查看: 3500|回复: 10
收起左侧

[病毒样本] 45个

[复制链接]
qianwenxiang
发表于 2007-9-14 19:33:31 | 显示全部楼层 |阅读模式
[MD5: C1663D DDAF14 7F5299 68E818 B7C611 46C616 D41D8C 781357 ADD8E1 C15561 34A5ED 5E7A4E 5E7A4E 1767C4 C7F7E9 E73C50 B97609 2F0279 088DDF 2321B8 5CF1E8 0B15B7 5BF51A 69BD56 D79275 A25FA7 59B4FB 4F6030 C1CEAD 2D92B7 CBF5CC A1FB8E E64445 523BE0 1C0D91 01CEAF 7F5E92 523BE0 1C0D91 DD67EA ED98C3 812A59 CBDB0E DB74FD 17931E]


下载
http://www.mikebox.com/index.php?code=21858539
红心王子
发表于 2007-9-14 19:38:12 | 显示全部楼层
2007-9-14        19:37:08        1189769828        Administrator        3712        Sign of "Win32:Hupigon-CYX [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (5).exe\[Upack]\[Embedded#4060]\[Upack]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:OnLineGames-ST [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (6).EXE\[Upack]\[Embedded#5158]\[Upack]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (7).dll\[UPX]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Autorun-U" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (8).dll\[UPX]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (9).bak\[UPX]\[Embedded#2af0]\[UPX]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (10).pif\[UPX]\[Embedded#2af0]\[UPX]" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Onlinegames-ARU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (11).dll" file.  
2007-9-14        19:37:12        1189769832        Administrator        3712        Sign of "Win32:Autorun-U" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (12).bak\[UPX]\[Embedded#4ef0]\[UPX]" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Delf-FCI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (13).exe\[Upack]" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Onlinegames-ARU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (14).exe\[Embedded#1e60]" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Onlinegames-AUJ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (14).exe" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:OnLineGames-ATK [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (15).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Steal-H [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (16).ocx" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:OnLineGames-AIU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (17).exe\[NsPack]" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (18).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:QQpass-X [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (19).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (20).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Boran-N [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (21).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Boran-O [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (22).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Boran-N [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (23).dll" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:QQGame-F [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (24).exe" file.  
2007-9-14        19:37:13        1189769833        Administrator        3712        Sign of "Win32:Qqhelper-K [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (25).dll" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Agent-JDE [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (26).exe\[UPX]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-FFI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (27).exe" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Hupigon-CWZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (28).exe" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:INService-EU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (29).dll\[Petite]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:INService-EU [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (30).EXE\[FSG]\[Embedded#3000]\[Petite]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-ECW [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (31).dll" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-ECV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (32).scr\[Upack]\[Embedded#DLL]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Agent-JOF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (33).DLL\[NsPack]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Agent-JOF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (34).EXE\[NsPack]\[Embedded#4010]\[NsPack]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-ECW [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (35).dll" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-ECV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (36).exe\[Upack]\[Embedded#DLL]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Nilage-AI [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (37).vxd" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Delf-ECV [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (38).dll" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Boran-O [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp\[Embedded#093d8]" file.  
2007-9-14        19:37:14        1189769834        Administrator        3712        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp\[Embedded#303d8]" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Adware-gen. [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp\[Embedded#4a3d8]" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Boran-N [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp\[Embedded#683d8]" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Boran-N [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp\[Embedded#903d8]" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Boran-O [Adw]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (1).tmp" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Delf-EBR [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (2).exe" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Hupigon-AHB [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (3).ini" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (40).exe\[Embedded#1a130]" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Trojan-gen. {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (40).exe" file.  
2007-9-14        19:37:15        1189769835        Administrator        3712        Sign of "Win32:Agent-ISK [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (43).dll" file.  
2007-9-14        19:37:16        1189769836        Administrator        3712        Sign of "Win32:Hupigon-AMD [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (44).exe\[PECompact]" file.  
2007-9-14        19:37:16        1189769836        Administrator        3712        Sign of "Win32:Hupigon-EA [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (45).exe" file.  
2007-9-14        19:37:16        1189769836        Administrator        3712        Sign of "Win32:Downloader-JF [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\0914.rar\Virus (39).exe" file.
promised
发表于 2007-9-14 19:40:31 | 显示全部楼层

