1个外挂1个毒

显示全部楼层 · 发表于 2008-9-30 17:46:25

今天下了好多，不知道这个是不是误报，诺顿报了

显示全部楼层 · 发表于 2008-9-30 17:53:55

经过分析该文件存在onlinegames恶意代码

显示全部楼层 · 发表于 2008-9-30 19:12:10

Begin scan in 'C:\Users\TOSHIBA\Downloads\zdckjl_20'
C:\Users\TOSHIBA\Downloads\zdckjl_20\zdckjl_20.exe
[0] Archive type: RAR SFX (self extracting)
   --> MSWINSCX.exe
      [1] Archive type: OVL
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/Onlinegames.tdeh Trojan
[NOTE]    A backup was created as '494509ac.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年9月30日  19:11
Used time: 00:06 Minute(s)

The scan has been done completely.

   1 Scanning directories
   46 Files were scanned
   2 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   1 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   44 Files not concerned
   2 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2008-9-30 19:36:26

风险程序 2008-09-30 19:36:12 C:\Documents and Settings\Administrator\桌面\zdckjl_20\zdckjl_20.exe\BindFile\自动采矿灵v2_0\紫菀花_自由幻想自动采矿灵v2_0.exe Win32.RiskWare.PEBundle.49152 跳过，未处理
病毒 2008-09-30 19:36:10 C:\Documents and Settings\Administrator\桌面\zdckjl_20\zdckjl_20.exe\BindFile\MSWINSCX.exe Win32.PSWTroj.OnLineGames.73728 跳过，未处理

显示全部楼层 · 发表于 2008-9-30 20:04:22

McAfee New Malware.aj

显示全部楼层 · 发表于 2008-9-30 22:07:49

驱逐舰杀

显示全部楼层 · 发表于 2008-10-1 07:28:04

2008-10-1 7:28:29 检测到威胁: Trojan-GameThief.Win32.OnLineGames.tddu C:\Documents and Settings\Administrator\桌面\zdckjl_20[1].part1\zdckjl_20.exe/MSWINSCX.exe/PE_Patch/UPack
2008-10-1 7:28:32 已删除: Trojan-GameThief.Win32.OnLineGames.tddu C:\Documents and Settings\Administrator\桌面\zdckjl_20[1].part1\zdckjl_20.exe

显示全部楼层 · 发表于 2008-10-2 11:24:16

反病毒引擎版本最后更新扫描结果
AhnLab-V3 2008.10.2.0 2008.10.01 -
AntiVir 7.8.1.34 2008.10.01 -
Authentium 5.1.0.4 2008.10.02 -
Avast 4.8.1248.0 2008.10.01 Win32:Hupigon-AOH
AVG 8.0.0.161 2008.10.01 -
BitDefender 7.2 2008.10.02 -
CAT-QuickHeal 9.50 2008.10.01 -
ClamAV 0.93.1 2008.10.02 -
DrWeb 4.44.0.09170 2008.10.02 -
eSafe 7.0.17.0 2008.10.01 -
eTrust-Vet 31.6.6121 2008.10.02 -
Ewido 4.0 2008.10.01 -
F-Prot 4.4.4.56 2008.09.30 File is damaged
F-Secure 8.0.14332.0 2008.10.02 Hupigon.gen169
Fortinet 3.113.0.0 2008.10.02 W32/Hupigon.NQR!tr.bdr
GData 19 2008.10.02 Win32:Hupigon-AOH
Ikarus T3.1.1.34.0 2008.10.02 -
K7AntiVirus 7.10.479 2008.10.01 -
Kaspersky 7.0.0.125 2008.10.02 -
McAfee 5396 2008.10.02 -
Microsoft 1.4005 2008.10.02 -
NOD32 3487 2008.10.02 -
Norman 5.80.02 2008.10.01 Hupigon.gen169
Panda 9.0.0.4 2008.10.02 -
PCTools 4.4.2.0 2008.10.01 -
Prevx1 V2 2008.10.02 -
Rising 20.63.62.00 2008.09.28 -
SecureWeb-Gateway 6.7.6 2008.10.02 -
Sophos 4.34.0 2008.10.01 -
Sunbelt 3.1.1668.1 2008.09.24 <Corrupted Archive>
Symantec 10 2008.10.02 -
TheHacker 6.3.0.9.098 2008.10.01 -
TrendMicro 8.700.0.1004 2008.10.01 -
VBA32 3.12.8.6 2008.09.30 -
ViRobot 2008.10.1.1401 2008.10.01 -
VirusBuster 4.5.11.0 2008.10.01 -

显示全部楼层 · 发表于 2008-10-2 12:46:19

检测选中目录和文件:
C:\Documents and Settings\Administrator\桌面\zdckjl_20[1]\

项目: (RAR Sfx o)=>MSWINSCX.exe
检查档案: C:\Documents and Settings\Administrator\桌面\zdckjl_20[1]\zdckjl_20.exe
状态: 发现病毒
病毒: Trojan.Generic.698611 (Engine A)
项目: zdckjl_20.exe
路径: C:\Documents and Settings\Administrator\桌面\zdckjl_20[1]
状态: 清除病毒
病毒: Trojan.Generic.698611 (Engine A)

显示全部楼层 · 发表于 2008-10-2 15:17:13

AVIRA NOD3.0 微点，解压，微点报木马

[病毒样本] 1个外挂1个毒

本帖子中包含更多资源

本帖子中包含更多资源

回复 1楼 chenyilong58 的帖子

浏览过的版块