查看: 2424|回复: 15
收起左侧

[病毒样本] 另外18个

[复制链接]
promised
发表于 2007-8-30 21:16:57 | 显示全部楼层 |阅读模式
[MD5: 20C697 1EAA0C 126DC7 E00A7F 44521F FF141F C035CE D5A1EF 76FB46 0E286D 8D12B2 3DFCFF A8EAB5 4B7CA7 835CCB 9C4C64 7F1D5B A2071B]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
tiedan2
发表于 2007-8-30 21:18:54 | 显示全部楼层
Ikarus:
30:08:2007 21:18:22 SEARCHTASK "USER_DEFINED" started...
scan item: C:\Documents and Settings\zhenjia\桌面\样本1
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\1.exe - SIGNATURE FOUND "Virus.Win32.Delf.EVJ"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\10.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\11.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\12.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\13.exe - SIGNATURE FOUND "Generic.Onlinegames.1"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\14.exe - SIGNATURE FOUND "Trojan-Proxy.Win32.Delf.AN"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\15.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\16.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\19.exe - SIGNATURE FOUND "Trojan-Downloader.Win32.Zlob.and"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\2.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\20.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\3.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\4.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\5.exe - SIGNATURE FOUND "Trojan-Spy.Win32.Delf.uv"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\7.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\8.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
File scanned: C:\Documents and Settings\zhenjia\桌面\样本1\9.exe - SIGNATURE FOUND "Trojan-Dropper.Win32.Agent.ane"
30:08:2007 21:18:23 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 18
Virus found: 17
----------------------------------------------------
ssy275
发表于 2007-8-30 21:19:09 | 显示全部楼层
Result: 8 malware found
Trojan-PSW.Win32.OnLineGames.ate (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\7.exe
Trojan-PSW.Win32.OnLineGames.aqn (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\8.exe
Trojan-Spy.Win32.Delf.yr (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\10.exe
Trojan-PSW.Win32.OnLineGames.akj (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\19.exe
Backdoor.Win32.Agent.alh (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\20.exe
Trojan-Downloader.Win32.Delf.bko (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\1.exe
Trojan-PSW.Win32.OnLineGames.atc (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\3.exe
Trojan-Spy.Win32.Delf.uv (virus)
C:\Documents and Settings\ssy\×ÀÃæ\1.rar\5.exe
woai_jolin
发表于 2007-8-30 21:19:29 | 显示全部楼层
2007-8-30 21:19:28        Scanning Log
2007-8-30 21:19:28        Version of virus signature database: 2491 (20070830)
2007-8-30 21:19:28        Date: 30.8.2007  Time: 21:19:28
2007-8-30 21:19:28        Scanned disks, folders and files: F:\v\样本1.rar
2007-8-30 21:19:35        Number of scanned files: 19
2007-8-30 21:19:35        Number of threats found: 17
2007-8-30 21:19:35        Time of completion: 21:19:35  Total scanning time: 7 sec (00:00:07)
tracydk
发表于 2007-8-30 21:19:58 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\病毒样本\样本1.rar'
F:\病毒样本\样本1.rar
  [0] Archive type: RAR
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/Agent.12188
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.YR
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Agent.10980
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/SPY.Delf.AB
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/Agent.11791
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Agent.12196
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
  --> 14.exe
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.11049
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/Agent.11304
  --> 19.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 20.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.17971.1
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Small.BS.1
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Agent.11399
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.131
      [INFO]      The file was deleted!
promised
 楼主| 发表于 2007-8-30 21:20:56 | 显示全部楼层
ikarus套装到底有没有启发
C:\ABC\1.exe - 特征码 'Virus.Win32.Delf.EVJ' 被发现
C:\ABC\10.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\11.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\12.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\13.exe - 特征码 'Generic.Onlinegames.1' 被发现
C:\ABC\14.exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\15.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\16.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\19.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\2.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\20.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\3.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\4.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\5.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\6.exe - 可疑代码段 被发现 (Level: 160)
C:\ABC\7.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\8.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\9.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现

        18 文件被扫描
          (0 压缩档 0 文件)
        17 特征码被侦测
        1 可疑代码段被发现
        耗时: 0:00.329
uhthn2002
发表于 2007-8-30 21:23:27 | 显示全部楼层
C:\Documents and Settings\uhthn\Desktop\virus\6.exe : is suspected of Embedded.MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\7.exe : infected Trojan-PSW.Win32.OnLineGames.ate
C:\Documents and Settings\uhthn\Desktop\virus\8.exe : is suspected of Embedded.Trojan-PSW.Win32.OnLineGames.aqn
C:\Documents and Settings\uhthn\Desktop\virus\13.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\14.exe : infected MalwareScope.Trojan-PSW.Game.7
C:\Documents and Settings\uhthn\Desktop\virus\19.exe : infected Trojan-PSW.Win32.OnLineGames.akj
C:\Documents and Settings\uhthn\Desktop\virus\20.exe : infected Trojan.Arpspoof
C:\Documents and Settings\uhthn\Desktop\virus\1.exe : infected MalwareScope.Trojan-PSW.Game.14
C:\Documents and Settings\uhthn\Desktop\virus\5.exe : infected Trojan-Spy.Win32.Delf.uv


