1x

幸福的猪猪

假的游戏登入器，联网下载的生成物。

kaba avira miss，to kill！


Hello,

New malicious software was found in the attached file. Its detection will be included in the next update.
Thank you for your help.
Trojan-Downloader.Win32.Agent.chlz

?Filename	Result
sx.exe	MALWARE

The file 'sx.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/PSW.Zuten.13352C. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.01.04.175.

[ 本帖最后由 幸福的猪猪 于 2009-7-4 05:34 编辑 ]

xiaohai95

To avast!

huangqian202

微点扫描 深度启发
2009-07-03 09:49:53        C:\Documents and Settings\Administrator\桌面\TDDownload.zip>>TDDownload\sx.exe,        Malware.Win32.Suspect.f,        成功删除

schumi小粉

to 咖啡~

saga3721

程序：
C:\DOCUMENTS AND SETTINGS\\桌面\TDDOWNLOAD\SX.EXE
病毒程序生成以下文件：
1) C:\DOCUMENTS AND SETTINGS\\LOCAL SETTINGS\TEMP\TOB2.TMP
2) C:\WINDOWS\SYSTEM\TOB2.TMP
3) C:\WINDOWS\SYSTEM32\D3D8.DLL.REP
是否删除病毒程序及其衍生物?

xyao

瑞星2010

Tynox

to Comodo

cidwu

类别: 密码窃取程序

说明: 这个程序很危险，它捕获用户密码。

建议: 立即删除这个软件。

Microsoft Security Essentials 检测到可能会侵害您的隐私或损坏计算机的程序。即使不删除这些程序，仍然可以访问它们所使用的文件(不推荐)。若要访问这些文件，请选择“允许”操作，并单击“应用操作”。如果此选项不可用，请以管理员身份登录或请求本地管理员提供帮助。

项目:
containerfile:C:\Documents and Settings\Administrator\My Documents\下载\TDDownload.zip
file:C:\Documents and Settings\Administrator\My Documents\下载\TDDownload.zip->TDDownload/sx.exe->(UPX)

aerbeisi

IKARUS - T3SCAN V1.32.10.0 (WIN32)
         T3 V1.01.64
         Copyright (c) 2006 - 2009 by Ikarus Software.
         All rights reserved.

Signature-database from 3.7.2009 04:03:13 (Build: 72966)

e:\TDDownload.zip:TDDownload\sx.exe - Signature 'PWS.Win32' found
e:\TDDownload.zip - Signature 'PWS.Win32' found

        2 Files scanned
          (1 Archiv with 2 files)
        2 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.344

luxiao200888

瑞星gen