12
返回列表 发新帖
楼主: qqq000@qq.com
收起左侧

[病毒样本] [凝逸反毒] 继续>>15个今天新马

[复制链接]
uhthn2002
发表于 2007-8-19 23:13:51 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\464081_(1)2838371.exe : infected Trojan.Win32.Wigon.Z
C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\464081_2838371(1).exe : infected Trojan.Win32.Wigon.Z
C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\464081_2838371.exe : infected Trojan.Win32.Wigon.Z
C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\5DCE59_wl0618.exe : infected Trojan.Win32.PSW.OnLineGames.NEP
C:\Documents and Settings\uhthn\Desktop\1.rar:<RAR>\3CCBEE_1(8).exe : infected Trojan.Havedo
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\73DD46_10(1).exe : infected Trojan-Proxy.Win32.Small.fl
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\77FECA_wow(1).exe : infected MalwareScope.Trojan-PSW.Game.12
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\79F1AC_ga.exe : infected Virus.Win32.AutoRun.gr
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\93C89B_mh.exe : infected Trojan.Havedo
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\9577AB_3(3).exe : infected Trojan.Havedo
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\D9CCF6_4(4).exe : infected Trojan-Downloader.Win32.Tiny.io
C:\Documents and Settings\uhthn\Desktop\2.rar:<RAR>\F5D6D2_wow.exe : infected MalwareScope.Trojan-PSW.Game.3


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 15      - total       : 3     
- scanned         : 2       -  scanned    : 15      - scanned     : 3     
- contain viruses : 2       -  infected   : 12      - infected    : 2     
- deleted         : 0       -  suspicious : 0       - suspicious  : 0
taihuxian
发表于 2007-8-20 07:40:33 | 显示全部楼层
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>45E2B2_tempb.exe        Infected: Win32.Virtob.2.Gen     
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>45E2B2_tempb.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>45E2B2_tempb.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_(1)2838371.exe        Infected: Trojan.Dropper.Ntrootkit.A
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_(1)2838371.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_(1)2838371.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371(1).exe        Infected: Trojan.Dropper.Ntrootkit.A
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371(1).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371(1).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371.exe        Infected: Trojan.Dropper.Ntrootkit.A
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>464081_2838371.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>5DCE59_wl0618.exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>5DCE59_wl0618.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>5DCE59_wl0618.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>6D6CC8_1637[1].exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>6D6CC8_1637[1].exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>6D6CC8_1637[1].exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>102245_2temp.exe        Infected: BehavesLike:Win32.ExplorerHijack
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>102245_2temp.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>102245_2temp.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>3CCBEE_1(8).exe        Infected: Trojan.Dropper.RIA
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>3CCBEE_1(8).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\AE77~1.RAR=>3CCBEE_1(8).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>73DD46_10(1).exe        Infected: Trojan.PWS.Onlinegames.AYD
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>73DD46_10(1).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>73DD46_10(1).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>77FECA_wow(1).exe        Infected: Generic.PWS.Games.4.5461E7A5
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>77FECA_wow(1).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>77FECA_wow(1).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>93C89B_mh.exe        Infected: Trojan.PWS.Onlinegames.AYD
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>93C89B_mh.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>93C89B_mh.exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>9577AB_3(3).exe        Infected: Trojan.Dropper.RIA
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>9577AB_3(3).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>9577AB_3(3).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>D9CCF6_4(4).exe        Infected: Trojan.PWS.Onlinegames.AYD
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>D9CCF6_4(4).exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>D9CCF6_4(4).exe        Move failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>F5D6D2_wow.exe        Infected: Generic.Onlinegames.2.C7E61DD1
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>F5D6D2_wow.exe        Disinfection failed
C:\DOCUME~1\ADMINI~1\桌面\2BB05~1.RAR=>F5D6D2_wow.exe        Move failed
woai_jolin
发表于 2007-8-20 08:18:16 | 显示全部楼层
PC Tools AntiVirus Activity Report
Generated on: 2007-8-20 8:18:13

Scan Information:  

      
Object Name Status Action  Infection Date and Time
   
   
F:\v\3CCBEE_1(8).exe  Infected Removed mutant: Trojan.DR.Small.Gen.5  2007-8-20 8:18:16  
   
   
   
   
   
   
   
F:\v\464081_(1)2838371.exe  Infected Removed trojan: Trojan.Agent.HQH  2007-8-20 8:18:16  
   
   
   
   
   
   
   
F:\v\464081_2838371(1).exe  Infected Removed trojan: Trojan.Agent.HQH  2007-8-20 8:18:16  
   
   
   
   
   
   
   
F:\v\464081_2838371.exe  Infected Removed trojan: Trojan.Agent.HQH  2007-8-20 8:18:16  
   
   
   
   
   
   
   