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 18   
- scanned         : 0       -  scanned    : 0       - scanned     : 18   
- contain viruses : 0       -  infected   : 0       - infected    : 7     
- deleted         : 0       -  suspicious : 0       - suspicious  : 2     


Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Heuristics - OPEN
Scan in - C:\Documents and Settings\uhthn\Desktop\virus

C:\Documents and Settings\uhthn\Desktop\virus\6.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\virus\7.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\8.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\9.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\10.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\11.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\12.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\13.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\virus\14.exe - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\virus\15.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\16.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\19.exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\virus\20.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\virus\1.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\virus\2.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\3.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\4.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\virus\5.exe - Suspicious of Trojan-Spy.Delf.2

18 Files scanned
0 Infected files found
18 Suspicious files found
0 Files cured
0 Files deleted
残缺的唯美
发表于 2007-8-30 21:26:13 | 显示全部楼层
扫描进行于:2007-8-30 21:25:43
扫描日志
NOD32版本 2492 (20070830) NT
命令行: D:\Documents and Settings\EKINCHENG\桌面\??1.rar

日期: 30.8.2007  时间:21:25:45
已开启反隐藏功能.
已扫描的磁盘,文件夹及文件:D:\Documents and Settings\EKINCHENG\桌面\??1.rar
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>7.exe - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>8.exe - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>9.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>10.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>11.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>12.exe - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>13.exe - Win32/PSW.OnLineGames.YA 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>14.exe - Win32/AutoRun.Q 蠕虫的变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>15.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>16.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>19.exe - Win32/PSW.Legendmir.NEP 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>20.exe - Win32/Agent.NEM 木马 - 是已删除对象的一部分
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>1.exe - Win32/TrojanDownloader.Delf.BHO 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>2.exe - 可能是 Win32/Genetik 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>3.exe - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>4.exe - Win32/PSW.OnLineGames.NEN 木马的变种
D:\Documents and Settings\EKINCHENG\桌面\??1.rar >>RAR >>5.exe - 可能是 Win32/PSW.OnLineGames.NEN 木马 的一个变种
已扫描的文件数目:19
已发现的病毒数目:17
已清除病毒的文件数目:1
完成时间: 21:25:52 总扫描时间:7 秒 (00:00:07)
saga3721
发表于 2007-8-30 21:31:33 | 显示全部楼层
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Delf.UV.131 [TR/Spy.Delf.UV.131]'
      detected in file 'C:\Documents and Settings\X\桌面\5.exe.
      Action performed: Deny access
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Delf.UV.131 [TR/Spy.Delf.UV.131]'
      detected in file 'C:\Documents and Settings\X\桌面\5.exe.
      Action performed: Deny access
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11399 [TR/Agent.11399]'
      detected in file 'C:\Documents and Settings\X\桌面\4.exe.
      Action performed: Deny access
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11399 [TR/Agent.11399]'
      detected in file 'C:\Documents and Settings\X\桌面\4.exe.
      Action performed: Deny access
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11399 [TR/Agent.11399]'
      detected in file 'C:\Documents and Settings\X\桌面\4.exe.
      Action performed: Deny access
2007-8-30 21:28 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Delf.UV.131 [TR/Spy.Delf.UV.131]'
      detected in file 'C:\Documents and Settings\X\桌面\5.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Small.BS.1 [TR/Spy.Small.BS.1]'
      detected in file 'C:\Documents and Settings\X\桌面\3.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Small.BS.1 [TR/Spy.Small.BS.1]'
      detected in file 'C:\Documents and Settings\X\桌面\3.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.17971.1 [TR/Agent.17971.1]'
      detected in file 'C:\Documents and Settings\X\桌面\2.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Dldr.Delf.bko [TR/Dldr.Delf.bko]'
      detected in file 'C:\Documents and Settings\X\桌面\1.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'BDS/Agent.alh.32 [BDS/Agent.alh.32]'
      detected in file 'C:\Documents and Settings\X\桌面\20.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'BDS/Agent.alh.32 [BDS/Agent.alh.32]'
      detected in file 'C:\Documents and Settings\X\桌面\20.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Crypt.XDR.Gen [TR/Crypt.XDR.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\19.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Crypt.XDR.Gen [TR/Crypt.XDR.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\19.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Crypt.XDR.Gen [TR/Crypt.XDR.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\19.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11304 [TR/Agent.11304]'
      detected in file 'C:\Documents and Settings\X\桌面\16.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11049 [TR/Agent.11049]'
      detected in file 'C:\Documents and Settings\X\桌面\15.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11049 [TR/Agent.11049]'
