34X

尤金卡巴斯基

Hello,


15.exe - Trojan.Win32.Agent.btuh
2.exe - Trojan-GameThief.Win32.WOW.gaz
3.exe - Trojan-GameThief.Win32.WOW.gay

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Regards, Vladislav Pintiysky
Virus Analyst
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

kingmuro

蜘蛛查杀

kingmuro

江民查杀

kingmuro

诺顿11.0查杀
日期和时间        风险        操作        文件名        风险类型
2009-3-8 22:06        Infostealer.Onlinegame        已通过删除清除        9.exe        文件
2009-3-8 22:06        Infostealer.Onlinegame        已通过删除清除        8.exe        文件
2009-3-8 22:06        Infostealer.Onlinegame        已通过删除清除        7.exe        文件
2009-3-8 22:06        Infostealer.Onlinegame        已通过删除清除        6.exe        文件
2009-3-8 22:06        Infostealer.Onlinegame        已通过删除清除        5.exe        文件
2009-3-8 22:06        Infostealer.Gampass        已通过删除清除        34.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        33.exe        文件
2009-3-8 22:04        Trojan Horse        已隔离        32.exe        文件
2009-3-8 22:04        Trojan Horse        已隔离        31.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        30.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        3.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        29.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        28.exe        文件
2009-3-8 22:04        Infostealer.Onlinegame        已通过删除清除        27.exe        文件
2009-3-8 22:03        Infostealer.Onlinegame        已通过删除清除        26.exe        文件
2009-3-8 22:03        Infostealer.Onlinegame        已通过删除清除        25.exe        文件
2009-3-8 22:03        Infostealer.Onlinegame        已通过删除清除        24.exe        文件
2009-3-8 22:03        Trojan Horse        已隔离        23.exe        文件
2009-3-8 22:03        Trojan.Fakemess        已通过删除清除        22.exe        文件
2009-3-8 22:03        Infostealer.Onlinegame        已通过删除清除        21.exe        文件
2009-3-8 22:03        Infostealer.Onlinegame        已通过删除清除        20.exe        文件
2009-3-8 22:01        Infostealer.Onlinegame        已通过删除清除        19.exe        文件
2009-3-8 22:01        Infostealer.Gampass        已通过删除清除        18.exe        文件
2009-3-8 21:59        Infostealer.Onlinegame        已通过删除清除        17.exe        文件
2009-3-8 21:59        Infostealer.Onlinegame        已通过删除清除        16.exe        文件
2009-3-8 21:59        Infostealer.Onlinegame        已通过删除清除        15.exe        文件
2009-3-8 21:59        Infostealer.Onlinegame        已通过删除清除        14.exe        文件
2009-3-8 21:59        Infostealer.Onlinegame        已通过删除清除        13.exe        文件
2009-3-8 21:58        Infostealer.Onlinegame        已通过删除清除        12.exe        文件
2009-3-8 21:57        Infostealer.Onlinegame        已通过删除清除        11.exe        文件
2009-3-8 21:56        Infostealer.Onlinegame        已通过删除清除        10.exe        文件
2009-3-8 21:56        Infostealer.Gampass        已通过删除清除        1.exe        文件

wai0903

Starting the file scan:

Begin scan in 'C:\Users\lamfamily\Desktop\34X.rar'
C:\Users\lamfamily\Desktop\34X.rar
    [0] Archive type: RAR
      --> 34X\1.exe
        [1] Archive type: OVL
        --> Object
          [DETECTION] Is the TR/Spy.Gen Trojan
      --> 34X\10.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/PSW.53248.84 Trojan
      --> 34X\16.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/PSW.49152.20 Trojan
    --> 34X\19.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 34X\2.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> 34X\21.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/PSW.OnlineGames.bkxd Trojan
    --> 34X\22.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> 34X\23.exe
      [DETECTION] Is the TR/Dldr.Sma.dat.4.B Trojan
      --> 34X\25.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/PSW.32768.10 Trojan
    --> 34X\3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 34X\31.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> 34X\32.exe
      [DETECTION] Is the TR/Dldr.Sma.dat.4.B Trojan
    --> 34X\4.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was moved to '4a0d338e.qua'!


End of the scan: 2009年3月9日  23:18
Used time: 00:13 Minute(s)

The scan has been done completely.

      0 Scanning directories
     35 Files were scanned
     35 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

Sebastian

Starting the file scan:

Begin scan in 'D:\34X'
D:\34X\1.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a1aa794.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\10.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.53248.84 Trojan
    [NOTE]      A backup was created as '49e3a796.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\11.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49e3a797.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\12.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a798.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\13.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49e3a799.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\14.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49e3a79a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\15.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a79b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\16.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.49152.20 Trojan
    [NOTE]      A backup was created as '49e3a79c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\17.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a79d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\18.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a79e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\19.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a79f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\2.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4b6d7b0d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\20.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48947b0f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\21.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.OnlineGames.bkxd Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b00.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\22.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '48947b01.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\23.exe
    [DETECTION] Is the TR/Dldr.Sma.dat.4.B Trojan
    [NOTE]      A backup was created as '48947b02.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\24.exe
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '48947b03.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\25.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Is the TR/PSW.32768.10 Trojan
    [NOTE]      A backup was created as '48947b05.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\26.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b06.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\27.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b07.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\28.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b38.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\29.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49e3a7a0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\3.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a1aa795.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\30.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b04.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\31.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e3a790.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\32.exe
    [DETECTION] Is the TR/Dldr.Sma.dat.4.B Trojan
    [NOTE]      A backup was created as '49e3a7a1.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\33.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b09.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\34.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48947b3a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\4.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4b6d7b0e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\5.exe
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '4a1aa797.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\6.exe
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '4b6d7b00.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\7.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4a1aa799.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\8.exe
    [DETECTION] Is the TR/BHO.Gen Trojan
    [NOTE]      A backup was created as '4b6d7b02.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
D:\34X\9.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a1aa79b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年3月10日  07:33
Used time: 00:01 Minute(s)

The scan has been done completely.

      1 Scanned directories
     34 Files were scanned
     35 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     34 files were deleted
      0 Viruses and unwanted programs were repaired
     34 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      0 Archives were scanned
      0 Warnings
     34 Notes