NOD32检测报[Win32/PSW.OnLineGames.NUO 特洛伊木马 的变种 ]病毒样本

chima287

   特别警惕，这些都是未知或者己知病毒样本，除非你确保有足够的防御系统，否则请不
以机试毒,本人不承担任何责任,后果自负，也并不代表这是一个新生的病毒、木马或者恶意软件。多引擎在
线病毒扫描里也只有多个杀毒软件报毒,因为这可能是某一款杀毒引擎的错误报警,敬请您自己判断分辩。

Sebastian

D:\kafan\1.exe         已检测: Trojan-GameThief.Win32.WOW!IK
D:\kafan\4563.exe         已检测: Virus.Win32.Agent!IK
D:\kafan\msn.com         已检测: Win32.SuspectCrc!IK
D:\kafan\winkanfh2.exe         已检测: Win32.SuspectCrc!IK
D:\kafan\winrar.com         已检测: Virus.Win32.Agent!IK
D:\kafan\winrar1.com         已检测: Win32.SuspectCrc!IK
D:\kafan\winrar3.com         已检测: Virus.Win32.Agent!IK

Starting the file scan:

Begin scan in 'D:\kafan\winrar3.com'
D:\kafan\winrar3.com
    [DETECTION] Is the TR/Drop.Agent.drf.9 Trojan
    [NOTE]      A backup was created as '4a4b55a9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\1.exe'
D:\kafan\1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a42556e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\123.exe'
D:\kafan\123.exe
    [DETECTION] Is the TR/Drop.Agent.drf.9 Trojan
    [NOTE]      A backup was created as '4a105573.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\2.exe'
D:\kafan\2.exe
    [DETECTION] Is the TR/Agent.hcz.2 Trojan
    [NOTE]      A backup was created as '4a42556f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\4563.exe'
D:\kafan\4563.exe
    [DETECTION] Is the TR/Drop.Agent.drf.9 Trojan
    [NOTE]      A backup was created as '4a135576.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\msn.com'
D:\kafan\msn.com
    [DETECTION] Is the TR/Crypt.FSPM.Gen Trojan
    [NOTE]      A backup was created as '4a4b55b4.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\winkanfh2.exe'
D:\kafan\winkanfh2.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4a4b55aa.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\winrar.com'
D:\kafan\winrar.com
    [DETECTION] Is the TR/Drop.Agent.drf.9 Trojan
    [NOTE]      A backup was created as '4b38d97b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\winrar1.com'
D:\kafan\winrar1.com
    [DETECTION] Is the TR/Crypt.FSPM.Gen Trojan
    [NOTE]      A backup was created as '4a4b55ac.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\winrar2.com'
D:\kafan\winrar2.com
    [DETECTION] Is the TR/Drop.Agent.drf.9 Trojan
    [NOTE]      A backup was created as '4b38d97d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年4月9日  09:54
Used time: 00:01 Minute(s)

The scan has been done completely.

      0 Scanned directories
     10 Files were scanned
     10 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     10 files were deleted
      0 Viruses and unwanted programs were repaired
     10 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     10 Notes

[ 本帖最后由 Sebastian 于 2009-4-9 09:52 编辑 ]

wrq

Warning

In order not to compromise your security, this page will not be accessed

A virus or unwanted program has been detected
in the HTTP data on the requested page.
Requested URL:        http://bbs.kafan.cn/attachment.p ... 53&t=1239249024
Information        Is the TR/Crypt.FSPM.Gen Trojan
Generated by AntiVir WebGuard 9.0.3.0, AVE 8.2.0.138, VDF 7.1.3.34

尤金卡巴斯基

2009/4/9 16:09:00        已清除        木马程序 Trojan-Downloader.Win32.Delf.tbh        G:\Temp\Virus\10.rar/msn.com               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Downloader.Win32.Delf.tbi        G:\Temp\Virus\10.rar/winrar1.com               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amai        G:\Temp\Virus\10.rar/winrar2.com//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amai        G:\Temp\Virus\10.rar/123.exe//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amai        G:\Temp\Virus\10.rar/4563.exe//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amak        G:\Temp\Virus\10.rar/winrar.com//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amak        G:\Temp\Virus\10.rar/winrar3.com//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-Dropper.Win32.Agent.amam        G:\Temp\Virus\10.rar/2.exe//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-GameThief.Win32.OnLineGames.blue        G:\Temp\Virus\10.rar/winkanfh2.exe//PE_Patch//UPack               
2009/4/9 16:09:00        已清除        木马程序 Trojan-GameThief.Win32.WOW.hsq        G:\Temp\Virus\10.rar/1.exe

kkgh

费尔全杀

BING126

呵呵     不要拿了旧的。。

schumi小粉

McAfee 全杀

liuxiuli

瑞星10个全杀

Palkia

js 10

小飞侠.net

G:\dd\00\virusdoc20090412\v005\015\10.rar>>winrar1.com        TrojanPSW.GameOL.xim.eqvn        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>1.exe        Trojan.Agent.abcl.mccw        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>123.exe        Trojan.Incuog.hov.fjog        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>2.exe        TrojanDropper.Agent.amam.ovrk        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>4563.exe        Trojan.Incuog.hov.fjog        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>msn.com        Trojan.Cap94219.tplx        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>winkanfh2.exe        Trojan.OnLineGames.gen.a        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>winrar.com        TrojanPSW.GameOL.xjr.qqay        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>winrar3.com        TrojanPSW.GameOL.xjr.qqay        木马        还未处理
G:\dd\00\virusdoc20090412\v005\015\10.rar>>winrar2.com        Trojan.Incuog.hov.fjog        木马        还未处理