12
返回列表 发新帖
楼主: gzg
收起左侧

[病毒样本] 偶也来放出9个病毒

[复制链接]
ssy275
发表于 2007-9-10 21:38:48 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\ssy\桌面\9-1.rar'
C:\Documents and Settings\ssy\桌面\9-1.rar
  [0] Archive type: RAR
  --> 9-10²¡¶¾Ñù±¾\msvci.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 9-10²¡¶¾Ñù±¾\Recycled.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 9-10²¡¶¾Ñù±¾\avwlamn.dll
      [DETECTION] Is the Trojan horse TR/PSW.Delf.ZN
  --> 9-10²¡¶¾Ñù±¾\dikonfj.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 9-10²¡¶¾Ñù±¾\kapjazy.dll
      [DETECTION] Is the Trojan horse TR/PSW.Delf.aaq.1
  --> 9-10²¡¶¾Ñù±¾\kvmxbma.dll
      [DETECTION] Is the Trojan horse TR/Agent.19530
  --> 9-10²¡¶¾Ñù±¾\rxavpw0.dll
      [DETECTION] Is the Trojan horse TR/PSW.Agent.PO.1
  --> 9-10²¡¶¾Ñù±¾\yljkaig.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      A backup was created as '4716490b.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
The EQs
发表于 2007-9-10 21:53:24 | 显示全部楼层
Scan performed at: 2007-9-10 21:52:55
Scanning Log
NOD32 version 2519 (20070910) NT
Command line: C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar
Operating memory - is OK

Date: 10.9.2007  Time: 21:52:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar
C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar ?RAR ?9-10病毒样本\Recycled.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar ?RAR ?9-10病毒样本\dikonfj.exe - a variant of Win32/Delf.NCZ worm
C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar ?RAR ?9-10病毒样本\kapjazy.dll - probably a variant of Win32/PSW.OnLineGames.NEN trojan
C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar ?RAR ?9-10病毒样本\kvmxbma.dll - Win32/PSW.OnLineGames.NEN trojan - was a part of the deleted object
C:\Documents and Settings\Don johnson\桌面\9-10病毒样本.rar ?RAR ?9-10病毒样本\yljkaig.exe - a variant of Win32/Delf.NCZ worm
Number of scanned files: 11
Number of threats found: 5
Number of files cleaned: 1
Time of completion: 21:52:59 Total scanning time: 0 sec (00:00:00)

Notes:
[7] File is probably infected with an unknown virus.
uhthn2002
发表于 2007-9-10 22:12:56 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4162
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\yljkaig.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder\AutoRun.inf - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\avwlamn.dll - Suspicious of Win32.Trojan-PSW.OnLineGames.3
C:\Documents and Settings\uhthn\Desktop\New Folder\dikonfj.exe - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder\explorer.dat - Suspicious of Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\kapjazy.dll - Suspicious of Win32.Trojan-PSW.OnLineGames.3
C:\Documents and Settings\uhthn\Desktop\New Folder\kvmxbma.dll - Infected with Win32.PDB Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\msvci.exe - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\Recycled.exe - Suspicious of Trojan-PSW.Game.8
C:\Documents and Settings\uhthn\Desktop\New Folder\rxavpw0.dll - Infected with PDB Malware program - Deleted

10 Files scanned
2 Infected files found
7 Suspicious files found
0 Files cured
2 Files deleted
youyangyun
发表于 2007-9-11 01:06:00 | 显示全部楼层
卡巴621不让下,唉,可惜。
wuyadj
发表于 2007-9-13 22:20:29 | 显示全部楼层
NOD32找到5个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
zzx129
发表于 2007-9-14 00:11:46 | 显示全部楼层
Virus infection found

File which you are trying download contains virus. Loading has been interrupted.
Technical data:
Error name: Virus Alert
Virus description PSW.Generic3.IF, PSW.Generic3.AAD, PSW.Generic5.KAP, Worm/Generic.BTK, PSW.OnlineGames.IKK, PSW.OnlineGames.ICL, PSW.OnlineGames.IDU, Worm/Generic.BTK, PSW.OnlineGames.IEY
Error code: -1602
Requested URL: /attachment.php?aid=126239
Requested HTTP method: GET
Requested ContentType: application/octet-stream
Requested IP: 211.136.18.143
红心王子
发表于 2007-9-14 10:07:30 | 显示全部楼层
2007-9-14        9:58:10        1189735090        SYSTEM        1280        Sign of "Win32:Agent-ICL [Trj]" has been found in "http://bbs.kafan.cn/attachment.php?aid=127389\vip.exe\[Upack]\[Embedded#DLL]" file.  
2007-9-14        10:06:12        1189735572        Administrator        3472        Sign of "Win32:Delf-FVM [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\9-10病毒样本.rar\9-10病毒样本\avwlamn.dll" file.  
2007-9-14        10:06:21        1189735581        Administrator        3472        Sign of "Win32:Agent-ITS [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\9-10病毒样本.rar\9-10病毒样本\dikonfj.exe" file.  
2007-9-14        10:06:23        1189735583        Administrator        3472        Sign of "Win32:Agent-ITS [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\9-10病毒样本.rar\9-10病毒样本\yljkaig.exe" file.  

小A   4个
zlq7zj
发表于 2007-9-14 13:44:30 | 显示全部楼层
难得AVG居然都查出来了

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-3-1 09:04 , Processed in 0.074995 second(s), 3 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表