12
返回列表 发新帖
楼主: 欠妳緈諨
收起左侧

[病毒样本] 一包18个

[复制链接]
残缺的唯美
发表于 2007-9-9 16:17:56 | 显示全部楼层
Scan performed at: 2007-9-9 16:17:14
Scanning Log
NOD32 version 2515 (20070909) NT
Command line: D:\Documents and Settings\EKINCHENG\桌面\18ge.zip

Date: 9.9.2007  Time: 16:17:17
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\Documents and Settings\EKINCHENG\桌面\18ge.zip
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?18.exe - Win32/Agent.NEM trojan - was a part of the deleted object
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?2.exe - Win32/PSW.OnLineGames.NEN trojan - was a part of the deleted object
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?3.exe - probably a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?4.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?5.exe - a variant of Win32/PSW.WOW.UT trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?6.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?7.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?8.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?9.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?10.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?11.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?12.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?13.exe - a variant of Win32/PSW.Legendmir.NEP trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?14.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?15.exe - probably a variant of Win32/Genetik trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?16.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\Documents and Settings\EKINCHENG\桌面\18ge.zip ?ZIP ?17.exe - Win32/Delf.NGD trojan - was a part of the deleted object
Number of scanned files: 19
Number of threats found: 17
Number of files cleaned: 1
Time of completion: 16:17:23 Total scanning time: 6 sec (00:00:06)
uhthn2002
发表于 2007-9-9 19:32:34 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 3961
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\18.exe - Infected with PDB-3197 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\1.exe - Infected with PDB-699 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\2.exe - Infected with PDB-1745 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\3.exe - Infected with PDB-419 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\4.exe - Infected with PDB-3477 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\5.exe - Infected with PDB-984 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\6.exe - Infected with PDB-2040 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\7.exe - Infected with PDB-492 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\8.exe - Infected with PDB-2996 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\9.exe - Infected with PDB-60 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\10.exe - Infected with PDB-867 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\11.exe - Infected with PDB-1476 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\12.exe - Infected with PDB-704 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\13.exe - Infected with PDB-2722 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\14.exe - Infected with PDB-3903 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\15.exe - Infected with PDB-154 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\16.exe - Infected with PDB-293 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\17.exe - Infected with Win32.PDB-500 Malware program - Deleted

18 Files scanned
18 Infected files found
0 Suspicious files found
0 Files cured
18 Files deleted
king6808
发表于 2007-9-9 20:55:57 | 显示全部楼层
已删除:木马程序 Backdoor.Win32.Agent.alh        文件 : F:\v\18ge.zip/18.exe//UPack
已删除:木马程序 Trojan.Win32.Agent.bhy        文件 : F:\v\18ge.zip/1.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.Delf.zm        文件 : F:\v\18ge.zip/2.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.cda        文件 : F:\v\18ge.zip/3.exe
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.blb        文件 : F:\v\18ge.zip/4.exe
已删除:木马程序 Trojan-PSW.Win32.WOW.vq        文件 : F:\v\18ge.zip/5.exe//FSG
已删除:木马程序 Trojan-Spy.Win32.Delf.agk        文件 : F:\v\18ge.zip/6.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.bjn        文件 : F:\v\18ge.zip/7.exe//PE_Patch.UPX//UPX
已删除:木马程序 Trojan-Spy.Win32.Delf.abi        文件 : F:\v\18ge.zip/8.exe
已删除:木马程序 Trojan-Spy.Win32.Delf.abi        文件 : F:\v\18ge.zip/9.exe
已删除:木马程序 Trojan-Spy.Win32.Delf.ago        文件 : F:\v\18ge.zip/10.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.cdb        文件 : F:\v\18ge.zip/11.exe//UPack
已删除:木马程序 Trojan-Spy.Win32.Delf.abi        文件 : F:\v\18ge.zip/12.exe
已删除:木马程序 Trojan-PSW.Win32.Delf.aav        文件 : F:\v\18ge.zip/13.exe//PE_Patch//UPack
已删除:木马程序 Trojan-Spy.Win32.Delf.afu        文件 : F:\v\18ge.zip/14.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.bou        文件 : F:\v\18ge.zip/15.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.bwr        文件 : F:\v\18ge.zip/16.exe//PE_Patch.UPX//UPX
已删除:木马程序 Backdoor.Win32.Kolmat.b        文件 : F:\v\18ge.zip/17.exe//PE_Patch.UPX//UPX
qqq000@qq.com
头像被屏蔽
发表于 2007-9-9 22:57:02 | 显示全部楼层
[凝逸反毒] (http://hi.baidu.com/503165656)

