楼主: zane_xzz
收起左侧

[病毒样本] 再来18个

[复制链接]
wangjay1980
发表于 2007-7-19 21:59:09 | 显示全部楼层
有弄错了
hj5abc
发表于 2007-7-19 22:05:36 | 显示全部楼层
2.exe ,7.exe..无语..
tracydk
发表于 2007-7-19 22:43:22 | 显示全部楼层

17啊

tarting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> 1(1).exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 2.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.LB.3
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Agent.18432.59
  --> 9.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Agent.34708.B
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bjt.5
      [INFO]      The file was deleted!


End of the scan: 2007年7月19日  22:43
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     17 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found
wangjay1980
发表于 2007-7-19 23:56:07 | 显示全部楼层
Hello,

1(1).exe_ - Trojan-Proxy.Win32.Small.du,

12.exe_ - Trojan-PSW.Win32.OnLineGames.pl,

6.exe_ - Trojan-PSW.Win32.OnLineGames.aba

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Dmitry Shvetsov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.
xxwpk007
头像被屏蔽
发表于 2007-7-20 00:10:55 | 显示全部楼层
已删除: 病毒 Virus.Win32.Drowor.d        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/1.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.Nilage.bkl        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/2.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.acf        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/3.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan.Win32.Agent.bl        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/4.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ace        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/5.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-Downloader.Win32.Agent.bxi        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/7.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/8.exe
已删除: 木马程序 Trojan-PSW.Win32.Lmir.akw        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/9.exe//ASPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.qw        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/10.exe//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.cx        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/11.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/13.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.yn        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/14.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.aal        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/15.exe
已删除: 木马程序 Trojan-PSW.Win32.Nilage.bjt        文件: C:\Documents and Settings\Administrator\桌面\样本.rar/16.exe
jlennon
头像被屏蔽
发表于 2007-7-20 01:20:42 | 显示全部楼层
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-7-20
Start time: 2007-7-20 1:19
Engine(s): KAV engine (AVK 17.6025), BD-Engine (BD 17.5975)
Heuristic: On
Archives: On
System areas: Off

Check selected directories and files...
Object: 1(1).exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-Proxy.Win32.Small.du (KAV engine), Trojan.PWS.Onlinegames.AYD (BD-Engine)
Object: 1.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Virus.Win32.Drowor.d (KAV engine), Trojan.Agent.Delf.CA (BD-Engine)
Object: 10.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.qw (KAV engine), Trojan.PWS.OnlineGames.AUP (BD-Engine)
Object: 11.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.cx (KAV engine), DeepScan:Generic.Onlinegames.3.48D0AAB4 (BD-Engine)
Object: 12.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.pl (KAV engine), Packer.Malware.NSAnti.H (BD-Engine)
Object: 13.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Onlinegames.1.69743F9A (BD-Engine)
Object: 14.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.yn (KAV engine), Trojan.Dropper.OnLineGames.A (BD-Engine)
Object: 15.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.aal (KAV engine), Generic.Onlinegames.1.C351A936 (BD-Engine)
Object: 16.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.Nilage.bjt (KAV engine), Trojan.PWS.OnLineGames.FU (BD-Engine)
Object: 2.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.Nilage.bkl (KAV engine)
Object: 3.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.acf (KAV engine), Generic.Malware.gPWS.B2F65719 (BD-Engine)
Object: 4.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan.Win32.Agent.bl (KAV engine), Dropped:Trojan.PWS.Wsgame.AV (BD-Engine)
Object: 5.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.ace (KAV engine)
Object: 6.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.aba (KAV engine), Generic.PWS.WoW.002F7743 (BD-Engine)
Object: 7.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.Agent.bxi (KAV engine), Trojan.Dropper.Agent.LB (BD-Engine)
Object: 8.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Trojan.PWS.OnLineGames.AZG (BD-Engine)
Object: 9.exe
        Path: C:\Documents and Settings\Administrator\桌面\样本
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.Lmir.akw (KAV engine), Generic.Onlinegames9.93AB26A9 (BD-Engine)
Analysis complete: 2007-7-20 1:19
    17 files checked
    17 infected files detected
    0 suspected files detected
tonylee
头像被屏蔽
发表于 2007-7-20 08:51:41 | 显示全部楼层
瑞星查到16个。
yym1988520
发表于 2007-7-20 08:55:12 | 显示全部楼层
NIS 13
dedragon
发表于 2007-7-20 09:41:48 | 显示全部楼层
//-----------------------------------------------------------------
//
//        Product: BitDefender 9 Professional Plus
//        Version: 9.5
//
//        Created on:        20/07/2007        09:39:49
//
//-----------------------------------------------------------------