      detected in file 'C:\Documents and Settings\X\桌面\15.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Error detected
      Error detected in AntiVir Guard.
      Error message: Action failed for file: C:\Documents and Settings\All
      Users\Application Data\AntiVir PersonalEdition
      Classic\TEMP\AVGUARD_46df183b\AV00000154$0000004b.AV$
      Error code: [0x00000005 - 拒绝访问。].
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'HEUR/Malware [HEUR/Malware]'
      detected in file 'C:\Documents and Settings\All Users\Application Data\AntiVir
      PersonalEdition Classic\TEMP\AVGUARD_46df183b\AV00000154$0000004b.AV$.
      Action performed: Move file to quarantine
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'DR/Delphi.Gen [DR/Delphi.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\14.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'DR/Delphi.Gen [DR/Delphi.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\14.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12196 [TR/Agent.12196]'
      detected in file 'C:\Documents and Settings\X\桌面\12.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineGame.YF [TR/PSW.OnLineGame.YF]'
      detected in file 'C:\Documents and Settings\X\桌面\13.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/PSW.OnLineGame.YF [TR/PSW.OnLineGame.YF]'
      detected in file 'C:\Documents and Settings\X\桌面\13.exe.
      Action performed: Deny access
2007-8-30 21:27 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12196 [TR/Agent.12196]'
      detected in file 'C:\Documents and Settings\X\桌面\12.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11791 [TR/Agent.11791]'
      detected in file 'C:\Documents and Settings\X\桌面\11.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.11791 [TR/Agent.11791]'
      detected in file 'C:\Documents and Settings\X\桌面\11.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/SPY.Delf.AB [TR/SPY.Delf.AB]'
      detected in file 'C:\Documents and Settings\X\桌面\10.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/SPY.Delf.AB [TR/SPY.Delf.AB]'
      detected in file 'C:\Documents and Settings\X\桌面\10.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Delf.YR [TR/Spy.Delf.YR]'
      detected in file 'C:\Documents and Settings\X\桌面\8.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.10980 [TR/Agent.10980]'
      detected in file 'C:\Documents and Settings\X\桌面\9.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.10980 [TR/Agent.10980]'
      detected in file 'C:\Documents and Settings\X\桌面\9.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Delf.YR [TR/Spy.Delf.YR]'
      detected in file 'C:\Documents and Settings\X\桌面\8.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12188 [TR/Agent.12188]'
      detected in file 'C:\Documents and Settings\X\桌面\7.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Agent.12188 [TR/Agent.12188]'
      detected in file 'C:\Documents and Settings\X\桌面\7.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Gen [TR/Spy.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\6.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Gen [TR/Spy.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\6.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Gen [TR/Spy.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\6.exe.
      Action performed: Deny access
2007-8-30 21:26 [Guard] Malware found
      Virus or unwanted program 'TR/Spy.Gen [TR/Spy.Gen]'
      detected in file 'C:\Documents and Settings\X\桌面\6.exe.
      Action performed: Deny access


木马名称:Trojan-PSW.Win32.OnLineGames.jhv
程序:
C:\DOCUMENTS AND SETTINGS\X\桌面\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
微点卫士
发表于 2007-8-30 21:44:02 | 显示全部楼层
微点:
木马名称:Trojan-PSW.Win32.OnLineGames.jgx

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\7.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jhw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bvi

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\9.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bvj

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\10.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bvl

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\11.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jol

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bww

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\15.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan.Win32.Genetik.bvk

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\16.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jnh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\19.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Agent.dew

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\20.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Delf.gyh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jng

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.jhv

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Spy.Win32.Delf.dmb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\2.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\MXBMAN.DLL
2) C:\WINDOWS.0\SYSTEM32\MXBSET.EXE
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\6.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\QXEKUAFKPU.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\13.EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\DBGHLP32.EXE
2) C:\WINDOWS.0\SYSTEM32\DBGHLP32.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\样本1\14.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SYSWIN64.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSYS64.SYS
是否删除木马程序及其衍生物?


全杀咯
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-13 01:19 , Processed in 0.129772 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表