18个毒网产物更新

promised

[MD5: 14CA41 DA9E2B AE58D5 8C9195 7FB704 850623 62E4EE 2AE847 6D9664 186E94 CE7195 B563A4 7AA40D 119BB0 DC894A 2A72D1 7F8E4E CD519D]

tracydk

Starting the file scan:

Begin scan in 'F:\病毒样本\样本.rar'
F:\病毒样本\样本.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 6.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.26778.A
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/PSW.8794
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.bla
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 17.exe
      [DETECTION] Is the Trojan horse TR/PSW.Lmir.amj.109
  --> 18.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 20.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bdv
      [INFO]      The file was deleted!

uhthn2002

C:\Documents and Settings\uhthn\Desktop\virus\3.exe : infected Trojan.Goner.67
C:\Documents and Settings\uhthn\Desktop\virus\4.exe : infected MalwareScope.Trojan-PSW.Game.17
C:\Documents and Settings\uhthn\Desktop\virus\6.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\7.exe : is suspected of Trojan-PSW.Game.58 (paranoid heuristics)
C:\Documents and Settings\uhthn\Desktop\virus\10.exe : infected MalwareScope.Trojan-PSW.Game.17
C:\Documents and Settings\uhthn\Desktop\virus\14.exe : is suspected of Embedded.Backdoor.Win32.Delf.awy
C:\Documents and Settings\uhthn\Desktop\virus\17.exe : infected Trojan-PSW.Win32.Lmir.amj
C:\Documents and Settings\uhthn\Desktop\virus\19.exe : infected Trojan.MulDrop.5969


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 18   
- scanned         : 0       -  scanned    : 0       - scanned     : 18   
- contain viruses : 0       -  infected   : 0       - infected    : 6     
- deleted         : 0       -  suspicious : 0       - suspicious  : 2     


Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\3.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\4.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\6.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\7.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\virus\8.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\9.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\10.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\11.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\12.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\virus\13.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\14.exe - Suspicious of Win32.Backdoor.Delf.1
C:\Documents and Settings\uhthn\Desktop\virus\15.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\16.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\17.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\18.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\19.exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\virus\20.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\1.exe - Suspicious of Win32.Backdoor.Hupigon.5

18 Files scanned
0 Infected files found
18 Suspicious files found
0 Files cured
0 Files deleted

woai_jolin

2007-8-30 21:15:18        Scanning Log
2007-8-30 21:15:18        Version of virus signature database: 2491 (20070830)
2007-8-30 21:15:18        Date: 30.8.2007  Time: 21:15:18
2007-8-30 21:15:18        Scanned disks, folders and files: F:\v\样本.rar
2007-8-30 21:15:45        Number of scanned files: 19
2007-8-30 21:15:45        Number of threats found: 17
2007-8-30 21:15:45        Time of completion: 21:15:45  Total scanning time: 27 sec (00:00:27)
2007-8-30 21:15:45       
2007-8-30 21:15:45        Notes:
2007-8-30 21:15:45        [7] File is probably infected with an unknown virus.

tiedan2

Ikarus:
30:08:2007 21:14:56 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\样本
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\1.exe - SIGNATURE FOUND "BehavesLikeTrojan.StartPage"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\10.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\11.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\13.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\14.exe - SIGNATURE FOUND "MalwareScope.Backdoor.Hupigon.1"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\15.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\16.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\17.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\18.exe - SIGNATURE FOUND "Trojan-Spy.Win32.Bancos.ha"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\19.exe - SIGNATURE FOUND "Trojan-PWS.Win32.Agent.BU"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\20.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\3.exe - SIGNATURE FOUND "Generic.PWS.Games.3"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\4.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\6.exe - SIGNATURE FOUND "Trojan-Proxy.Win32.Delf.AN"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\7.exe - SIGNATURE FOUND "Generic.PWS.Games.2"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\8.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本\9.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
30:08:2007 21:14:57 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 18
Virus found: 17
----------------------------------------------------

