1.exe

promised

Auto post by promised's robot
PM me if having problems
CAT-QuickHeal        Found TrojanPWS.Gampass
McAfee        Found PWS-Mmorpg!tj
TheHacker        Found Trojan/OnLineGames.phy
K7AntiVirus        Found Riskware
VirusBuster        Found Trojan.PWS.OnLineGames!T8WbDnN1h+E
NOD32        Found a variant of Win32/PSW.OnLineGames.PHY
F-Prot        Found Nothing
Symantec        Found Infostealer.Gampass
Norman        Found W32/Suspicious_Gen2.LCKET
TrendMicro-HouseCall        Found TROJ_GEN.F9BC2DS
Avast        Found Win32:OnLineGames-FWW
eSafe        Found Win32.HEURCrypted
ClamAV        Found Nothing
Kaspersky        Found HEUR:Trojan.Win32.Generic
BitDefender        Found Gen:Variant.Kazy.19005
ViRobot        Found Nothing
Comodo        Found TrojWare.Win32.Spy.Agent.04
F-Secure        Found Nothing
DrWeb        Found Trojan.PWS.Gamania.29925
VIPRE        Found Infostealer.Gampass
AntiVir        Found TR/Kazy.19005
TrendMicro        Found TROJ_GEN.F9BC2DS
McAfee-GW-Edition        Found PWS-Mmorpg!tj
Sophos        Found Mal/Generic-L
eTrust-Vet        Found Win32/Gamepass.PMR
Jiangmin        Found Trojan/Generic.esel
Antiy-AVL        Found Trojan/Win32.OnLineGames
Microsoft        Found Trojan:Win32/Meredrop
SUPERAntiSpyware        Found Trojan.Agent/Gen-OnlineGames
Prevx        Found Nothing
GData        Found Gen:Variant.Kazy.19005
Commtouch        Found Nothing
AhnLab-V3        Found Win-Trojan/Meredrop.36352.B
VBA32        Found TrojanPSW.OnLineGames.xugz
PCTools        Found Trojan-PSW.Gampass
Rising        Found Trojan.Win32.Generic.128614F5
Ikarus        Found Gen.Variant.Kazy
Fortinet        Found W32/Mmorpg.TJ!tr.pws
AVG        Found PSW.OnlineGames3.BHZD
Panda        Found Generic Trojan
Avast5        Found Win32:OnLineGames-FWW

KOI9009

360 SD Kill

xwhmm

秒杀

爱在雨中停

ESS杀

aaaaoooo

金山卫士，360SD all kill

Hantaool

21:05:45:101;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\Documents and Settings\Hantaool\Local Settings\Temp\1304687145.dat;
21:05:45:113;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\Documents and Settings\Hantaool\Local Settings\Temp\1304687145.dat;
21:05:45:574;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建新进程;net stop cryptsvc;
21:05:45:743;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建新进程;sc config cryptsvc start= disabled;
21:05:45:852;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建新进程;sc delete cryptsvc;
21:05:45:937;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\YUksuser.dll;
21:05:45:961;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\YUksuser.dll;
21:05:46:095;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;删除文件;C:\WINDOWS\system32\ksuser.dll;
21:05:46:204;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\ksuser.dll;
21:05:46:216;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\ksuser.dll;
21:05:46:894;1024;C:\WINDOWS\system32\sc.exe;进程退出;;
21:05:47:076;804;C:\WINDOWS\system32\sc.exe;进程退出;;
21:05:48:542;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\dllcache\ksuser.dll;
21:05:48:555;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\dllcache\ksuser.dll;
21:05:48:579;908;C:\WINDOWS\system32\net.exe;创建新进程;net1 stop cryptsvc;
21:05:48:918;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\YUmidimap.dll;
21:05:48:942;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\YUmidimap.dll;
21:05:49:294;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;重命名文件;C:\WINDOWS\system32\TEM2B.tmp;
21:05:49:306;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\TEM2B.tmp;
21:05:49:330;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建注册表键值;键: HKLM\SYSTEM\ControlSet001\Control\Session Manager;
21:05:49:342;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建注册表键值;键: HKLM\SYSTEM\ControlSet001\Control\Session Manager;
21:05:49:342;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建注册表键值;键: HKLM\SYSTEM\ControlSet001\Control\Session Manager;
21:05:49:342;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建注册表键值;键: HKLM\SYSTEM\ControlSet001\Control\Session Manager;
21:05:49:415;716;C:\WINDOWS\system32\net1.exe;创建注册表键值;键: HKLM\SYSTEM\ControlSet001\Services\Tcpip\Parameters;
21:05:49:451;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\midimap.dll;
21:05:49:463;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\midimap.dll;
21:05:49:984;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;删除文件;C:\WINDOWS\system32\dllcache\midimap.dll;
21:05:50:057;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\dllcache\midimap.dll;
21:05:50:069;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\dllcache\midimap.dll;
21:05:50:299;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建文件;C:\WINDOWS\system32\sysapp10.dll;
21:05:50:312;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;修改文件;C:\WINDOWS\system32\sysapp10.dll;
21:05:50:457;716;C:\WINDOWS\system32\net1.exe;进程退出;;
21:05:50:481;908;C:\WINDOWS\system32\net.exe;进程退出;;
21:05:50:796;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;创建新进程; C:\DOCUME~1\Hantaool\LOCALS~1\Temp\1304687145.dat, ServerMain c:\documents and settings\hantaool\桌面\1[1].exe;
21:05:51:026;156;C:\Documents and Settings\Hantaool\桌面\1[1].exe;进程退出;;
21:05:51:245;884;C:\WINDOWS\system32\rundll32.exe;改变文件属性;C:\Documents and Settings\Hantaool\Local Settings\Temp\1304687145.dat;
21:05:51:329;884;C:\WINDOWS\system32\rundll32.exe;删除文件;C:\Documents and Settings\Hantaool\桌面\1[1].exe;
21:05:51:463;884;C:\WINDOWS\system32\rundll32.exe;进程退出;;

jefffire

promised 发表于 2011-5-6 17:49
Auto post by promised's robot
PM me if having problems
CAT-QuickHeal        Found TrojanPWS.Gampass

乃终于出现了。

luxiao200888

1[1].exe.7z>>1[1].exe        Trojan.Generic.ezia        木马       

XE-cj

卡巴斯基反病毒软件
2012
拒绝访问
无法访问该网页

请求对象位于网址：

http://bbs.kafan.cn/forum-attachment-aid
-MTIxNzM4MHxkZDZlOTZiYnwxMzA0Njg4MTM0fDQ
3MzIyOA%3D%3D.html

检测到威胁：

对象已感染病毒HEUR:Trojan.Win32.Generic
发生时间： 21:20:02

stoneyu

微点2.0 报未知木马