http://www.dj5201314dj.com/fm2.txt

显示全部楼层 · 发表于 2008-8-8 00:06:06

http://www.bbbirdy.com/image/poiuflkk.gif
gg.com
http://www.bbbirdy.com/image/rogedff.gif
jj.com
http://www.bbbirdy.com/image/rotfoujoo.jpg
oo.com
http://www.bbbirdy.com/flash/OO.jpg
vb.com

类似有发过，但增添或更新了部分下载地址！

显示全部楼层 · 发表于 2008-8-8 00:07:28

卡巴杀2漏2

已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sotl 文件　: D:\软件\其它\v\k\new\1\virus4.rar/rogedff.gif//BeRo//PE_Patch.MaskPE
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sotj 文件　: D:\软件\其它\v\k\new\1\virus4.rar/poiuflkk.gif

TO KL

显示全部楼层 · 发表于 2008-8-8 00:10:39

2008/8/8 0:10:05 Untreated: Suspicious.Packer C:\Users\Niya\Downloads\virus(3).rar/rotfoujoo.jpg/BeRo/PE_Patch.UPX/UPX/PE_Patch.MaskPE Postponed
2008/8/8 0:10:05 Detected: Suspicious.Packer C:\Users\Niya\Downloads\virus(3).rar/OO.jpg/BeRo/PE_Patch.UPX/UPX/PE_Patch.AvSpoof
2008/8/8 0:10:08 Deleted: Trojan-GameThief.Win32.OnLineGames.sotj C:\Users\Niya\Downloads\virus(3).rar/poiuflkk.gif
2008/8/8 0:10:09 Deleted: Trojan-GameThief.Win32.OnLineGames.sotl C:\Users\Niya\Downloads\virus(3).rar/rogedff.gif

显示全部楼层 · 发表于 2008-8-8 00:32:33

No Viruses or Spyware detected...

显示全部楼层 · 发表于 2008-8-8 01:48:05

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus'
C:\Documents and Settings\Administrator\桌面\virus\OO.jpg
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    A backup was created as '48c93594.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\poiuflkk.gif
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '490435b4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\rogedff.gif
[DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
[NOTE]    A backup was created as '490235b4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus\rotfoujoo.jpg
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '490f35b4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-8 01:51:05

趋势5个

显示全部楼层 · 发表于 2008-8-8 02:22:30

2008/8/8 2:21:29 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sotj G:\Temp\Virus\virus.rar/poiuflkk.gif
2008/8/8 2:21:29 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sotl G:\Temp\Virus\virus.rar/rogedff.gif//BeRo//PE_Patch.MaskPE
2008/8/8 2:21:29 已清除恶意程序 Suspicious.Packer G:\Temp\Virus\virus.rar
2008/8/8 2:21:29 已隔离恶意程序 Suspicious.Packer G:\Temp\Virus\virus.rar/rotfoujoo.jpg
2008/8/8 2:21:29 已隔离恶意程序 Suspicious.Packer G:\Temp\Virus\virus.rar/rotfoujoo.jpg//BeRo//PE_Patch.UPX//UPX//PE_Patch.MaskPE
2008/8/8 2:21:29 已隔离恶意程序 Suspicious.Packer G:\Temp\Virus\virus.rar/OO.jpg
2008/8/8 2:21:29 已隔离恶意程序 Suspicious.Packer G:\Temp\Virus\virus.rar/OO.jpg//BeRo//PE_Patch.UPX//UPX//PE_Patch.AvSpoof

显示全部楼层 · 发表于 2008-8-8 07:32:52

Hello,

OO.jpg - Backdoor.Win32.Hupigon.ddug,
rotfoujoo.jpg - Trojan-GameThief.Win32.OnLineGames.spdl

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Kirill Erakhtin
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

> Attachment: virus4.rar

显示全部楼层 · 发表于 2008-8-8 07:54:42

2008-8-8 7:51:02

//BeRo//PE_Patch.UPX//UPX//PE_Patch.AvSpoof 检测到: Suspicious.Packer

显示全部楼层 · 发表于 2008-8-8 08:32:41

C:\Users\Wesley\Downloads\virus.rar > RAR > rotfoujoo.jpg - Win32/PSW.OnLineGames.NNS 特洛伊木马的变种
C:\Users\Wesley\Downloads\virus.rar > RAR > rogedff.gif - Win32/TrojanDropper.Delf.AAH 特洛伊木马的变种
C:\Users\Wesley\Downloads\virus.rar > RAR > poiuflkk.gif - Win32/PSW.Lineage.ACN 特洛伊木马的变种
C:\Users\Wesley\Downloads\virus.rar > RAR > OO.jpg - Win32/Hupigon 特洛伊木马的变种

[病毒样本] http://www.dj5201314dj.com/fm2.txt

Norton 360 V2

ESET Smart Security