帮人装机抓到的3

显示全部楼层 · 发表于 2008-9-2 10:18:06

G DATA AntiVirus检测
版本 18.7.8155.555
病毒特征库日期 2008/9/2
开始时间： 2008/9/2 10:11
引擎：引擎A (AVK 19.268), 引擎B (AVB 19.12)
启发式：开启
档案文件：开启
系统区域：开启
检测系统区域...
检测以下目录和文件：
C:\Documents and Settings\Administrator\桌面\4.rar
对象： 30974.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\4.rar
状态：发现病毒
病毒： Trojan-GameThief.Win32.WOW.bwd (引擎A)
对象： 35164.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\4.rar
状态：发现病毒
病毒： Trojan-GameThief.Win32.WOW.bwd (引擎A)
对象： abyoqr.exe
在压缩档案中： C:\Documents and Settings\Administrator\桌面\4.rar
状态：发现病毒
病毒： Trojan-GameThief.Win32.OnLineGames.tapc (引擎A)
对象： 4.rar
路径: C:\Documents and Settings\Administrator\桌面
状态：发现病毒
病毒： Trojan-GameThief.Win32.WOW.bwd (2x), Trojan-GameThief.Win32.OnLineGames.tapc (引擎A)
扫描完成于： 2008/9/2 10:11
1个文件已检测
1个受感染文件已发现
0个可疑文件被发现

显示全部楼层 · 发表于 2008-9-2 10:20:52

Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
349060&k=26f8ba73ab71c9f21e3b1589724ea16
1&t=1220322025

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-GameThief.Win32.WOW.bwd

如有疑问，请联系您的技术支持
创建日期：
Tue Sep 02 10:15:19 2008
Kaspersky Lab

显示全部楼层 · 发表于 2008-9-2 10:44:28

微点拦截

显示全部楼层 · 发表于 2008-9-2 10:51:26

3个

显示全部楼层 · 发表于 2008-9-2 18:25:22

已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.WOW.bwd 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/30974.exe//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.WOW.bwd 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/35164.exe//PE_Patch.PECompact//PecBundle//PECompact
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.tapc 檔案: C:\Documents and Settings\kato9096\桌面\4.rar/abyoqr.exe

沒有不报~~~

显示全部楼层 · 发表于 2008-9-2 18:45:56

金山 3

显示全部楼层 · 发表于 2008-9-2 20:07:45

McAfee 报了1个。。
30974.exe          no
35164.exe          no
abyoqr.exe       pws-onlinegames.ce

显示全部楼层 · 发表于 2008-9-3 10:19:44

VBA32报。。。
C:\Documents and Settings\Administrator\桌面\4.rar
C:\Documents and Settings\Administrator\桌面\4.rar:<RAR>\abyoqr.exe

显示全部楼层 · 发表于 2008-9-3 17:59:10

Start of the scan: 2008年9月3日  17:58

Starting the file scan:

Begin scan in 'C:\Documents and Settings\acer\桌面\样本'
C:\Documents and Settings\acer\桌面\样本\4.rar
[0] Archive type: RAR
   --> 30974.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
   --> 35164.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
--> abyoqr.exe
   [DETECTION] Is the TR/PSW.Lmir.UMU Trojan
[NOTE]    The file was moved to '49305ffd.qua'!

End of the scan: 2008年9月3日  17:58
Used time: 00:10 Minute(s)

The scan has been done completely.

   1 Scanning directories
   4 Files were scanned
   3 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-3 18:04:01

Scan Log
Version of virus signature database: 3410 (20080903)
Date: 2008-9-3 Time: 18:05:02
Scanned disks, folders and files: G:\v\4.rar
G:\v\4.rar » RAR » 30974.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\4.rar » RAR » 35164.exe - probably a variant of Win32/Genetik trojan - was a part of the deleted object
G:\v\4.rar » RAR » abyoqr.exe - a variant of Win32/PSW.Agent.NIA trojan - was a part of the deleted object
Number of scanned objects: 3
Number of threats found: 3
Number of cleaned objects: 3
Time of completion: 18:05:02 Total scanning time: 0 sec (00:00:00)

[病毒样本] 帮人装机抓到的3