33x

fatezero

kaba kill all

[ 本帖最后由 fatezero 于 2009-5-16 23:32 编辑 ]

ss0907

一个27一个28不知道查全了没

sam.to

Hello,

aa01_0.exe - Trojan-GameThief.Win32.OnLineGames.uzsl
aa06b_0.exe - Trojan-GameThief.Win32.OnLineGames.uzsm
aa28_0.exe - Trojan-GameThief.Win32.OnLineGames.uzsl

woai_jolin

http://bbs.kafan.cn/attachment.p ... 38&t=1242490499        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa01_0.exe        Win32/PSW.OnLineGames.MUG trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa02b_0.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa03b_0.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa04a_0.exe        Win32/PSW.OnLineGames.NUO trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa05b_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa06b_0.exe        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa07b_0.exe        a variant of Win32/PSW.WOW.DZI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa08c_0.exe        a variant of Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa09a_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa10d_0.exe        Win32/PSW.OnLineGames.NUO trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa11a_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa12_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa13c_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa14_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa15d_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa16_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa17_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa18a_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa19c_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa20a_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa21e_0.exe        a variant of Win32/PSW.OnLineGames.NZF trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa22_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa23a_0.exe        Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa24_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa25_0.exe        probably a variant of Win32/PSW.Delf.NLZ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa26d_0.exe        a variant of Win32/VB.NZV trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa27a_0.exe        Win32/PSW.OnLineGames.NSU trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa28_0.exe        probably a variant of Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa28_0.exe » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa28_0.exe » NSIS » Strings.txt        is OK               
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa28_0.exe » NSIS » System.dll        is OK               
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa28_0.exe » NSIS » 23.exe        probably a variant of Win32/Adware.Cinmus application        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa29a_0.exe        a variant of Win32/Agent.PFZ trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa30_0.exe        Win32/TrojanDownloader.Small.JOW trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa31b_0.exe        probably a variant of Win32/PSW.WOW.DZI trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aa32e_0.exe        probably a variant of Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 38&t=1242490499 » RAR » 新建文件夹\aasg_0.exe        Win32/PSW.OnLineGames.NRD trojan        was a part of the deleted object

心动

结果: 找到 21 恶意软件
Trojan-PSW.Win32.LdPinch.aftw (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa02b_0.exe
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa15d_0.exe
Trojan-PSW.Win32.LdPinch.afsd (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa03b_0.exe
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa17_0.exe
Trojan-GameThief.Win32.XiaJian.cv (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa04a_0.exe
Trojan-GameThief.Win32.Magania.bbtm (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa05b_0.exe
Trojan-GameThief.Win32.WOW.nld (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa07b_0.exe
Trojan-GameThief.Win32.WOW.nhs (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa08c_0.exe
Trojan-GameThief.Win32.XiaJian.eb (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa10d_0.exe
Trojan-PSW.Win32.LdPinch.aftt (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa11a_0.exe
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aasg_0.exe
Trojan-PSW.Win32.LdPinch.afua (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa13c_0.exe
Trojan-PSW.Win32.LdPinch.affb (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa14_0.exe
Trojan-GameThief.Win32.Magania.batl (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa22_0.exe
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa24_0.exe
Trojan-GameThief.Win32.OnLineGames.uzkg (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa23a_0.exe
Trojan-PSW.Win32.QQPass.ghy (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa25_0.exe
Trojan.Win32.Agent.cgrf (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa26d_0.exe
Trojan-GameThief.Win32.WOW.mbi (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa27a_0.exe
Trojan-Downloader.Win32.Small.jow (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa30_0.exe
Trojan-GameThief.Win32.WOW.nlc (病毒)
C:\Documents and Settings\Administrator\桌面\33.rar\新建文件夹\aa31b_0.exe

xxl

KIS8.0 Kill
2009-5-17 0:50:13        http://bbs.kafan.cn/attachment.p ... &t=1242492571//新建文件夹/aa01_0.exe        Internet Explorer        检测到威胁: Trojan-GameThief.Win32.OnLineGames.uzsl

布施大行

伞杀之
       0 已扫描的文件夹
     36 文件已扫描
     34 发现病毒 和/或 有害程序
      0 文件被列为可疑
      1 文件已删除
      0 病毒与有害程序被修复！
      1 文件已被移动到隔离区
      0 文件已被重命名
      0 个文件不能被扫描
      2 个文件被涉及
      2 压缩文档已被扫描
      0 警告
      1 注意