查看: 2982|回复: 16
收起左侧

[病毒样本] 六个 Trojan&Adware【c812c4 bc0ad7 852f01 1be402 aa8691 a81d0c】

[复制链接]
soyank
发表于 2007-7-20 12:01:44 | 显示全部楼层 |阅读模式
[:27:]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
promised
发表于 2007-7-20 12:03:05 | 显示全部楼层
C:\ABC\6vir\0[1].exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\6vir\3.dll - 特征码 'not-a-virus:AdWare.Win32.Agent.ck' 被发现
C:\ABC\6vir\6.dll - 特征码 'not-a-virus:AdWare.Win32.Boran.w' 被发现
C:\ABC\6vir\7.exe - 文件可能已损坏
C:\ABC\6vir\bar.exe - 特征码 'Trojan-Clicker.Win32.Agent.io' 被发现
C:\ABC\6vir\bg_sc.exe - 特征码 'Trojan-Downloader.Win32.Zlob.ni' 被发现

        6 个文件被扫描
          (0 个压缩档 0 个文件)
        5 个特征码被侦测
        0 个可疑代码段被发现
        耗时: 0:00.140

7.exe的确是死尸
蓝色牛仔裤
发表于 2007-7-20 12:08:25 | 显示全部楼层
detected: Trojan program Trojan-PSW.Win32.Delf.wh        File: C:\Documents and Settings\Administrator\×ÀÃæ\6vir\0[1].exe//PE_Patch.UPX//UPX
detected: adware not-a-virus:AdWare.Win32.Boran.w        File: C:\Documents and Settings\Administrator\×ÀÃæ\6vir\3.dll
detected: adware not-a-virus:AdWare.Win32.Boran.w        File: C:\Documents and Settings\Administrator\×ÀÃæ\6vir\6.dll
detected: Trojan program Trojan-Clicker.Win32.Agent.io        File: C:\Documents and Settings\Administrator\×ÀÃæ\6vir\bar.exe//data0002
zxy900906
发表于 2007-7-20 12:13:11 | 显示全部楼层
Scan performed at: 2007-7-20 12:12:33
Scanning Log
NOD32 version 2408 (20070719) NT
Command line: C:\Documents and Settings\Administrator\桌面\6vir

Date: 20.7.2007  Time: 12:12:35
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Administrator\桌面\6vir\
C:\Documents and Settings\Administrator\桌面\6vir\0[1].exe - Win32/PSW.Delf.NHI trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\Administrator\桌面\6vir\3.dll - is OK
C:\Documents and Settings\Administrator\桌面\6vir\6.dll - Win32/Adware.Boran application - quarantined - unable to clean - deleted
C:\Documents and Settings\Administrator\桌面\6vir\7.exe - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bar.exe - Win32/Adware.Toolbar.Baidu application - quarantined - unable to clean - deleted
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?InstallOptions.dll - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?ioSpecial.ini - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?modern-wizard.bmp - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?plugin.ini - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?aaa - Win32/Adware.Toolbar.Baigoo application - was a part of the deleted object
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?uninst.exe ?NSIS ?InstallOptions.dll - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?uninst.exe ?NSIS ?ioSpecial.ini - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?uninst.exe ?NSIS ?modern-wizard.bmp - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?NSIS ?uninst.exe ?UPX v12_m2 - is OK
C:\Documents and Settings\Administrator\桌面\6vir\bg_sc.exe ?UPX v12_m2 - is OK
Number of scanned files: 21
Number of threats found: 9
Number of files cleaned: 4
Time of completion: 12:12:36 Total scanning time: 1 sec (00:00:01)
欠妳緈諨
发表于 2007-7-20 12:19:02 | 显示全部楼层
5只

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
1688388728
发表于 2007-7-20 12:36:47 | 显示全部楼层
病毒: Trojan-PSW.Win32.Delf.wh, not-a-virus:AdWare.Win32.Boran.w (2x), Trojan-Clicker.Win32.Agent.io
文件: 6vir[1].part1.rar
目录: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\B64X7CKM
进程: GreenBrowser.exe
微点卫士
发表于 2007-7-20 13:09:46 | 显示全部楼层
微点:
木马名称:Trojan-PSW.Win32.Delf.ehd

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0[1].EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
残缺的唯美
发表于 2007-7-20 13:12:03 | 显示全部楼层
一点下载 咖啡无限提示毒
goodfish2002
发表于 2007-7-20 13:38:38 | 显示全部楼层
费尔六个全杀
zane_xzz
发表于 2007-7-20 14:21:48 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\Administrator\桌面\6vir.rar'
C:\Documents and Settings\Administrator\桌面\6vir.rar
  [0] Archive type: RAR
  --> 6vir\0[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
  --> 6vir\3.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Bor.X.19.C.2
  --> 6vir\6.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Boran.40960
  --> 6vir\7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 6vir\bar.exe
      [DETECTION] Is the Trojan horse TR/Drop.SuperUtilBa
  --> 6vir\bg_sc.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Baigoo.G
      [WARNING]   The file was ignored!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-5 12:04 , Processed in 0.131217 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表