游戏外挂一只，疑似病毒

112112

反病毒引擎	版本	最后更新	扫描结果
a-squared	4.5.0.24	2009.09.21	-
AhnLab-V3	5.0.0.2	2009.09.19	-
AntiVir	7.9.1.19	2009.09.21	-
Antiy-AVL	2.0.3.7	2009.09.21	-
Authentium	5.1.2.4	2009.09.21	W32/Nuj.A.gen!Eldorado
Avast	4.8.1351.0	2009.09.20	Win32:Agent-ACMH
AVG	8.5.0.412	2009.09.21	PSW.OnlineGames.2.AJ
BitDefender	7.2	2009.09.21	Dropped:Generic.Onlinegames.14.F8170AB0
CAT-QuickHeal	10.00	2009.09.21	-
ClamAV	0.94.1	2009.09.21	Trojan.Crypt-215
Comodo	2390	2009.09.21	TrojWare.Win32.TrojanDropper.VB.~AAAG
DrWeb	5.0.0.12182	2009.09.21	Trojan.PWS.Wsgame.13092
eSafe	7.0.17.0	2009.09.17	Suspicious File
eTrust-Vet	31.6.6750	2009.09.21	-
F-Prot	4.5.1.85	2009.09.21	W32/Nuj.A.gen!Eldorado
F-Secure	8.0.14470.0	2009.09.21	-
Fortinet	3.120.0.0	2009.09.21	-
GData	19	2009.09.21	Dropped:Generic.Onlinegames.14.F8170AB0
Ikarus	T3.1.1.72.0	2009.09.21	Virus.Win32.Agent.COH
Jiangmin	11.0.800	2009.09.21	-
K7AntiVirus	7.10.849	2009.09.19	-
Kaspersky	7.0.0.125	2009.09.21	-
McAfee	5747	2009.09.20	BackDoor-DRV.gen.c
McAfee+Artemis	5747	2009.09.20	Suspect-29!19171D6FAD92
McAfee-GW-Edition	6.8.5	2009.09.21	Heuristic.BehavesLike.Win32.Dropper.J
Microsoft	1.5005	2009.09.21	PWS:Win32/OnLineGames.FT
NOD32	4442	2009.09.21	-
Norman	6.01.09	2009.09.21	-
nProtect	2009.1.8.0	2009.09.21	-
Panda	10.0.2.2	2009.09.21	-
PCTools	4.4.2.0	2009.09.20	-
Prevx	3.0	2009.09.21	-
Rising	21.48.03.00	2009.09.21	-
Sophos	4.45.0	2009.09.21	-
Sunbelt	3.2.1858.2	2009.09.20	-
Symantec	1.4.4.12	2009.09.21	-
TheHacker	6.5.0.2.012	2009.09.18	-
TrendMicro	8.950.0.1094	2009.09.21	-
VBA32	3.12.10.10	2009.09.20	Trojan-Downloader.Win32.FlyStudio.eq
ViRobot	2009.9.21.1945	2009.09.21	-
VirusBuster	4.6.5.0	2009.09.20	-

[ 本帖最后由 112112 于 2009-9-21 19:42 编辑 ]

39039

比特反的 报可疑文件

wliao

Norton AntiVirus

尤金卡巴斯基

2009/9/21 20:07:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.bwsr        G:\Temp\Virus\dlq\dlq.exe/登陆器V1.53\登陆器V1.53.exe//#//PE_Patch.UPX//UPX

八神 庵

2009-09-21 20:17:46        文件保护(创建文件)     操作:阻止并结束进程
进程路径:D:\downloads\登陆器V1.53\登陆器V1.53.exe
文件路径:C:\WINDOWS\system32\system32.exe

行为很明显,单用红伞也不够安全啊

fengtaks

to VB & PA

BING126

McAfee kill

尤金卡巴斯基

Hello,


dlq.exe_ - Trojan-GameThief.Win32.Magania.ccaq

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Please quote all when answering.

Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.
10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

chenrui19930

过KIS10扫描

傻猪猪米走鸡

2009/9/21 23:38:22        文件系统实时防护        文件        C:\Sandbox\Galaxy\DefaultBox\drive\C\WINDOWS\system32\system32.exe        Win32/PSW.OnLineGames.NRD 特洛伊木马        通过删除清除 - 已隔离        NT AUTHORITY\SYSTEM        在应用程序新建的文件上发生事件: C:\Sandbox\Galaxy\DefaultBox\drive\E\virus\dlq\登陆器V1.53\登陆器V1.53.exe.