收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 10个，同事电脑上的！
12下一页
返回列表 发新帖
查看: 3187|回复: 17
收起左侧

[病毒样本] 10个，同事电脑上的！

[复制链接]
欠妳緈諨
发表于 2007-8-26 14:38:17 | 显示全部楼层 |阅读模式
今天帮同事看电脑，他用的是诺顿，机子简直就是养马场，随便发几个大家玩玩

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

残缺的唯美
发表于 2007-8-26 14:39:24 | 显示全部楼层
2007-8-24 14:38:51        Scanning Log
2007-8-24 14:38:51        Version of virus signature database: 2484 (20070825)
2007-8-24 14:38:51        Date: 24.8.2007  Time: 14:38:51
2007-8-24 14:38:51        Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\10.rar
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » winow.exe - probably unknown NewHeur_PE virus [7]
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » winwm.exe - probably unknown NewHeur_PE virus [7]
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » wmsj.exe - probably unknown NewHeur_PE virus [7]
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » cmdbcs.dll - probably a variant of Win32/Genetik trojan
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » LYMANGR.DLL - is OK
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » NewTemp.exe - probably a variant of Win32/PSW.Delf.NHI trojan
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » NewTemp.dll - probably a variant of Win32/PSW.OnLineGames.NBR trojan
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » kulionwm.dll - probably a variant of Win32/PSW.Delf.NDI trojan
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » kulionzx.dll - probably a variant of Win32/PSW.Delf.NDI trojan
2007-8-24 14:38:54        D:\Documents and Settings\EKINCHENG\桌面\10.rar » RAR » kulionzx.exe - probably unknown NewHeur_PE virus [7]
2007-8-24 14:38:54        Number of scanned files: 11
2007-8-24 14:38:54        Number of threats found: 9
2007-8-24 14:38:54        Time of completion: 14:38:54  Total scanning time: 3 sec (00:00:03)
2007-8-24 14:38:54       
2007-8-24 14:38:54        Notes:
2007-8-24 14:38:54        [7] File is probably infected with an unknown virus.
回复

举报

yashoo
头像被屏蔽
发表于 2007-8-26 14:41:56 | 显示全部楼层
诺顿的稳定在于能够和这些马马一起共存，让电脑能够继续工作

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

saga3721
发表于 2007-8-26 14:42:08 | 显示全部楼层
2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winwm.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\kulionzx.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Steal.28160.19 [TR/PSW.Steal.28160.19]'
      detected in file 'C:\Documents and Settings\X\桌面\kulionwm.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\kulionzx.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Steal.28672.6 [TR/PSW.Steal.28672.6]'
      detected in file 'C:\Documents and Settings\X\桌面\kulionzx.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.Steal.28160.19 [TR/PSW.Steal.28160.19]'
      detected in file 'C:\Documents and Settings\X\桌面\kulionwm.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.QQPass.NCA.1 [TR/PSW.QQPass.NCA.1]'
      detected in file 'C:\Documents and Settings\X\桌面\NewTemp.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLine.agb.2 [TR/PSW.OnLine.agb.2]'
      detected in file 'C:\Documents and Settings\X\桌面\LYMANGR.DLL.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.QQPass.NCA.1 [TR/PSW.QQPass.NCA.1]'
      detected in file 'C:\Documents and Settings\X\桌面\NewTemp.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Hook.Shell.272 [TR/Hook.Shell.272]'
      detected in file 'C:\Documents and Settings\X\桌面\NewTemp.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Hook.Shell.272 [TR/Hook.Shell.272]'
      detected in file 'C:\Documents and Settings\X\桌面\NewTemp.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLine.agb.2 [TR/PSW.OnLine.agb.2]'
      detected in file 'C:\Documents and Settings\X\桌面\LYMANGR.DLL.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Dldr.Zlob.byg.2 [TR/Dldr.Zlob.byg.2]'
      detected in file 'C:\Documents and Settings\X\桌面\cmdbcs.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\wmsj.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\wmsj.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Dldr.Zlob.byg.2 [TR/Dldr.Zlob.byg.2]'
      detected in file 'C:\Documents and Settings\X\桌面\cmdbcs.dll.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winwm.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winwm.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winow.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winow.exe.
      Action performed: Deny access

2007-8-26 14:40 [Guard] Malware found
      Virus or unwanted program 'TR/Drop.Agen.26778.A [TR/Drop.Agen.26778.A]'
      detected in file 'C:\Documents and Settings\X\桌面\winow.exe.
      Action performed: Deny access
回复

