3月4日样本10：58样本6个

显示全部楼层 · 发表于 2009-3-4 15:11:19

2009-3-4 15:11:41 1236150701 Administrator 1052 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\files\12.exe\[UPX]\[Embedded_I#4060]" file.
2009-3-4 15:11:45 1236150705 Administrator 1052 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\vir\files\27.exe" file.
2009-3-4 15:11:45 1236150705 Administrator 1052 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\files\30.exe\[UPX]\[Embedded_I#4060]" file.
2009-3-4 15:11:45 1236150705 Administrator 1052 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\files\M11.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-4 15:11:45 1236150705 Administrator 1052 Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\files\new17.exe\[UPX]" file.
2009-3-4 15:11:45 1236150705 Administrator 1052 Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\files\new17.exe\[Embedded_I#2204]" file.

显示全部楼层 · 发表于 2009-3-4 16:08:01

红伞,无悬念清空

显示全部楼层 · 发表于 2009-3-4 16:15:15

江民：“玛格尼亚”变种otl

显示全部楼层 · 发表于 2009-3-4 16:21:07

DR.WEB
27.exe - infected with Trojan.PWS.Gamania.17197
8.exe - probably infected with BACKDOOR.Trojan
M11.exe - infected with Trojan.PWS.Gamania.17197
new17.exe - infected with Trojan.PWS.Wsgame.10466

显示全部楼层 · 发表于 2009-3-4 17:36:27

C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\12.exe - Win32/PSW.OnLineGames.OEP 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\27.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\30.exe - Win32/PSW.OnLineGames.OEP 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\8.exe - Win32/PSW.OnLineGames.OEP 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\M11.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种
C:\Documents and Settings\Administrator\桌面\files.rar > RAR > files\new17.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\files.rar:Zone.Identifier - 正常

显示全部楼层 · 发表于 2009-3-4 17:51:57

Start of the scan: 2009年3月4日  17:51

Starting the file scan:

Begin scan in 'C:\Users\lamfamily\Desktop\files.rar'
C:\Users\lamfamily\Desktop\files.rar
C:\Users\lamfamily\Desktop\files.rar
[0] Archive type: RAR
   --> files\new17.exe
      [1] Archive type: OVL
      --> Object
      [DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was moved to '4a1a4f8f.qua'!

End of the scan: 2009年3月4日  17:51
Used time: 00:38 Minute(s)

The scan has been done completely.

   0 Scanning directories
   7 Files were scanned
   6 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   1 Notes

显示全部楼层 · 发表于 2009-3-4 17:54:21

KIS8.0 Kill
Kaspersky Lab
拒绝访问
无法返回请求的网页

试图访问的网页：

http://bbs.kafan.cn/attachment.php?aid=
477272&k=b70038260ab0cbf475484fc7e31dc48
1&t=1236160371

发生下列错误：

请求的对象被感染，发现下列病毒 Trojan-GameThief.Win32.Magania.awbw

如有疑问，请联系您的技术支持
创建日期：
Wed Mar 04 17:53:48 2009
Kaspersky Lab

显示全部楼层 · 发表于 2009-3-4 18:23:21

rs gameol all

[病毒样本] 3月4日样本10：58样本6个

avast 1 left

回复 1楼 nanhezzb 的帖子