F:\v\79F1AC_ga.exe  Infected Removed mutant: Trojan.QQPass.Gen.5  2007-8-20 8:18:17  
   
   
   
   
   
   
   
F:\v\9577AB_3(3).exe  Infected Removed mutant: Trojan.DR.Small.Gen.5  2007-8-20 8:18:17  
   
   
   
   
   
   
   
F:\v\F5D6D2_wow.exe  Infected Removed mutant: Trojan.OnlineGames.Gen.32  2007-8-20 8:18:17
398566384
头像被屏蔽
发表于 2007-8-20 08:25:33 | 显示全部楼层
检测到病毒: Virus.Win32.Cheburgen.a, Trojan.Win32.Agent.ady (3x), Trojan-PSW.Win32.OnLineGames.ahj, Trojan-PSW.Win32.OnLineGames.aia, Backdoor.Win32.Agent.arv, Trojan-Proxy.Win32.Small.fl

发现病毒,在下载网页内容时.


检测到病毒: Trojan-Proxy.Win32.Small.fl (2x), Trojan-Downloader.Win32.Zlob.caa, Virus.Win32.AutoRun.gr, Trojan-Proxy.Win32.Small.du, Trojan-PSW.Win32.WOW.sd

发现病毒,在下载网页内容时.

地址: bbs.kafan.cn
地址: bbs.kafan.cn
微点卫士
发表于 2007-8-20 09:48:25 | 显示全部楼层
微点:
木马名称:Trojan.Win32.Agent.hfu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\464081_(1)2838371.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Agent.hfu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\464081_2838371(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Agent.hfu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\464081_2838371.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.dnb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\102245_2TEMP.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Proxy.Win32.Small.od

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\3CCBEE_1(8).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\5DCE59_WL0618.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RAVWLMON.EXE
2) C:\PROGRAM FILES\INTERNET EXPLORER\RAVWLMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\6D6CC8_1637[1].EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\RAVZXMON.EXE
2) C:\PROGRAM FILES\INTERNET EXPLORER\RAVZXMON.DAT
是否删除木马程序及其衍生物?

45E2B2_tempb启动即退出

木马名称:Trojan-Proxy.Win32.Small.oi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\73DD46_10(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Proxy.Win32.Small.ok

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\9577AB_3(3).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Proxy.Win32.Small.ol

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\D9CCF6_4(4).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\77FECA_WOW(1).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\MPPDS.EXE
2) C:\WINDOWS.0\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F5D6D2_WOW.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\MPPDS.EXE
2) C:\WINDOWS.0\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\93C89B_MH.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\REMOTEDBG.DLL
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\WINDOWS.0\SYSTEM32\REMOTEDBG.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\WINDOWS.0\SYSTEM32\REMOTEDBG.DLL
删除失败!

延迟删除文件!

79F1AC_ga启动即退出
28654621
头像被屏蔽
发表于 2007-8-20 10:47:20 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\123\桌面\样本.rar'
C:\Documents and Settings\123\桌面\样本.rar
  [0] Archive type: RAR
  --> 45E2B2_tempb.exe
      [DETECTION] Contains code of the Windows virus W32/Virut.P
  --> 464081_(1)2838371.exe
      [DETECTION] Is the Trojan horse TR/Agent.ady.117
  --> 464081_2838371(1).exe
      [DETECTION] Is the Trojan horse TR/Agent.ady.117
  --> 464081_2838371.exe
      [DETECTION] Is the Trojan horse TR/Agent.ady.117
  --> 5DCE59_wl0618.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
  --> 6D6CC8_1637[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineG.MI.1
  --> 102245_2temp.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 3CCBEE_1(8).exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
      [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\123\桌面\2样本.rar'
C:\Documents and Settings\123\桌面\2样本.rar
  [0] Archive type: RAR
  --> 73DD46_10(1).exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 77FECA_wow(1).exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 79F1AC_ga.exe
      [DETECTION] Is the Trojan horse TR/Drop.Age.15671.B
  --> 93C89B_mh.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 9577AB_3(3).exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> D9CCF6_4(4).exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> F5D6D2_wow.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!


End of the scan: 2007年8月20日  10:45
Used time: 00:17 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     15 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      2 Archives were scanned
      2 Warnings
      0 Notes
      0 Hidden objects were found
eaco
发表于 2007-8-20 11:03:31 | 显示全部楼层
瑞星15个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
lacmiu
发表于 2007-8-20 12:12:12 | 显示全部楼层
ThreatFire也全部干掉哦~~
ILikeKaspersky
发表于 2007-8-20 12:35:20 | 显示全部楼层
不能进去了。。
nstyle
发表于 2007-8-20 13:55:30 | 显示全部楼层
红伞全部解决~
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-15 04:21 , Processed in 0.094807 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表