4x

jordanpchome

Virus check with AntiVirusKit
Version 17.0.7089
Virus signatures of
Start time: 10/20/2009 12:28
Engine(s): Engine A, Engine B
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 888.exe
        Path: C:\Documents and Settings\Administrator\桌面\4x
        Status: Virus, file deleted
        Virus: Trojan-Dropper.Win32.Small.dyq (Engine A)
Object: aa1.exe
        Path: C:\Documents and Settings\Administrator\桌面\4x
        Status: Virus, file deleted
        Virus: Trojan-GameThief.Win32.OnLineGames.bmtc (Engine A)
Object: pp.exe
        Path: C:\Documents and Settings\Administrator\桌面\4x
        Status: Virus, file deleted
        Virus: Worm.Win32.AutoRun.azrp (Engine A)
Analysis complete: 10/20/2009 12:28
    4 files checked
    3 infected files detected
    0 suspected files detected

Soma Cruz

D:\TDDownload\4x.rar/888.exe         已检测: Trojan-Dropper.Win32.Small!IK
D:\TDDownload\4x.rar/aa1.exe         已检测: Trojan-GameThief.Win32.Magania!IK
D:\TDDownload\4x.rar/m.exe         已检测: Trojan-Downloader.Win32.Frethog!IK
D:\TDDownload\4x.rar/pp.exe         已检测: Trojan-Downloader.Win32.Geral!IK

悠柚

D:\TDDownload\suspicious
D:\TDDownload\suspicious\aa1.exe : infected Trojan-GameThief.Win32.OnLineGames.bmtc
D:\TDDownload\suspicious\pp.exe:<SFX>\00000000 : is suspected of Win32.Trojan.Downloader (http://...)
D:\TDDownload\suspicious\pp.exe : is suspected of Win32.Trojan.Downloader (http://...)

悠柚

没更新过的F-Prot
[Found possible virus] <W32/Downloader-WebExe-based!Maximus>         D:\TDDownload\suspicious\888.exe->(embedded)
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa1.exe->(UPX)
[Found password stealer] <W32/OnlineGames.CN.gen!Eldorado (generic, damaged, not disinfectable)>         D:\TDDownload\suspicious\m.exe
[Found security risk] <W32/LdPinch.N.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\pp.exe

coldwinter

Zillya! Antivirus(2/4)
相关:http://bbs.kafan.cn/thread-571132-1-1.html


Comodo Antivirus(2/4)
相关:http://bbs.kafan.cn/thread-576771-1-1.html

kingmuro

病毒名称                                 文件名
Trojan.Win32.Generic.11EE9330        D:\MY DOCUMENTS\桌面\TEST\4X\PP.EXE
Trojan.PSW.Win32.DNFOnLine.bl        D:\MY DOCUMENTS\桌面\TEST\4X\AA1.EXE>>Overlay
Trojan.PSW.Win32.GameOnline.egd        D:\MY DOCUMENTS\桌面\TEST\4X\AA1.EXE>>upx_c
Trojan.Win32.Generic.11EE87F0        D:\MY DOCUMENTS\桌面\TEST\4X\888.EXE

kingmuro

2009-10-20 21:19:53 D:\My Documents\桌面\test\4x\pp.exe Generic.Malware.SP!Pk!Tkg.E6C87C17 已删除
2009-10-20 21:19:53 D:\My Documents\桌面\test\4x\aa1.exe Generic.Onlinegames.14.81A3B2A5 已删除

尤金卡巴斯基

m.exe_, softqq0.dll - Trojan-GameThief.Win32.OnLineGames.bmvk

以上文件包含恶意代码，下次更新后即可查杀。感谢您的上报。

zhb0128

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2009-10-20
开始时间: 2009-10-20 23:02
引擎: KAV 引擎 (AVK 19.8104), BD 引擎 (BD 18.1468)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: 888.exe
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\4x.rar
        Status: 已发现病毒
        病毒: Trojan-Dropper.Win32.Small.dyq (KAV 引擎)
对象: aa1.exe
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\4x.rar
        Status: 已发现病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.bmtc (KAV 引擎), Generic.Onlinegames.14.81A3B2A5 (BD 引擎)
对象: pp.exe
        在压缩档案里: C:\Documents and Settings\Administrator\桌面\4x.rar
        Status: 已发现病毒
        病毒: Worm.Win32.AutoRun.azrp (KAV 引擎), Generic.Malware.SP!Pk!Tkg.E6C87C17 (BD 引擎)
对象: 4x.rar
        路径: C:\Documents and Settings\Administrator\桌面
        Status: 文件移入隔离区
        病毒: Trojan-Dropper.Win32.Small.dyq, Trojan-GameThief.Win32.OnLineGames.bmtc, Worm.Win32.AutoRun.azrp (KAV 引擎), Generic.Onlinegames.14.81A3B2A5, Generic.Malware.SP!Pk!Tkg.E6C87C17 (BD 引擎)
扫描完成: 2009-10-20 23:02
    已检查 1 个文件
    已发现 1 个染毒文件
    发现 0 个可疑文件

失落的手链

瑞星的。。。