举报

The EQs
发表于 2007-8-26 14:44:12 | 显示全部楼层
万恶的dll

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

FBAV
发表于 2007-8-26 14:44:43 | 显示全部楼层
为PC护航风暴微塔
_____________________________________________
                                          
             风暴微塔反间谋
[强力查杀各种Win32位的病毒,木马,蠕虫,恶意软件]              
                            [内测版]      
                   http://www.v0day.com/  
----------------------------------------------
开始扫描……


正在检查启动……
[C:\Documents and Settings\Administrator\桌面\virus\10\winow.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\10\winow.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\10\winwm.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\10\winwm.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\10\wmsj.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\10\wmsj.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\10\NewTemp.exe]
                    …………引擎[3]发现Suspicious File
[C:\Documents and Settings\Administrator\桌面\virus\10\kulionzx.exe]
                    …………特征码引擎[1]发现病毒
[C:\Documents and Settings\Administrator\桌面\virus\10\kulionzx.exe]
                    …………引擎[2]发现病毒:Win32.Unknow
[C:\Documents and Settings\Administrator\桌面\virus\10\NewTemp.dll]
                    …………引擎[3]发现Suspicious File
文件数:10  病毒数:10  比重:1.111111111111
OK  扫描完毕！
回复

举报

微点卫士
发表于 2007-8-26 14:49:53 | 显示全部楼层
微点：
木马名称:Trojan-PSW.Win32.WOW.avh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINOW.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ipc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WMSJ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.iyg

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\LYMANGR.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Delf.eur

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEWTEMP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.izq

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEWTEMP.DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dio

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\KULIONZX.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WINWM.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\WINWM.EXE
2) C:\WINDOWS.0\KULIONWM.DLL
是否删除木马程序及其衍生物?
回复

举报

qqq000@qq.com
头像被屏蔽
发表于 2007-8-26 15:07:40 | 显示全部楼层
----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.8.26 15:7:31

文件:F:\070824\10\winow.exe | 感染:Trojan.PWS.Gamania.3451 [216>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070824\10\winwm.exe | 感染:virus [514>20070819_ny0008.axx]3(1.1)
操作:删除文件
文件:F:\070824\10\wmsj.exe | 感染:virus [385>20070819_ny0008.axx]3(2.2)
操作:删除文件
文件:F:\070824\10\cmdbcs.dll | 感染:Trojan.PWS.Gamania.3276 [148>20070811_ny0005.axx]3(1.1)
操作:删除文件
文件:F:\070824\10\LYMANGR.DLL | 感染:virus [188>20070822_ny0010.axx]2(1.1)
操作:删除文件
文件:F:\070824\10\NewTemp.exe | 感染:virus [158>20070824_ny0011.axx]3(2.2)
操作:删除文件
文件:F:\070824\10\NewTemp.dll | 感染:virus [273>20070824_ny0011.axx]3(1.1)
操作:删除文件
文件:F:\070824\10\kulionzx.exe | 感染:virus [303>20070822_ny0010.axx]3(1.1)
操作:删除文件

扫描完成|病毒:8 文件:10|耗时:4206
----------
回复

举报

小邪邪
发表于 2007-8-26 15:31:27 | 显示全部楼层

咖啡报：

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

碧水寒潭
发表于 2007-8-26 15:38:53 | 显示全部楼层
Start of the scan: 2007年8月26日  15:38

Starting the file scan:

Begin scan in 'H:\AV-TEST'
H:\AV-TEST\10.rar
  [0] Archive type: RAR
  --> winow.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> winwm.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> wmsj.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> cmdbcs.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.byg.2
  --> LYMANGR.DLL
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> NewTemp.exe
      [DETECTION] Is the Trojan horse TR/Hook.Shell.272
  --> NewTemp.dll
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.NCA.1
  --> kulionwm.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.28160.19
  --> kulionzx.dll
      [DETECTION] Is the Trojan horse TR/PSW.Steal.28672.6
  --> kulionzx.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
      [INFO]      The file was deleted!


End of the scan: 2007年8月26日  15:38
Used time: 00:12 min

The scan has been done completely.

      1 Scanning directories
     11 Files were scanned
     10 viruses and/or unwanted programs were found
      0 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-20 18:23 , Processed in 0.083750 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表