不杀得为0字节

C:\ABC\0914\Virus (1).tmp - 特征码 'not-a-virus:AdWare.Win32.Boran.ai' 被发现
C:\ABC\0914\Virus (10).pif - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
C:\ABC\0914\Virus (11).dll - 特征码 'Trojan-PWS.Win32.OnLineGames.es' 被发现
C:\ABC\0914\Virus (12).bak - 特征码 'Virus.Win32.AutoRun.bk' 被发现
C:\ABC\0914\Virus (13).exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\0914\Virus (14).exe - 特征码 'Trojan-PWS.Win32.OnLineGames.abx' 被发现
C:\ABC\0914\Virus (15).dll - 特征码 'Trojan-PWS.Win32.OnLineGames.nn' 被发现
C:\ABC\0914\Virus (16).ocx - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\0914\Virus (17).exe - 特征码 'Virus.Win32.AutoRun.al' 被发现
C:\ABC\0914\Virus (18).dll - 特征码 'not-a-virus:AdWare.Win32.Boran.ai' 被发现
C:\ABC\0914\Virus (19).dll - 特征码 'Trojan-PWS.Win32.QQPass.fq' 被发现
C:\ABC\0914\Virus (2).exe - 特征码 'Backdoor.Win32.Delf.azc' 被发现
C:\ABC\0914\Virus (20).dll - 特征码 'AdWare.Win32.Boran.i' 被发现
C:\ABC\0914\Virus (21).dll - 特征码 'Virus.Win32.Boran.N' 被发现
C:\ABC\0914\Virus (22).dll - 特征码 'Virus.Win32.Boran.N' 被发现
C:\ABC\0914\Virus (23).dll - 特征码 'not-a-virus:AdWare.Win32.Boran.ai' 被发现
C:\ABC\0914\Virus (24).exe - 特征码 'Backdoor.Win32.Hupigon.cec' 被发现
C:\ABC\0914\Virus (25).dll - 特征码 'Trojan-Downloader.Win32.QQHelper.ve' 被发现
C:\ABC\0914\Virus (26).exe - 特征码 'Backdoor.Win32.Agent.apy' 被发现
C:\ABC\0914\Virus (27).exe - 特征码 'Trojan.Win32.Delf.vb' 被发现
C:\ABC\0914\Virus (28).exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\0914\Virus (29).dll - 特征码 'Trojan.Win32.Agent.aqj' 被发现
C:\ABC\0914\Virus (3).ini - 特征码 'Backdoor.Win32.GrayBird.oc' 被发现
C:\ABC\0914\Virus (30).EXE - 特征码 'Trojan.Win32.Agent.aqj' 被发现
C:\ABC\0914\Virus (31).dll - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现
C:\ABC\0914\Virus (32).scr - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现
C:\ABC\0914\Virus (33).DLL - 特征码 'Trojan-PWS.Win32.Nilage.lp' 被发现
C:\ABC\0914\Virus (34).EXE - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\0914\Virus (35).dll - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现
C:\ABC\0914\Virus (36).exe - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现
C:\ABC\0914\Virus (37).vxd - 特征码 'Trojan-Downloader.Win32.Delf.bok' 被发现
C:\ABC\0914\Virus (38).dll - 特征码 'Trojan-Spy.Win32.Agent.pn' 被发现
C:\ABC\0914\Virus (39).exe - 特征码 'Trojan.Win32.Agent.ala' 被发现
C:\ABC\0914\Virus (4).exe
C:\ABC\0914\Virus (40).exe - 特征码 'Backdoor.Win32.Livup' 被发现
C:\ABC\0914\Virus (41).dll - 特征码 'Backdoor.Win32.Hupigon.R' 被发现
C:\ABC\0914\Virus (42).exe - 特征码 'Trojan-Proxy.Win32.Delf.cc' 被发现
C:\ABC\0914\Virus (43).dll - 特征码 'Trojan.Win32.Agent.ajx' 被发现
C:\ABC\0914\Virus (44).exe - 特征码 'Backdoor.Win32.Wootbot.u' 被发现
C:\ABC\0914\Virus (45).exe - 特征码 'Generic.Graybird' 被发现
C:\ABC\0914\Virus (5).exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\0914\Virus (6).EXE - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\0914\Virus (7).dll - 特征码 'Trojan-PWS.Win32.Delf.wh' 被发现
C:\ABC\0914\Virus (8).dll - 特征码 'Virus.Win32.AutoRun.bk' 被发现
C:\ABC\0914\Virus (9).bak - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现