       [凝逸.扫描病毒引擎-日志]       2007.9.9 22:56:57

文件:F:\070907\18ge\18.exe | 感染:Trojan.Arpspoof [56>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070907\18ge\2.exe | 感染:virus [654>20070906_ny0013.axx]3(3.8)
操作:删除文件
文件:F:\070907\18ge\4.exe | 感染:virus [656>20070906_ny0013.axx]3(4.8)
操作:删除文件
文件:F:\070907\18ge\6.exe | 感染:virus [458>20070906_ny0014.axx]3(7.7)
操作:删除文件
文件:F:\070907\18ge\7.exe | 感染:virus [603>20070906_ny0013.axx]3(1.1)
操作:删除文件
文件:F:\070907\18ge\8.exe | 感染:Trojan.PWS.Lineage.3229 [97>20070906_ny0013.axx]3(2.3)
操作:删除文件
文件:F:\070907\18ge\9.exe | 感染:virus [666>20070906_ny0013.axx]3(1.3)
操作:删除文件
文件:F:\070907\18ge\11.exe | 感染:virus [457>20070906_ny0014.axx]3(3.3)
操作:删除文件
文件:F:\070907\18ge\12.exe | 感染:Trojan.PWS.Gamania.3696 [89>20070906_ny0013.axx]3(2.2)
操作:删除文件
文件:F:\070907\18ge\14.exe | 感染:virus [667>20070906_ny0013.axx]3(2.2)
操作:删除文件
文件:F:\070907\18ge\15.exe | 感染:virus [618>20070906_ny0013.axx]3(2.6)
操作:删除文件
文件:F:\070907\18ge\16.exe | 感染:Trojan.PWS.Gamania.3897 [33>20070906_ny0013.axx]3(1.1)
操作:删除文件
文件:F:\070907\18ge\17.exe | 感染:Trojan.Inject.263 [108>20070906_ny0013.axx]2(1.1)
操作:删除文件

扫描完成|病毒:13 文件:18|耗时:4236
----------
perfectycb
发表于 2007-9-9 23:19:32 | 显示全部楼层
Begin scan in 'D:\18ge.zip'
D:\18ge.zip
  [0] Archive type: ZIP
  --> 18.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.bhy.3
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.12716
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agk
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bjn.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Agent.12334
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.abi.2
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ago
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.abi.3
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.afu
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.11800
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy.3
  --> 17.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Kolmat.B.18 Backdoor server programs
      [INFO]      The file was deleted!


End of the scan: 2007年9月9日  23:18
Used time: 01:00 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     18 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
ssy275
发表于 2007-9-9 23:54:00 | 显示全部楼层
C:\Documents and Settings\ssy\桌面\18ge.zip
  [0] Archive type: ZIP
  --> 18.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.alh.32 Backdoor server programs
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Agent.bhy.3
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.12716
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.blb
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.agk
  --> 7.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.bjn.1
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Agent.12334
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.abi.2
  --> 10.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.ago
  --> 11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.cdb
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.abi.3
  --> 13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> 14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Delf.afu
  --> 15.exe
      [DETECTION] Is the Trojan horse TR/Agent.11800
  --> 16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.boy.3
  --> 17.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Kolmat.B.18 Backdoor server programs
      [INFO]      A backup was created as '474b172f.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: 2007年9月9日  23:53
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     18 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-6 17:53 , Processed in 0.094943 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表