查看: 3122|回复: 17
收起左侧

[病毒样本] [md5内详]20只

[复制链接]
jimmyleo
发表于 2007-8-7 14:40:14 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
jimmyleo
 楼主| 发表于 2007-8-7 14:40:30 | 显示全部楼层

MD5

[530022|cf8cb9|39c547|128297|7b63e3|c91047|30a6e8|8ecb41|b3c221|a0414c|130fe3|eee44f|3f04b1|4e6b49|4e6b49|148efe|36dd1a|aa72a9|c5253e|e8bff7]
红心王子
发表于 2007-8-7 14:44:22 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.PSW.RocOnline.bde
病毒: Worm.Win32.Agent.ime     
病毒: Trojan.Win32.Agent.ine   
病毒: Hack.Win32.ArpCheater.d  
病毒: Trojan.PSW.Win32.QQHX.j  
病毒: Trojan.PSW.Win32.XYOnline.bt
病毒: Trojan.PSW.Win32.OnlineGames.tyg
病毒: Trojan.PSW.Win32.OnlineGames.doc
病毒: Trojan.PSW.Win32.OnlineGames.dud
病毒: Trojan.PSW.Win32.ZhuXian.ab
病毒: Trojan.PSW.ZhengTu.jzd   
病毒: Trojan.PSW.Win32.OnlineGames.ubk
病毒: Trojan.PSW.Win32.OnlineGames.dli
病毒: Dropper.Win32.Agent.nye  
病毒: Trojan.PSW.Win32.OnlineGames.dho
jimmyleo
 楼主| 发表于 2007-8-7 14:44:53 | 显示全部楼层
D:\download\t3\5.exe - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\6.exe - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\7.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\8.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\download\t3\9.exe - Signature 'Trojan-PWS.Win32.Nilage.bbr' found
D:\download\t3\10.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\11.exe - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\12.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\13.exe - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\14.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\15.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\16.exe - Signature 'Trojan-Dropper.Win32.Agent.ane' found
D:\download\t3\17.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\download\t3\18.exe - Signature 'BehavesLikeWin32.ExplorerHijack' found
D:\download\t3\19.exe - Signature 'BehavesLikeWin32.ExplorerHijack' found
D:\download\t3\20.exe - Signature 'Virus.Win32.AutoRun.bk' found
D:\download\t3\1.exe - Signature 'Trojan-PWS.Win32.OnLineGames.nn' found
D:\download\t3\2.exe - Signature 'Trojan-PWS.Win32.Small.br' found
D:\download\t3\3.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found
D:\download\t3\4.exe - Signature 'Trojan-Downloader.Win32.Zlob.and' found

