隔日收集包一小包

显示全部楼层 · 发表于 2008-9-4 19:22:45

SetupCasino群一组，其他还没传。等会慢慢传

显示全部楼层 · 发表于 2008-9-4 20:01:55

鄙视不回帖的

显示全部楼层 · 发表于 2008-9-4 20:03:18

McAfee 扫描结果出来了。。

setupcasino(1).exe    w32/pate.b
setupcasino(2).exe    casonline
setupcasino(3).exe    casonline
setupcasino(4).exe    generic.dx
setupcasino(5).exe    casonline
setupcasino(7).exe    no
setupcasino(8).exe    casonline
setupcasino(9).exe    casonline
setupcasino10.exe    no
setupcasino(014).exe casonline
setupcasino(017).exe casonline
setupcasino(10).exe    no
setupcasino(12).exe    no
setupcasino(13).exe    no
setupcasino(14).exe    no
setupcasino(15).exe    no
setupcasino().exe       casonline
setupcasino(101).exe casonline.dll
setupcasino(17).exe    casonline
setupcasino(18).exe    no
setupcasino(19).exe    no
setupcasino(510).exe no

显示全部楼层 · 发表于 2008-9-4 20:13:06

TO KL

显示全部楼层 · 发表于 2008-9-4 20:41:13

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Win32.Parite.b

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.60.32

显示全部楼层 · 发表于 2008-9-4 21:22:51

Starting the file scan:

Begin scan in 'C:\Users\TOSHIBA\Downloads\20080903'
C:\Users\TOSHIBA\Downloads\20080903\SetupCasino(014).exe
[DETECTION] Is the TR/Agent.327197 Trojan
[NOTE]    A backup was created as '4933e16c.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\20080903\SetupCasino(1).exe
[DETECTION] Contains code of the W32/Parite Windows virus
[NOTE]    A backup was created as '4b94f335.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\20080903\SetupCasino(3).exe
[DETECTION] Is the TR/Onlinegames.BFJR Trojan
[NOTE]    A backup was created as '4933e16d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\20080903\SetupCasino(4).exe
[DETECTION] Contains recognition pattern of the ADSPY/Casino.W.30 adware or spyware
[NOTE]    A backup was created as '4b94f336.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年9月4日  21:22
Used time: 00:03 Minute(s)

The scan has been done completely.

   1 Scanning directories
   22 Files were scanned
   4 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   4 files were deleted
   0 files were repaired
   4 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   18 Files not concerned
   0 Archives were scanned
   0 Warnings
   4 Notes

显示全部楼层 · 发表于 2008-9-4 21:30:58

25127514    SetupCasino().exe    183.53 KB    UNDER ANALYSIS
25008420    SetupCasino(017).exe    303.03 KB    CLEAN
25127515    SetupCasino(10).exe    210.03 KB    UNDER ANALYSIS
25010156    SetupCasino(101).exe    431.53 KB    CLEAN
25127516    SetupCasino(12).exe    530.53 KB    UNDER ANALYSIS
25127517    SetupCasino(13).exe    190.03 KB    UNDER ANALYSIS
25010157    SetupCasino(14).exe    479.03 KB    CLEAN
25094475    SetupCasino(15).exe    402.03 KB    FALSE POSITIVE
25127518    SetupCasino(17).exe    220.03 KB    UNDER ANALYSIS
25127519    SetupCasino(18).exe    212.91 KB    UNDER ANALYSIS
25108830    SetupCasino(19).exe    381.53 KB    FALSE POSITIVE
25075294    SetupCasino(2).exe    532.03 KB    CLEAN
3798664    SetupCasino(5).exe    346.03 KB    CLEAN
25080413    SetupCasino(510).exe    415.53 KB    CLEAN
3606375    SetupCasino(7).exe    313.53 KB    FALSE POSITIVE
25127520    SetupCasino(8).exe    215.53 KB    UNDER ANALYSIS
25127521    SetupCasino(9).exe    235.03 KB    UNDER ANALYSIS
25127522    SetupCasino10.exe    277.53 KB    UNDER ANALYSIS

显示全部楼层 · 发表于 2008-9-4 22:46:29

2008/9/4 22:45:17 已清除病毒 Virus.Win32.Parite.b G:\Temp\Virus\20080903\SetupCasino(1).exe

显示全部楼层 · 发表于 2008-9-4 22:55:11

趋势还不错，干掉四个。。。

PS：图标都挺好看的

显示全部楼层 · 发表于 2008-9-4 23:52:57

昨天我就研究过，全都是下载程序。。。应该是All Clean

[病毒样本] 隔日收集包一小包

浏览过的版块