查看: 3004|回复: 14
收起左侧

[病毒样本] 网吧抓到的

[复制链接]
baidu9833
发表于 2007-7-17 00:36:54 | 显示全部楼层 |阅读模式
网吧抓到.....害我不轻....没有密码.....不会弄.....谁教一下撒

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-7-17 00:41:18 | 显示全部楼层
Scan performed at: 2007-7-17 0:41:07
Scanning Log
NOD32 version 2400 (20070716) NT
Command line: C:\Documents and Settings\EQ2\桌面\11Sy.rar
Operating memory - is OK

Date: 17.7.2007  Time: 00:41:12
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\11Sy.rar
C:\Documents and Settings\EQ2\桌面\11Sy.rar ?RAR ?rising161.exe - Win32/Viking.LU virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\11Sy.rar ?RAR ?rising608.exe - Win32/Viking.LU virus - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\11Sy.rar ?RAR ?upxdnd.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
Number of scanned files: 5
Number of threats found: 3
Number of files cleaned: 1
Time of completion: 00:41:13 Total scanning time: 1 sec (00:00:01)
1688388728
发表于 2007-7-17 00:41:32 | 显示全部楼层
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\11Sy[1].rar\11Sy.exe - infected with BINARYRES
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\11Sy[1].rar\rising161.exe - infected with Win32.HLLW.Gavir.72
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\11Sy[1].rar\rising608.exe - infected with Win32.HLLW.Gavir.72
C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\EGMKN5N4\11Sy[1].rar\upxdnd.exe - infected with Trojan.PWS.Gamania.2450

Archive contains 4 infected items
feihongtian 该用户已被删除
发表于 2007-7-17 00:43:11 | 显示全部楼层
重复了
欠妳緈諨
发表于 2007-7-17 00:43:48 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
shmily512099
发表于 2007-7-17 01:28:45 | 显示全部楼层
蠕虫名称:Worm.Win32.Vikings.dmt

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1111\RISING161.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?




蠕虫名称:Worm.Win32.Vikings.dmt

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1111\RISING608.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-PSW.Win32.OnLineGames.gfd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1111\UPXDND.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
KAV-Longhorn
发表于 2007-7-17 04:01:41 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Dominator\My Documents\Downloads\Compressed\11Sy.rar'
C:\Documents and Settings\Dominator\My Documents\Downloads\Compressed\11Sy.rar
  [0] Archive type: RAR
  --> 11Sy.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> rising161.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> rising608.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
      [INFO]      The file was moved to '46eecec8.qua'!


End of the scan: 2007年7月17日  08:01
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      4 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found
风雪
发表于 2007-7-17 06:02:47 | 显示全部楼层
1184623367,2007-7-17 6:02:47,Worm.Viking.lu.bitw,病毒,mygood,D:\3\新建文件夹\新建文件夹\11Sy.rar>>rising161.exe,Manual scan
1184623367,2007-7-17 6:02:47,Worm.Viking.lu.bitw,病毒,mygood,D:\3\新建文件夹\新建文件夹\11Sy.rar>>rising608.exe,Manual scan
1184623367,2007-7-17 6:02:47,TrojanPSW.OnLineGames.zb.krbo,木马,mygood,D:\3\新建文件夹\新建文件夹\11Sy.rar>>upxdnd.exe,Manual scan
费尔。
tracydk
发表于 2007-7-17 07:11:42 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\病毒样本\11Sy.rar'
F:\病毒样本\11Sy.rar
  [0] Archive type: RAR
  --> 11Sy.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> rising161.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> rising608.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
      [INFO]      The file was deleted!
wangjay1980
发表于 2007-7-17 08:46:35 | 显示全部楼层
deleted: virus Virus.Win32.AutoRun.en        File: C:\Documents and Settings\Owner\×ÀÃæ\11Sy.rar/11Sy.exe//UPX
deleted: virus Worm.Win32.Viking.lu        File: C:\Documents and Settings\Owner\×ÀÃæ\11Sy.rar/rising161.exe
deleted: virus Worm.Win32.Viking.lu        File: C:\Documents and Settings\Owner\×ÀÃæ\11Sy.rar/rising608.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.zb        File: C:\Documents and Settings\Owner\×ÀÃæ\11Sy.rar/upxdnd.exe
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-11 11:13 , Processed in 0.124657 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表