2008.3.8 204.exe、TTPlayer.exe+Nouuui.sys

killloop

软件名称	引擎版本	病毒库版本	病毒库时间	扫描结果	时间
a-squared	4.0.0.32	20090306173500	2009-03-06	Generic.PWS.Games!IK	2.343
AntiVir	7.9.0.105	7.1.2.135	2009-03-07	TR/Dropper.Gen	1.895
Authentium	5.1.1	200903071729	2009-03-07	W32/GenericP.A (Exact)	1.079
AVAST!	3.0.1	090307-0	2009-03-07	-	0.856
AVG	7.5.52.442	270.11.9/1989	2009-03-07	-	1.942
BitDefender	7.81008.2769542	7.24043	2009-03-08	Generic.PWS.Games.3.E48A3B14	2.538
CA (VET)	9.0.0.143	31.6.6386	2009-03-07	Win32/Wowpa!generic trojan.	5.584
ClamAV	0.94.2	9080	2009-03-07	-	0.053
Comodo	3.8	1035	2009-03-07	-	0.531
CP Secure	1.1.0.715	2009.03.08	2009-03-08	-	7.296
Dr.Web	4.44.0.9170	2009.03.08	2009-03-08	-	4.150
F-Prot	4.4.4.56	20090307	2009-03-07	W32/GenericP.A (exact)	1.070
F-Secure	5.51.6100	2009.03.07.03	2009-03-07	Trojan-GameThief.Win32.OnLineGames.bkxm [AVP]	4.863
GData	19.3733/19.252	20090308	2009-03-08	Trojan-GameThief.Win32.OnLineGames.bkxm [Engine:A]	3.254
Ikarus	T3.1.01.45	2009.03.08.72397	2009-03-08	Generic.PWS.Games	3.884
Microsoft	1.4405	2009.03.08	2009-03-08	PWS:Win32/OnLineGames.ZY	4.483
mks_vir	2.01	2009.03.08	2009-03-08	-	2.707
Norman	6.00.06	6.00.00	2009-03-06	-	8.009
nProtect	20090307.01	3288711	2009-03-07	Generic.PWS.Games.3.E48A3B14	3.878
Quick Heal	10.00	2009.03.07	2009-03-07	-	0.927
Sophos	2.84.1	4.39	2009-03-08	Mal/Mdrop-B	2.136
Sunbelt	5030	5030	2009-03-07	-	0.579
The Hacker	6.3.2.7	v00275	2009-03-07	-	0.555
VBA32	3.12.10.1	20090306.1643	2009-03-06	-	3.264
ViRobot	20090307	2009.03.07	2009-03-07	-	0.397
VirusBuster	4.5.11.10	10.102.2/968427	2009-03-07	Trojan.OnlineGames.Gen.116	1.284
卡巴斯基	5.5.10	2009.03.08	2009-03-08	Trojan-GameThief.Win32.OnLineGames.bkxm	0.074
安博士V3	2009.03.07.01	2009.03.07	2009-03-07	-	1.087
安天	2.0.18	20090308.2212560	2009-03-08	-	0.118
江民杀毒	11.0.706	2009.03.06	2009-03-06	Trojan/PSW.OnLineGames.atpp	1.539
熊猫卫士	9.05.01	2009.03.07	2009-03-07	Suspicious file	1.588
瑞星	20.0	21.19.42.00	2009-03-06	-	0.936
赛门铁克	1.3.0.24	20090307.003	2009-03-07	Infostealer.Gampass	0.062
趋势科技	8.700-1004	5.884.29	2009-03-07	-	0.058
迈克菲	5.3.00	5546	2009-03-07	-	2.819
金山毒霸	2009.2.5.15	2009.3.7.18	2009-03-07	-	0.610
飞塔	2.81-3.117	10.131	2009-03-07	-	0.186

[ 本帖最后由 killloop 于 2009-3-8 16:18 编辑 ]

Palkia

to rs

江湖的fans

Trojan.PSW.Win32.GameOL.vss

RISING

江湖的fans

Palkia

你扫了吗？

瑞星报了

Palkia

恩~刚好回复后升级完毕，监控马上就报了~

ledled

Name: Trojan.OnlineGames.Gen.116
Type: Mutant

Description:


Files:
c:\users\administrator\desktop\204.exe

wcj20236

程序：
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TTPLAYER\204.EXE
木马程序生成以下文件：
1) C:\WINDOWS\FONTS\KGZQFHRM.DLL
是否删除木马程序及其衍生物?

揍敌客

TO Sophos