        20 Files scanned
          (0 Archives with 0 files)
        20 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.370
taihuxian
发表于 2007-8-7 14:50:32 | 显示全部楼层
Malicious code found in file C:\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar.
Infection: Trojan-PSW.Win32.Lmir.amj
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\19.exe.
Infection: Trojan-PSW.Win32.Nilage.blg
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\18.exe.
Infection: Trojan-PSW.Win32.Nilage.blg
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\17.exe.
Infection: Trojan-Downloader.Win32.Small.czl
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\16.exe.
Infection: Backdoor.Win32.Agent.alh
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\15.exe.
Infection: Trojan-Spy.Win32.Delf.uv
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\14.exe.
Infection: Trojan-Downloader.Win32.Small.eyc
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\13.exe.
Infection: Trojan-PSW.Win32.OnLineGames.uo
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\12.exe.
Infection: Trojan-Downloader.Win32.Small.eyb
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\11.exe.
Infection: Trojan-PSW.Win32.OnLineGames.up
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\10.exe.
Infection: Trojan-Spy.Win32.Delf.uv
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\9.exe.
Infection: Trojan-PSW.Win32.Small.cf
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\8.exe.
Infection: Trojan-PSW.Win32.OnLineGames.afd
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\7.exe.
Infection: Trojan-Downloader.Win32.Small.ewc
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\1.exe.
Infection: Trojan-PSW.Win32.OnLineGames.nn
Action: none.
Malicious code found in file \Device\HarddiskVolume1\Documents and Settings\user\Local Settings\Temporary Internet Files\Content.IE5\CDKNGL65\T3[1].rar\4.exe.
Infection: Trojan-PSW.Win32.OnLineGames.zb
Action: none.
电影结束了
发表于 2007-8-7 15:03:32 | 显示全部楼层
扫描系统区域...
扫描所选择的目录和文件...
对象: 3.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: DeepScan:Generic.Malware.Sdld!gPWS.F2D2F010 (BD 引擎)
对象: 2.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 19.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 可疑病毒
        病毒: Generic.Malware.Sdld.2655F807 (BD 引擎)
对象: 18.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 可疑病毒
        病毒: Generic.Malware.Sdld.2655F807 (BD 引擎)
对象: 17.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.Lmir.AII (BD 引擎)
对象: 16.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Backdoor.Agent.YUU (BD 引擎)
对象: 15.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Spy.Delf.NGS (BD 引擎)
对象: 14.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 13.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 12.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 11.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Dropper.Delf.AID (BD 引擎)
对象: 10.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Generic.Malware.SBdld.D0CAEBE5 (BD 引擎)
对象: 9.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.Small.DK (BD 引擎)
对象: 8.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Generic.Onlinegames9.E96B8B0A (BD 引擎)
对象: 7.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 6.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 5.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.Agent.ABIO (BD 引擎)
对象: 1.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Dropped:Generic.PWS.Games.3.7BD1B039 (BD 引擎)
对象: 4.exe
        在压缩档案里: C:\Documents and Settings\wangcheng\桌面\T3.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnlineGames.BCS (BD 引擎)
微点卫士
发表于 2007-8-7 15:04:15 | 显示全部楼层
微点:
木马名称:Trojan.Win32.Genetik.bcb
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.hpu
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\20.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Nilage.bqs
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Nilage.bqs
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.kha
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.dap
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\16.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.csr
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\15.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.how
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.gzm
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.hlk
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.gyn
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.gob
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10.EXE
1) C:\DELETEFILEDOS.BAT
是否删除可疑程序?程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\AVPDH.EXE
2) C:\WINDOWS.0\SYSTEM32\AVPDH.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\14.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\14.EXE
1) C:\DELETEFILEDOS.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
2) C:\WINDOWS.0\SYSTEM32\LYLOADER.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYMANGR.DLL
4) C:\WINDOWS.0\SYSTEM32\LYMANGR.DLL
5) C:\DOCUMENTS AND
SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\MSDEG32.DLL
6) C:\WINDOWS.0\SYSTEM32\MSDEG32.DLL
是否删除木马程序及其衍生物?
8运行即退出,然后自己消失了
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\WOSO.EXE
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\WOSO0.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\5.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\5.EXE
可疑程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\WDBPRI.DLL
2) C:\DELETEFILEDOS.BAT
是否删除可疑程序?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6.EXE
1) C:\DELETEFILEDOS.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6.EXE
1) C:\DELETEFILEDOS.BAT
是否删除可疑程序?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
英仔
发表于 2007-8-7 15:25:46 | 显示全部楼层
ashampoo20個
544318625
发表于 2007-8-7 15:31:36 | 显示全部楼层
mcafee砍晒
snakebone
头像被屏蔽
发表于 2007-8-7 15:33:37 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\T3.rar'
C:\Documents and Settings\Administrator\桌面\
  T3.rar
    [0] Archive type: RAR
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Agent.18577
        [WARNING]   Infected files in archives cannot be repaired!
    --> 20.exe
        [DETECTION] Is the Trojan horse TR/Autorun.BK
        [WARNING]   Infected files in archives cannot be repaired!
    --> 19.exe
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.blg
        [WARNING]   Infected files in archives cannot be repaired!
    --> 18.exe
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.blg
        [WARNING]   Infected files in archives cannot be repaired!
    --> 17.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 16.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.36 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> 15.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.188
        [WARNING]   Infected files in archives cannot be repaired!
    --> 14.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.181
        [WARNING]   Infected files in archives cannot be repaired!
    --> 13.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UO.60
        [WARNING]   Infected files in archives cannot be repaired!
    --> 12.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.190
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11.exe
        [DETECTION] Is the Trojan horse TR/Hook.Shell.227
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Small.ewc.33
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      A backup was created as '46e62072.qua'  ( QUARANTINE )
        [INFO]      The file was deleted!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-15 00:31 , Processed in 0.119882 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表