來自MSN对话(加上生成)24楼有更新!(附生成)10月29日更新

328397663

Start of the scan: 2008年10月9日  18:36

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\games.rar'
C:\Documents and Settings\Administrator\桌面\games.rar
    [0] Archive type: RAR
    --> games.exe3
      [DETECTION] Contains HEUR/Malware suspicious code
      --> games.exe3
        [1] Archive type: RAR SFX (self extracting)
        --> game.exe
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Crypt.Delf.AA.43 Trojan
        --> lin.exe
          [DETECTION] Is the TR/Agent.572948 Trojan
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\lin.rar'
C:\Documents and Settings\Administrator\桌面\lin.rar
    [0] Archive type: RAR
    --> lin.exe3
      [DETECTION] Is the TR/PSW.OnLin.300081 Trojan
      --> lin.exe3
        [1] Archive type: RAR SFX (self extracting)
        --> game.exe
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Crypt.Delf.AA.43 Trojan
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\spaces.rar'
C:\Documents and Settings\Administrator\桌面\spaces.rar
    [0] Archive type: RAR
    --> spaces.sc3r
      [DETECTION] Contains recognition pattern of the DR/Agent.ghs dropper
      --> spaces.sc3r
        [1] Archive type: RAR SFX (self extracting)
        --> love.exe
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Crypt.Delf.AA.43 Trojan
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
Begin scan in 'C:\Documents and Settings\Administrator\桌面\space-cre.rar'
C:\Documents and Settings\Administrator\桌面\space-cre.rar
    [0] Archive type: RAR
      --> game.ex3e
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Crypt.Delf.AA.43 Trojan
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!

sam.to

不用卡巴?

啊弥陀佛

微点拦截

sam.to

b21223427b461985a93476ab72fbb5a6  lin.exe2
604db83161efc2e4fda9d988ab49487c  games.exe3
生成:
98a30e741f364ecf0085e2f6dd7818c4  lin.exe
0a58d11e349ecaf0342f5195d4defb6d  B41346EFA848.dll

TO  KL

[ 本帖最后由 kato9096 于 2008-10-12 00:00 编辑 ]

woai_jolin

Scan Log
Version of virus signature database: 3515 (20081011)
Date: 2008-10-12  Time: 0:07:49
Scanned disks, folders and files: G:\v\space-cre.rar
G:\v\space-cre.rar » RAR » lin.ex3e - is OK
G:\v\space-cre.rar » RAR » game.ex3e - Win32/PSW.OnLineGames.OCM trojan - was a part of the deleted object
Number of scanned objects: 2
Number of threats found: 1
Number of cleaned objects: 1
Time of completion: 0:07:51  Total scanning time: 2 sec (00:00:02)

Kitman

Filename        Result
lin.exe3         FALSE POSITIVE

The file 'lin.exe3' has been determined to be 'FALSE POSITIVE'. In particular this means that this file is not malicious but a false alarm. Detection is removed from our virus definition file (VDF) with the version: 7.0.5.138.
Filename        Result
games.exe3         UNDER ANALYSIS

The file 'games.exe3' has been determined to be 'UNDER ANALYSIS'.
Filename        Result
lin.exe2         UNDER ANALYSIS

The file 'lin.exe2' has been determined to be 'UNDER ANALYSIS'.
Filename        Result
B41346EFA848.dll         MALWARE

The file 'B41346EFA848.dll' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.Delf.AA.43. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.06.95. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: TR/Spy.Gen.

sam.to

附生成


TO KL

Hello,

game.exe3, game.exe5, games.exe5, lin.exe3, spaces.s3cr, game.exe - Trojan-GameThief.Win32.OnLineGames.tqdg

These files are already detected. Please update your antivirus bases.

lin.ex5e, lin.exe

No malicious code were found in these files.

Please quote all when answering.

[ 本帖最后由 kato9096 于 2008-10-25 23:50 编辑 ]

fzz8848

Begin scan in 'E:\Download\Virus\lin\lin'
E:\Download\Virus\lin\lin\game.exe3
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
E:\Download\Virus\lin\lin\game.exe5
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
E:\Download\Virus\lin\lin\games.exe5
    [0] Archive type: RAR SFX (self extracting)
      --> game.exe
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Spy.Gen Trojan
    [DETECTION] Contains HEUR/Malware suspicious code
    --> lin.exe
      [DETECTION] Is the TR/Agent.572948 Trojan
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '496fe083.qua'!
E:\Download\Virus\lin\lin\lin.exe3
    [DETECTION] Contains HEUR/Malware suspicious code
E:\Download\Virus\lin\lin\lin.exe3
    [0] Archive type: RAR SFX (self extracting)
      --> game.exe
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '4970e08b.qua'!
E:\Download\Virus\lin\lin\spaces.s3cr
    [0] Archive type: RAR SFX (self extracting)
      --> love.exe
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Crypt.Delf.AA.43 Trojan
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '4963e092.qua'!


End of the scan: 2008年10月25日星期六  17:00
Used time: 00:09 Minute(s)

The scan has been done completely.

      1 Scanning directories
     18 Files were scanned
      2 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      3 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      5 Archives were scanned
      0 Warnings
      5 Notes

AVG   安全套装

game.exe3  和 game.exe5 重复
lin.ex5e    少东西跑不起来

其他的都被FS系统控制报可疑，自动阻止运行了