8x

Palkia

sam.to

to kl

上报4

[ 本帖最后由 sam.to 于 2009-1-8 22:34 编辑 ]

Joker

6
--> 08BBBC5D47804CEEF9133A042BA85F53
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
      --> 1F09B8A755F6DBE746D3B81CE097DA7B
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 858283C59E495E7E141AF89B8F4E87F5
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    --> 8A35A40190433A1FF9A31BCE967F8A00
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
      --> C2EB7A72CA187D06B87830F8085A92B0
          [DETECTION] Is the TR/Downloader.Gen Trojan
    --> C36D291CA9366F1AF967FECA01B5000B
      [DETECTION] Is the TR/Spy.Gen Trojan
    [WARNING]   The file was ignored!

sam.to

Hello.

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.

08红伞威点

原帖由 Joker 于 2009-1-8 22:33 发表
6
--> 08BBBC5D47804CEEF9133A042BA85F53
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
      --> 1F09B8A755F6DBE746D3B81CE097DA7B
        [1] Archive type: RSRC
        --> Object
           ...

File ID	Filename	Size (Byte)	Result
25228088	文件x2.rar	20.67 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25227562	2BF5B732325C545B025E...90	5.5 KB	CLEAN
25222303	36F979ED1FC6C0DA719E...A7	32.68 KB	CLEAN

红伞回复剩余2个‘干净’。

江湖的fans

Trojan.PSW.Win32.GameOL.toj        3x
RootKit.Win32.Agent.elk                      2x
Hack.Exploit.Win32.MS08-067.b
Trojan.DL.Win32.Undef.bha
Trojan.QQMSG.Win32.MsgSender.ce


RIS2009  全灭

su-tt

C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > 08BBBC5D47804CEEF9133A042BA85F53 - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > 1F09B8A755F6DBE746D3B81CE097DA7B - Win32/AutoRun.Agent.GC 蠕虫
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > 2BF5B732325C545B025EB99D73790990 - Win32/AutoRun.Agent.GC 蠕虫
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > 858283C59E495E7E141AF89B8F4E87F5 - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > 8A35A40190433A1FF9A31BCE967F8A00 - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus.rar > RAR > C2EB7A72CA187D06B87830F8085A92B0 - 未查明的 NewHeur_PE 病毒

剩下上报ESET

电影结束了

"Infections"
"File";"Infection";"Result"
"F:\2\8A35A40190433A1FF9A31BCE967F8A00";"Trojan horse PSW.Generic6.AXWW";"Infected"
"F:\2\2BF5B732325C545B025EB99D73790990";"Trojan horse Agent.ATFD";"Infected"
"F:\2\08BBBC5D47804CEEF9133A042BA85F53";"Trojan horse P

The EQs

Dear Don Johnson,

Thank you for your submission.
The detection for this threat will be included in our next signature update.

It is an uninstall executable of Adware Cinmus

Regards,


Senior Virus Researcher
ESET spol. s r.o.

Sherry.ai

Rx To KL
All the virus