今天手杀刚抓的，好多过红伞！

显示全部楼层 · 发表于 2009-5-25 13:51:29

norman

显示全部楼层 · 发表于 2009-5-25 14:42:33

Hello,

aBwruKPXHdP.fon - Trojan-GameThief.Win32.Magania.bdsb,
MbsV2QQJe.fon - Trojan-GameThief.Win32.Magania.bdsc,
NtkRM2essN.fon - Trojan-GameThief.Win32.Magania.bdsd

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

正跟进另外的

显示全部楼层 · 发表于 2009-5-25 14:57:09

卡巴
检测到：木马程序 Trojan-GameThief.Win32.Magania.bahd 文件: D:\virus\CtZ8uc499k.fon//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.Magania.baqg 文件: D:\virus\f13ERxR2Urh.fon//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.Magania.bafe 文件: D:\virus\nwxnPvr8xG.fon//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-GameThief.Win32.Magania.bagk 文件: D:\virus\vwuXtYbhj.fon//PE_Patch.UPX//UPX

显示全部楼层 · 发表于 2009-5-25 16:47:16

25:05:2009 16:46:46 SEARCHTASK "USER_DEFINED" started...
scan item: D:\TDDownload\virus
File scanned: D:\TDDownload\virus\aBwruKPXHdP.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\CtZ8uc499k.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\f13ERxR2Urh.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\MbsV2QQJe.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\NtkRM2essN.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\nwxnPvr8xG.fon - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: D:\TDDownload\virus\vwuXtYbhj.fon - SIGNATURE FOUND "Generic.Onlinegames"
25:05:2009 16:46:47 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 36
Virus found: 7
----------------------------------------------------

显示全部楼层 · 发表于 2009-5-25 19:07:51

DR.WEBCtZ8uc499k.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.origin;;
f13ERxR2Urh.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.11590;;
MbsV2QQJe.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.origin;;
NtkRM2essN.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.11089;;
nwxnPvr8xG.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.11542;;
vwuXtYbhj.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Gamania.origin;;
aBwruKPXHdP.fon;D:\Documents and Settings\Administrator\桌面\11;Trojan.PWS.Wsgame.origin;;

剩下的通通CLEAN

显示全部楼层 · 发表于 2009-5-25 20:44:33

McAfee 报了7个。。

显示全部楼层 · 发表于 2009-5-25 20:59:08

mp7ge

显示全部楼层 · 发表于 2009-5-27 21:52:25

其他是clean

显示全部楼层 · 发表于 2009-5-27 22:05:34

vwuXtYbhj.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
nwxnPvr8xG.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
NtkRM2essN.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
MbsV2QQJe.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
f13ERxR2Urh.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
CtZ8uc499k.fon Win32/PSW.OnLineGames.NRD 特洛伊木马
aBwruKPXHdP.fon Win32/PSW.OnLineGames.NRD 特洛伊木马的变种

显示全部楼层 · 发表于 2009-5-27 22:49:20

病毒创建的会是clean？看文件名也知道有问题啊

估计是加了厉害的壳吧。

[病毒样本] 今天手杀刚抓的，好多过红伞！

本帖子中包含更多资源

本帖子中包含更多资源

回复 12楼 sam.to 的帖子

回复 18楼 sam.to 的帖子

浏览过的版块