12
返回列表 发新帖
楼主: qianwenxiang
收起左侧

[病毒样本] host5.exe下载的东西也更新了..

[复制链接]
scottxzt
发表于 2007-8-19 13:24:27 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\dell\桌面\081902'
C:\Documents and Settings\dell\桌面\081902\dpyrvo.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\kxrbno.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\MsIMMs32.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\myeins.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.84
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\myepri.dll
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.98
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\RAVCQMON.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\RAVDHMON.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\RAVZTMON.exe
      [DETECTION] Is the Trojan horse TR/Agent.7613
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\081902\tluins.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '473cd463.qua'!
C:\Documents and Settings\dell\桌面\081902\tlupri.dll
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '473cd464.qua'!
C:\Documents and Settings\dell\桌面\081902\WinForm.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年8月19日  13:24
Used time: 00:14 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
     11 viruses and/or unwanted programs were found
uhthn2002
发表于 2007-8-19 13:46:05 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\081902.rar:<RAR>\RAVZTMON.exe : infected Trojan-PSW.Win32.OnLineGames.aci
C:\Documents and Settings\uhthn\Desktop\081902.rar:<RAR>\WinForm.dll : infected MalwareScope.Trojan-PSW.Game.12
C:\Documents and Settings\uhthn\Desktop\081902.rar:<RAR>\dpyrvo.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\081902.rar:<RAR>\kxrbno.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\081902.rar:<RAR>\MsIMMs32.dll : infected MalwareScope.Trojan-PSW.Game.12


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 13      - total       : 1     
- scanned         : 1       -  scanned    : 13      - scanned     : 1     
- contain viruses : 1       -  infected   : 5       - infected    : 1     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0
woai_jolin
发表于 2007-8-19 13:47:47 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
taihuxian
发表于 2007-8-19 14:53:16 | 显示全部楼层

BD11

C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVDHMON.exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVDHMON.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVDHMON.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVZTMON.exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVZTMON.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVZTMON.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tluins.exe        Infected: DeepScan:Generic.Dld.Agent.B9074E5A
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tluins.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tluins.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tlupri.dll        Infected: DeepScan:Generic.Dld.Agent.E4AE15AB
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tlupri.dll        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>tlupri.dll        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>WinForm.dll        Infected: Generic.Malware.PWS.B2D56A94
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>WinForm.dll        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>WinForm.dll        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>dpyrvo.exe        Infected: Generic.PWS.Games.4.90C62226
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>dpyrvo.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>dpyrvo.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>kxrbno.exe        Infected: Generic.Onlinegames.1.5B8BCCE1
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>kxrbno.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>kxrbno.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>MsIMMs32.dll        Infected: DeepScan:Generic.Onlinegames.2.CA82E193
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>MsIMMs32.dll        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>MsIMMs32.dll        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>mssql.dll        Infected: Generic.Malware.PWS.0EB54E82
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>mssql.dll        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>mssql.dll        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>myeins.exe        Infected: DeepScan:Generic.Dld.Agent.A13FAF26
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>myeins.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>myeins.exe        Move failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVCQMON.exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVCQMON.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\样本\081902.rar=>RAVCQMON.exe        Move failed
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-15 05:48 , Processed in 0.095450 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表