查看: 2134|回复: 12
收起左侧

[病毒样本] 一包10个

[复制链接]
欠妳緈諨
发表于 2007-9-3 12:00:07 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
gho
发表于 2007-9-3 12:08:19 | 显示全部楼层
2007-9-3        12:07:04        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\2.exe        Downloader-AAP.gen (Trojan)
2007-9-3        12:07:05        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\3.exe        New Malware.aj (Trojan)
2007-9-3        12:07:05        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\4.exe        New Malware.aj (Trojan)
2007-9-3        12:07:05        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\6.exe        New Malware.aj (Trojan)
2007-9-3        12:07:05        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\7.exe        New Malware.aj (Trojan)
2007-9-3        12:07:05        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\8.exe        New Malware.aj (Trojan)
2007-9-3        12:07:06        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\9.exe        New Malware.aj (Trojan)
2007-9-3        12:07:06        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\10.exe        New Malware.aj (Trojan)
2007-9-3        12:07:06        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\1.exe        New Malware.aj (Trojan)
scottxzt
发表于 2007-9-3 12:09:40 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\dell\桌面\10virus.rar'
C:\Documents and Settings\dell\桌面\10virus.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Nurech.BW
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjk
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.csd
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bki
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4125
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PC
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkr
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4135
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4126
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkq
      [INFO]      The file was successfully wiped!
      [INFO]      The file was deleted!


End of the scan: 2007年9月3日  12:09
Used time: 00:11 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
     10 viruses and/or unwanted programs were found
wangjay1980
发表于 2007-9-3 12:32:23 | 显示全部楼层
detected: Trojan program Trojan-Downloader.Win32.Small.fjp        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/2.exe
detected: Trojan program Trojan-Downloader.Win32.Small.fjk        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/3.exe//PE_Patch//UPack
detected: Trojan program Trojan-Downloader.Win32.Agent.csd        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/4.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bki        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/5.exe
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/6.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Agent.pc        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/7.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bkr        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ble        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/9.exe//PE_Patch//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/10.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bkq        File: C:\Documents and Settings\Owner\×ÀÃæ\10virus.rar/1.exe//PE_Patch//UPack
ssy275
发表于 2007-9-3 13:04:34 | 显示全部楼层
Result: 8 malware found
Trojan-Downloader.Win32.Small.fjp (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\2.exe
Trojan-Downloader.Win32.Small.fjk (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\3.exe
Trojan-Downloader.Win32.Agent.csd (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\4.exe
Trojan-PSW.Win32.OnLineGames.bki (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\5.exe
Trojan-PSW.Win32.Agent.pc (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\7.exe
Trojan-PSW.Win32.OnLineGames.bkr (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\8.exe
Trojan-PSW.Win32.OnLineGames.ble (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\9.exe
Trojan-PSW.Win32.OnLineGames.bkq (virus)
C:\Documents and Settings\ssy\×ÀÃæ\10virus.rar\1.exe
capsshift
发表于 2007-9-3 13:07:26 | 显示全部楼层
来晚了,上面已经有人用红伞测试了。
tarting the file scan:

Begin scan in 'C:\Documents and Settings\*****\桌面\10virus.rar'
C:\Documents and Settings\****\桌面\10virus.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Nurech.BW
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.fjk
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.csd
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bki
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4125
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PC
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkr
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4135
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.4126
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bkq
      [INFO]      The file was moved to '4751967e.qua'!
feihongtian 该用户已被删除
发表于 2007-9-3 15:07:03 | 显示全部楼层
扫描开始时间: 2007-9-3 15:06:09
扫描日志
NOD32 版本 2498 (20070902) NT
命令行: F:\virus\10virus.rar

日期: 2007年9月3日  时间: 15:06:10
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: F:\virus\10virus.rar
F:\virus\10virus.rar ?RAR ?2.exe<病毒 - Win32/TrojanDownloader.Nurech.BV 木马>
F:\virus\10virus.rar ?RAR ?3.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?4.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?5.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?6.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?8.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?9.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?10.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
F:\virus\10virus.rar ?RAR ?1.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NEP 木马 变种>
已扫描文件数量: 10
已发现病毒数量: 9
完成时间: 15:06:13 总共扫描时间: 3 秒 (00:00:03)
1688388728
发表于 2007-9-3 15:21:50 | 显示全部楼层
已检测到: 木马程序 Trojan-Downloader.Win32.Small.fjp        URL: http://bbs.kafan.cn/attachment.php?aid=122739//2.exe
残缺的唯美
发表于 2007-9-3 15:26:44 | 显示全部楼层
咖啡杀2个=。=
啊弥陀佛
发表于 2007-9-3 15:36:33 | 显示全部楼层
木马名称:未知间谍软件 程序: C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\4.EXE 是木马程序! 已成功阻止其运行,是否要删除此文件?


木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?



木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\8.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?



木马名称:未知间谍软件
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\2.EXE
是否删除木马程序及其衍生物?



程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\6.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\NETMEETING\RAVQJMON.EXE
2) C:\PROGRAM FILES\NETMEETING\RAVQJMON.DAT
是否删除木马程序及其衍生物?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\10VIRUS\7.EXE
是否删除木马程序及其衍生物?



微点全砍掉咯

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-16 11:35 , Processed in 0.125749 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表