Virus Statistics

Scan path        : C:\Documents and Settings\Administrator\桌面\样本.rar
Folders        : 0
Files        :  19
Archives        : 1
Packed files        : 1
Identified viruses        : 15
Infected files        : 15
Warnings        : 0
Suspect files        : 0
Disinfected files        : 0
Deleted files        : 15
Copied files        : 0
Moved files        : 0
Renamed files        : 0
I/O errors        : 0
Scan time        : 00:00:02
Scan speed (files/sec)        : 9

C:\Documents and Settings\Administrator\桌面\样本.rar=>1.exe        Infected: Trojan.Agent.Delf.CA
C:\Documents and Settings\Administrator\桌面\样本.rar=>1.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>1.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>1(1).exe        Infected: Trojan.PWS.Onlinegames.AYD
C:\Documents and Settings\Administrator\桌面\样本.rar=>1(1).exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>1(1).exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>3.exe        Infected: Generic.Malware.gPWS.B2F65719
C:\Documents and Settings\Administrator\桌面\样本.rar=>3.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>3.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>4.exe        Infected: Dropped:Trojan.PWS.Wsgame.AV
C:\Documents and Settings\Administrator\桌面\样本.rar=>4.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>4.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>6.exe        Infected: Generic.PWS.WoW.002F7743
C:\Documents and Settings\Administrator\桌面\样本.rar=>6.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>6.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>7.exe        Infected: Trojan.Dropper.Agent.LB
C:\Documents and Settings\Administrator\桌面\样本.rar=>7.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>7.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>8.exe        Infected: Trojan.PWS.OnLineGames.AZG
C:\Documents and Settings\Administrator\桌面\样本.rar=>8.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>8.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>9.exe        Infected: Generic.Onlinegames9.93AB26A9
C:\Documents and Settings\Administrator\桌面\样本.rar=>9.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>9.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>10.exe        Infected: Trojan.PWS.OnlineGames.AUP
C:\Documents and Settings\Administrator\桌面\样本.rar=>10.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>10.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>11.exe        Infected: DeepScan:Generic.Onlinegames.3.48D0AAB4
C:\Documents and Settings\Administrator\桌面\样本.rar=>11.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>11.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>12.exe        Infected: Packer.Malware.NSAnti.H
C:\Documents and Settings\Administrator\桌面\样本.rar=>12.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>12.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>13.exe        Infected: Generic.Onlinegames.1.69743F9A
C:\Documents and Settings\Administrator\桌面\样本.rar=>13.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>13.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>14.exe        Infected: Trojan.Dropper.OnLineGames.A
C:\Documents and Settings\Administrator\桌面\样本.rar=>14.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>14.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>15.exe        Infected: Generic.Onlinegames.1.C351A936
C:\Documents and Settings\Administrator\桌面\样本.rar=>15.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>15.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>16.exe        Infected: Trojan.PWS.OnLineGames.FU
C:\Documents and Settings\Administrator\桌面\样本.rar=>16.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本.rar=>16.exe        Deleted
C:\Documents and Settings\Administrator\桌面\样本.rar        Update failed
woai_jolin
发表于 2007-7-20 10:08:10 | 显示全部楼层
2007/7/20 10:07:51        Scanning Log
2007/7/20 10:07:51        Version of virus signature database: 2408 (20070719)
2007/7/20 10:07:51        Date: 20.7.2007  Time: 10:07:51
2007/7/20 10:07:51        Scanned disks, folders and files: F:\v\
2007/7/20 10:07:54        Number of scanned files: 18
2007/7/20 10:07:54        Number of threats found: 15
2007/7/20 10:07:54        Time of completion: 10:07:54  Total scanning time: 3 sec (00:00:03)
2007/7/20 10:07:54        Notes:
2007/7/20 10:07:54        [7] File is probably infected with an unknown virus.
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-11 10:55 , Processed in 0.087086 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表