查看: 3342|回复: 11
收起左侧

[病毒样本] 有料,不抓了

[复制链接]
青玉案
发表于 2007-9-3 18:17:40 | 显示全部楼层 |阅读模式
sdbsky
发表于 2007-9-3 18:46:44 | 显示全部楼层
http://www.121161.com/ad.jpg
------>

http://www.15197.com/0.exe
..........
http://www.15197.com/21.exe
残缺的唯美
发表于 2007-9-3 18:49:27 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
mofunzone
发表于 2007-9-3 18:53:13 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\TDDOWNLOAD.rar'
C:\Documents and Settings\Administrator\My Documents\
  TDDOWNLOAD.rar
    [0] Archive type: RAR
    --> 0.exe
        [DETECTION] Contains signature of the worm WORM/QQPass.A
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Agent.17971.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.YF
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/Agent.11112
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Spy.Delf.acb
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> 11.exe
        [DETECTION] Is the Trojan horse TR/Spy.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 12.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/WinterLove.BJ.1 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> 13.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 14.exe
        [DETECTION] Contains signature of the dropper DR/Delphi.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 15.exe
        [DETECTION] Is the Trojan horse TR/Agent.12366
        [WARNING]   Infected files in archives cannot be repaired!
    --> 16.exe
        [DETECTION] Is the Trojan horse TR/Agent.12444
        [WARNING]   Infected files in archives cannot be repaired!
    --> 17.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bke
        [WARNING]   Infected files in archives cannot be repaired!
    --> 18.exe
        [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.127
        [WARNING]   Infected files in archives cannot be repaired!
    --> 19.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 20.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 21.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> ad.jpg
        [DETECTION] Contains signature of the exploits EXP/Ani.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年9月4日  03:52
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     24 Files were scanned
     23 viruses and/or unwanted programs were found
      3 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -2 Files not concerned
      1 Archives were scanned
     24 Warnings
      0 Notes
      0 Hidden objects were found

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
tracydk
发表于 2007-9-3 18:55:34 | 显示全部楼层
补丁全打,病毒都进不来
uhthn2002
发表于 2007-9-3 19:03:45 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 2684
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder (2)

C:\Documents and Settings\uhthn\Desktop\New Folder (2)\0.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\1.exe - Infected with Win32.PDB-2364 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\2.exe - Suspicious of Win32.Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\3.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\4.exe - Suspicious of Trojan-Downloader.Small.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\5.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\6.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\7.exe - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\8.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\9.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\10.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\11.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\12.exe - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\13.exe - Infected with MalwareSpy.PDB-967 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\14.exe - Infected with Win32.PDB-2345 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\15.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\16.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\17.exe - Suspicious of Trojan-Spy.Delf.2
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\18.exe - Infected with PDB-382 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\19.exe - Infected with Win32.PDB-2305 Malware program (Paranoia Database) - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\20.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\21.exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder (2)\ad.jpg - Suspicious of Exploit.IMG-ANI.gen

23 Files scanned
5 Infected files found
18 Suspicious files found
0 Files cured
5 Files deleted
tracydk
发表于 2007-9-3 19:04:34 | 显示全部楼层
LS的杀软件很厉害啊,自己编写的?
有地方下载吗?
promised
发表于 2007-9-3 19:17:30 | 显示全部楼层
C:\ABC\TDDOWNLOAD\0.exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\TDDOWNLOAD\1.exe - 特征码 'MalwareScope.Backdoor.Hupigon.1' 被发现
C:\ABC\TDDOWNLOAD\10.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\11.exe - 特征码 'Generic.PWS.WoW' 被发现
C:\ABC\TDDOWNLOAD\12.exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\TDDOWNLOAD\13.exe - 特征码 'Trojan-Downloader.Win32.Small.czl' 被发现
C:\ABC\TDDOWNLOAD\14.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.afd' 被发现
C:\ABC\TDDOWNLOAD\15.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\16.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\17.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\18.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\19.exe - 特征码 'MalwareScope.Backdoor.Hupigon.1' 被发现
C:\ABC\TDDOWNLOAD\2.exe - 特征码 'MalwareScope.Trojan-PWS.Game.16' 被发现
C:\ABC\TDDOWNLOAD\20.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\21.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\3.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\4.exe - 特征码 'Generic.PWS.Games.1' 被发现
C:\ABC\TDDOWNLOAD\5.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\6.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\7.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\TDDOWNLOAD\8.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\9.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\TDDOWNLOAD\ad.jpg - 特征码 'Exploit.Win32.IMG-ANI.i' 被发现

        23 文件被扫描
          (0 压缩档 0 文件)
        23 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.391
gho
发表于 2007-9-3 19:34:10 | 显示全部楼层
2007-9-3        19:29:44        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\0.exe        PWS-QQPass.dll (Trojan)
2007-9-3        19:29:46        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\3.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:46        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\5.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:46        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\6.exe        New Malware.n (Trojan)
2007-9-3        19:29:46        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\8.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:47        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\9.exe        New Malware.n (Trojan)
2007-9-3        19:29:47        Cleaned         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\10.exe        W32/HLLP.Philis.ku (Virus)
2007-9-3        19:29:47        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\10.exe        New Malware.u (Trojan)
2007-9-3        19:29:50        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\10.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:53        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\12.exe        PWS-QQGame (Trojan)
2007-9-3        19:29:53        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\13.exe        Downloader.gen.a (Trojan)
2007-9-3        19:29:53        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\14.exe        PWS-LegMir.dll (Trojan)
2007-9-3        19:29:53        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\15.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:54        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\16.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:54        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\17.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:54        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\18.exe        PWS-OnlineGames.f (Trojan)
2007-9-3        19:29:54        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\20.exe        New Malware.n (Trojan)
2007-9-3        19:29:54        Moved (Clean failed because the file isn't cleanable)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\21.exe        New Malware.n (Trojan)
2007-9-3        19:29:54        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\卡巴小助手_V3[1].6\ad.jpg        Exploit-ANIfile.c (Trojan)
gho
发表于 2007-9-3 19:36:42 | 显示全部楼层
剩下的被nod和卡巴杀光了
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-16 14:54 , Processed in 0.130754 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表