ssy275

Result: 7 malware found
Trojan-PSW.Win32.OnLineGames.aii (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\4.exe
Trojan.Win32.Agent.axh (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\13.exe
Backdoor.Win32.Delf.awy (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\14.exe
Trojan-PSW.Win32.Lmir.bla (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\15.exe
Trojan-PSW.Win32.Lmir.amj (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\17.exe
Trojan-PSW.Win32.OnLineGames.aya (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\19.exe
Trojan-PSW.Win32.OnLineGames.bdv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\20.exe

wangjay1980

detected: virus Heur.StartPage (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/1.exe//PEPatch
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/3.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aii        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/4.exe//UPack
detected: virus Heur.Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/7.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bes        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/8.exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/9.exe//PE_Patch//UPack
detected: Trojan program Trojan.Win32.Agent.axh        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/13.exe//PE_Patch//UPack
detected: Trojan program Backdoor.Win32.Delf.awy        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/14.exe
detected: Trojan program Trojan-PSW.Win32.Lmir.bla        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/15.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Lmir.amj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/17.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.aya        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/19.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bdv        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/20.exe//PE_Patch//UPack

微点卫士

微点：
木马名称:Trojan-PSW.Win32.OnLineGames.iwr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jog

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.joj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.azi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\13.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Backdoor.Win32.Delf.boc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.joi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\16.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.Lmir.dgn

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.joh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\20.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\1.EXE
修改注册表项:
HKCU\SoftWarE\MicroSoft\INternet EXplorer\MaIn\START PAGE
是否阻止?
木马名称:Trojan-PSW.Win32.Agent.epf

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\3.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\LYLOADER.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\7.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\RXAVPW0.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\6.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\8.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVMSMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVMSMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\9.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVDHMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVDHMON.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\10.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\KULIONQJ.EXE
2) C:\WINDOWS.0\KULIONQJ.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\15.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\ZTAMAN.DLL
2) C:\WINDOWS.0\SYSTEM32\ZTASET.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\18.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\~SA17.TMP
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\19.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\NPPTOOLS.DLL
2) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\RAVSONS.EXE
3) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\XRU.DLL
4) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\E5WEGESH.SYS
是否删除木马程序及其衍生物?
木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

全杀咯

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.8.31 0:22:15

文件:F:\070801\样本\4.exe | 感染:Win32.Virut.5 [129>20070822_ny0010.axx]3(2.2)
操作:删除文件
文件:F:\070801\样本\13.exe | 感染:Trojan.DownLoader.30259 [45>20070820_ny0009.axx]3(1.1)
操作:删除文件
文件:F:\070801\样本\14.exe | 感染:virus [184>20070822_ny0010.axx]3(1.1)
操作:删除文件
文件:F:\070801\样本\17.exe | 感染:virus [325>20070824_ny0011.axx]3(1.1)
操作:删除文件

扫描完成|病毒:4 文件:26|耗时:10805
----------

红心王子

江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 11.00.700
        病毒库日期 2007-08-30
        更新日期 2007-08-31

扫描目标 C:\Documents and Settings\Administrator\桌面\样本.rar

开始时间 2007-08-31 07:15:52

在 C:\Documents and Settings\Administrator\桌面\样本.rar->4.exe 中发现 Trojan/PSW.GamePass.wyq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->6.exe 中发现 Trojan/PSW.QQPass.rgd 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->13.exe 中发现 Trojan/Agent.nsv 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->14.exe 中发现 Backdoor/Delf.bfy 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->15.exe 中发现 Trojan/PSW.Lmir.cgq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->17.exe 中发现 TrojanDownloader.Agent.oeq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->18.exe 中发现 Trojan/PSW.GamePass.xpt 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\样本.rar->19.exe 中发现 Trojan/PSW.GamePass.xro 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :456                                 病毒体 :8         
                   删除 :8                                     解毒 :0         
    扫描速度(千字节/秒) :39197                             扫描时间 :00:00:03
    扫描文件速度(个/秒) :152