一个downloader和下载的东西

zane_xzz

[MD5: A4AEEA 426E2B EC2B98 D2B279 189B6E D0BB40 6F25F3 63AA00 C648AC 1FF347 6C7F8A 67220B 594CEA 211348]

promised

C:\ABC\样本\1.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本\2.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\4.exe - 特征码 'Trojan-Proxy.Win32.Small.DU' 被发现
C:\ABC\样本\5.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\6.exe - 特征码 'Trojan-Spy.Win32.Goldun.pq' 被发现
C:\ABC\样本\7.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\8.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\9.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\a.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\b.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本\c.exe - 特征码 'Backdoor.Win32.WinterLove.Z' 被发现
C:\ABC\样本\d.exe - 特征码 'Trojan-PWS.Win32.Nilage.bjp' 被发现
C:\ABC\样本\f.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本\xp.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现

        14 个文件被扫描
          (0 个压缩档 0 个文件)
        14 个特征码被侦测
        0 个可疑代码段被发现
        耗时: 0:00.078

欠妳緈諨

snakebone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\样本.rar'
C:\Documents and Settings\Administrator\桌面\
  样本.rar
    [0] Archive type: RAR
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.3080
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.77
        [WARNING]   Infected files in archives cannot be repaired!
    --> a.exe
        [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
        [WARNING]   Infected files in archives cannot be repaired!
    --> b.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.146
        [WARNING]   Infected files in archives cannot be repaired!
    --> c.exe
        [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
        [WARNING]   Infected files in archives cannot be repaired!
    --> d.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
        [WARNING]   Infected files in archives cannot be repaired!
    --> f.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.25 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> xp.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '46c7e50c.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.3080
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.YN.77
  --> a.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> b.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.146
  --> c.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> d.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> f.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.25 Backdoor server programs
  --> xp.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [INFO]      The file was deleted!


End of the scan: 2007年7月15日  09:56
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     16 Files were scanned
     14 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

wangjay1980

detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/2.exe//PE_Patch//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/4.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.zl        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/5.exe//PE_Patch//UPack
detected: Trojan program Backdoor.Win32.Kolmat.b        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/6.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aaa        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/7.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Agent.bl        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.yn        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/9.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.zb        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/a.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Small.ewc        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/b.exe//UPack
detected: Trojan program Backdoor.Win32.WinterLove.z        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/c.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.xn        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/d.exe//PE_Patch//UPack
detected: Trojan program Trojan-Dropper.Win32.Agent.aqq        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/f.exe//UPack
detected: Trojan program Trojan-Downloader.Win32.Murlo.fl        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/xp.exe//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1.exe//UPack//#//PE_Patch.Stolen

seamonkey

微点2个未知，其他全已知
木马名称:Trojan-Proxy.Win32.Small.lc
蠕虫名称:Worm.Win32.Agent.bns
木马名称:Trojan-PSW.Win32.Agent.csy
蠕虫名称:Worm.Win32.Nimaya.bb
木马名称:Trojan.Win32.Genetik.adz
木马名称:Trojan-PSW.Win32.OnLineGames.gep
木马名称:Trojan-PSW.Win32.OnLineGames.fxy
木马名称:Trojan-PSW.Win32.OnLineGames.gab
木马名称:Trojan-Downloader.Win32.Small.kda
木马名称:Trojan-PSW.Win32.QQPass.ezv
木马名称:Trojan-PSW.Win32.OnLineGames.gbp
蠕虫名称:Worm.Win32.Agent.bni

tracydk

不知道现在微点的病毒库有多少了

无限感慨

都看不懂啊
应该是非常令人讨厌的了

1p1

原帖由 zane_xzz 于 2007-7-15 09:45 发表
[MD5: A4AEEA 426E2B EC2B98 D2B279 189B6E D0BB40 6F25F3 63AA00 C648AC 1FF347 6C7F8A 67220B 594CEA 211348]