32/Porsmi.gen!A
NOD32v2	3256	2008.07.10	Win32/TrojanDropper.Agent.NIY
Norman	5.80.02	2008.07.09	W32/Malware
Panda	9.0.0.4	2008.07.09	Suspicious file
Prevx1	V2	2008.07.10	-
Rising	20.52.22.00	2008.07.09	-
Sophos	4.31.0	2008.07.10	Mal/Delf-M
Sunbelt	3.1.1509.1	2008.07.04	-
Symantec	10	2008.07.10	-
TheHacker	6.2.96.374	2008.07.07	-
TrendMicro	8.700.0.1004	2008.07.09	-
VBA32	3.12.6.8	2008.07.08	Trojan.DownLoader.origin
VirusBuster	4.5.11.0	2008.07.09	Trojan.OnlineGames.Gen.87
Webwasher-Gateway	6.6.2	2008.07.09	Trojan.Dldr.Delphi.Gen

[ 本帖最后由 sbbdms 于 2008-7-10 11:03 编辑 ]

Kitman

Begin scan in 'C:\Documents and Settings\Administrator\桌面\system32'
C:\Documents and Settings\Administrator\桌面\system32\tcpip.exe
  [0] Archive type: RSRC
  --> Object
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      A backup was created as '48e57c5d.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\system32\wwinsystem.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
      [NOTE]      A backup was created as '48de7c71.qua'  ( QUARANTINE )
      [NOTE]      The file was deleted!

栤氺緄峆粅

C:\Documents and Settings\天壤之冰水\桌面\system32.rar > RAR > tcpip.exe - Win32/TrojanDropper.Agent.NIY 特洛伊木马
C:\Documents and Settings\天壤之冰水\桌面\system32.rar > RAR > wwinsystem.dll - Win32/TrojanDownloader.Delf.OCZ 特洛伊木马
ESS全杀~

电影结束了

对象: wwinsystem.dll
在压缩档案里: F:\system32.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.saoe (KAV 引擎)

[ 本帖最后由 电影结束了 于 2008-7-10 11:05 编辑 ]

醉一生爱妍

PDM 高危.. 39- -..

生成物砍..

kkgh

费尔全杀

BING126

McAfee  MISS

sbbdms

Hello.
New malicious software was found in the attached file. Trojan-GameThief.Win32.OnLineGames.sdlh
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: system32.rar