今日蜜罐19个

显示全部楼层 · 发表于 2007-7-19 20:03:58

Starting the file scan:

Begin scan in 'F:\病毒样本\蜜罐.rar'
F:\病毒样本\蜜罐.rar
  [0] Archive type: RAR
  --> TIMHost.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> mppds.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> AVPSrv.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> WinForm.exe
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> WinForm.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> TIMHost.dll
   [DETECTION] Contains suspicious code HEUR/Malware
  --> nwizzhuxians.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> nwizzhuxians.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> mppds.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> k11795711836.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> k11795711836.DAT
   [DETECTION] Contains suspicious code HEUR/Malware
  --> k11795711814.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> k11795711814.DAT
   [DETECTION] Is the Trojan horse TR/Agent.6915
  --> k11795711803.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.aci.1
  --> k11795711803.DAT
   [DETECTION] Contains suspicious code HEUR/Malware
  --> AVPSrv.dll
   [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 9157BFC4.EXE
   [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
   [INFO]    The file was deleted!

End of the scan: 2007年7月19日  20:03
Used time: 00:04 min

The scan has been done completely.

   0 Scanning directories
   21 Files were scanned
   17 viruses and/or unwanted programs were found
   3 classified as suspicious:
   1 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-7-19 20:06:39

微点
木马名称:Trojan-PSW.Win32.OnLineGames.fzo

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAR$EX00.016\TIMHOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

微塔是什么东西啊

显示全部楼层 · 发表于 2007-7-19 20:07:13

现在盗用微点名义的太多拉

显示全部楼层 · 发表于 2007-7-19 20:23:11

风暴胜者..

显示全部楼层 · 发表于 2007-7-19 20:25:25

秒杀.. 12

Scanned disks, folders and files: F:\蜜罐\
F:\蜜罐\35457B14.DLL - probably a variant of Win32/Genetik trojan
F:\蜜罐\9157BFC4.EXE - probably a variant of Win32/Genetik trojan
F:\蜜罐\AVPSrv.dll - a variant of Win32/PSW.OnLineGames.NBZ trojan
F:\蜜罐\AVPSrv.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\蜜罐\c_362.nls - Win32/Alman.NAA virus - quarantined - unable to clean - deleted
F:\蜜罐\k11795711803.exe - a variant of Win32/PSW.OnLineGames.NCU trojan
F:\蜜罐\k11795711814.DAT - probably a variant of Win32/PSW.OnLineGames.NCU trojan
F:\蜜罐\k11795711814.exe - a variant of Win32/PSW.OnLineGames.NCU trojan
F:\蜜罐\k11795711836.exe - a variant of Win32/PSW.OnLineGames.NCU trojan
F:\蜜罐\nwizzhuxians.exe - a variant of Win32/PSW.Agent.NEW trojan
F:\蜜罐\TIMHost.exe - a variant of Win32/PSW.OnLineGames.YA trojan
F:\蜜罐\WinForm.exe - a variant of Win32/PSW.OnLineGames.YA trojan

显示全部楼层 · 发表于 2007-7-19 20:31:58

16只

显示全部楼层 · 发表于 2007-7-19 20:33:45

kis7.0 14 个

小红伞17

显示全部楼层 · 发表于 2007-7-19 20:44:14

Product: BitDefender 9 Professional Plus
// Version: 9.5
//
// 创建在: 19/07/2007 14:44:20
//
//-----------------------------------------------------------------

病毒统计

扫描路径 : D:\下载文件夹\蜜罐.rar
文件夹 : 0
文件 : 20
存档 : 1
被压缩的文件 : 0
被识别的病毒 : 17
被感染文件 : 17
警告 : 0
可疑文件 : 1
被清除过的文件 : 0
被删除的文件 : 18
已拷贝的文件 : 0
被移动的文件 : 0
被重命名的文件 : 0
I/O 错误 : 0
扫描时间 : 00:00:04
扫描速度(文件/秒) : 5

病毒定义 : 701843
扫描插件 : 16
存档插件 : 41
解压缩插件 : 6
邮件插件 : 6
系统插件 : 5

显示全部楼层 · 发表于 2007-7-19 21:26:02

----------
[凝逸反毒] (http://hi.baidu.com/503165656)

[凝逸.扫描病毒引擎-日志] 2007.7.19 21:25:51

文件:F:\070717\蜜罐\TIMHost.exe | 感染:Trojan.PWS.Gamania.2437 [105>20070710_5bc2ee.axx]3(4.8)
操作:删除文件
文件:F:\070717\蜜罐\AVPSrv.exe | 感染:Trojan.PWS.Gamania.2687 [520>20070716_3159f3.axx]3(1.2)
操作:删除文件
文件:F:\070717\蜜罐\TIMHost.dll | 感染:Trojan.PWS.Gamania.2437 [321>20070716_3159f3.axx]3(1.2)
操作:删除文件
文件:F:\070717\蜜罐\nwizzhuxians.exe | 感染:Trojan.PWS.Gamania.2681 [72>20070716_3159f3.axx]2(1.3)
操作:删除文件
文件:F:\070717\蜜罐\nwizzhuxians.dll | 感染:Trojan.PWS.Wsgame [1582>20070716_3159f3.axx]3(1.1)
操作:删除文件
文件:F:\070717\蜜罐\k11795711814.exe | 感染:Trojan.PWS.Gamania.2801 [698>20070716_3159f3.axx]2(1.1)
操作:删除文件
文件:F:\070717\蜜罐\k11795711814.DAT | 感染:Trojan.PWS.Gamania.2801 [362>20070716_3159f3.axx]2(1.1)
操作:删除文件
文件:F:\070717\蜜罐\AVPSrv.dll | 感染:Trojan.PWS.Wsgame [470>20070716_3159f3.axx]3(1.1)
操作:删除文件

扫描完成|病毒:8 文件:19|耗时:7871
----------

显示全部楼层 · 发表于 2007-7-19 22:00:26

Hello,

35457B14.DLL - Backdoor.Win32.Agent.ahj,

9157BFC4.exe_ - Backdoor.Win32.Agent.aqw,

k11795711803.DAT,
k11795711814.DAT,
k11795711814.exe_,
k11795711836.DAT - Trojan-PSW.Win32.OnLineGames.es,

k11795711836.exe_ - Trojan-PSW.Win32.OnLineGames.abt,

[病毒样本] 今日蜜罐19个

回复 #12 微点卫士的帖子

本帖子中包含更多资源

[病毒样本] 今日蜜罐19个

回复 #12 微点卫士 的帖子

本帖子中包含更多资源

回复 #12 微点卫士的帖子