virus 1x 和衍生物

xueyao_zhjyl

下下来 分析一下

xueyao_zhjyl

冒昧 的 问一下  16.exe 这个文件 和 之前A系列里面的一个样本 貌似一样啊
详细的 可见下图 红线处

黑衣~魂

舊樣本來出來發
這些之前就發過了

drweb
13.exe;C:\Documents and Settings\all\桌面\System;Trojan.PWS.Wsgame.12056;;
14.exe;C:\Documents and Settings\all\桌面\System;Trojan.PWS.Wsgame.12325;;
15.exe;C:\Documents and Settings\all\桌面\System;Trojan.PWS.Wsgame.12325;;
16.exe;C:\Documents and Settings\all\桌面\System;Trojan.PWS.Wsgame.12058;;
QQjiji.exe;C:\Documents and Settings\all\桌面\System;Trojan.DownLoad.44438;;
2.exe;C:\Documents and Settings\all\桌面;Trojan.PWS.Gamania.19803;;

[ 本帖最后由 黑衣~魂 于 2009-8-19 15:00 编辑 ]

connelly

FILES KILLS ALL

我爱丹州

好多啊   第二包小a 杀出19歌

leonfg

eset k all
C:\Documents and Settings\GUNDAM\桌面\2\2.exe - a variant of Win32/AntiAV.NBO trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\2\System\13.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\2\System\14.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\2\System\15.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\2\System\16.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\2\System\QQjiji.exe - a variant of Win32/Mypis.AV virus - action selection postponed until scan completion
C:\Documents and Settings\GUNDAM\桌面\2\System\QQjiji.exe - a variant of Win32/Mypis.AV virus - deleted - quarantined