        46 文件被扫描
          (0 压缩档 0 文件)
        44 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:01.078
nosferatu
头像被屏蔽
发表于 2007-9-14 19:41:42 | 显示全部楼层
Starting the file scan:

Begin scan in 'D:\DownLoads\0914.rar'
D:\DownLoads\0914.rar
  [0] Archive type: RAR
  --> Virus (5).exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
  --> Virus (6).EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLine.agb.2
  --> Virus (7).dll
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
  --> Virus (8).dll
      [DETECTION] Is the Trojan horse TR/AutoRun.BK.3
  --> Virus (9).bak
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
  --> Virus (10).pif
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.2
  --> Virus (11).dll
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> Virus (12).bak
      [DETECTION] Is the Trojan horse TR/Autorun.BK
  --> Virus (13).exe
      [DETECTION] Is the Trojan horse TR/Dldr.Murlo.FL.2
  --> Virus (14).exe
      [DETECTION] Is the Trojan horse TR/PSW.Agent.20480
  --> Virus (15).dll
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> Virus (16).ocx
      [DETECTION] Is the Trojan horse TR/Drop.Age.32873.C
  --> Virus (17).exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> Virus (18).dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.AI.4
  --> Virus (19).dll
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.D.1
  --> Virus (20).dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.AI.2
  --> Virus (21).dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Brander
  --> Virus (22).dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.AI.3
  --> Virus (23).dll
      [DETECTION] Is the Trojan horse TR/Bortan.dll.B
  --> Virus (24).exe
      [DETECTION] Is the Trojan horse TR/PSW.QQGame.J.10
  --> Virus (25).dll
      [DETECTION] Is the Trojan horse TR/Drop.QQHe.AP.1.B
  --> Virus (26).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.apy.4 Backdoor server programs
  --> Virus (27).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Delf.avc.39 Backdoor server programs
  --> Virus (28).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Virus (29).dll
      [DETECTION] Is the Trojan horse TR/Agent.aqj.21
  --> Virus (30).EXE
      [DETECTION] Is the Trojan horse TR/Agent.aqj.10
  --> Virus (31).dll
      [DETECTION] Is the Trojan horse TR/Spy.Agent.PN.310
  --> Virus (32).scr
      [DETECTION] Is the Trojan horse TR/Spy.Agent.PN.310
  --> Virus (33).DLL
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.727 Backdoor server programs
  --> Virus (34).EXE
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.723 Backdoor server programs
  --> Virus (35).dll
      [DETECTION] Is the Trojan horse TR/Spy.Agent.PN.310
  --> Virus (36).exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.PN.310
  --> Virus (37).vxd
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bok.1
  --> Virus (38).dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> Virus (1).tmp
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.AI.1
  --> Virus (2).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Virus (3).ini
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Virus (40).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Livup.C Backdoor server programs
  --> Virus (41).dll
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> Virus (42).exe
      [DETECTION] Is the Trojan horse TR/Agent.ajx.18
  --> Virus (43).dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> Virus (44).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.bdt.8 Backdoor server programs
  --> Virus (45).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.aqf.2 Backdoor server programs
  --> Virus (39).exe
      [DETECTION] Is the Trojan horse TR/Click.Agent.hip
      [INFO]      The file was deleted!


End of the scan: 2007年9月14日  19:41
Used time: 01:01 min

The scan has been done completely.

      0 Scanning directories
     45 Files were scanned
     43 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
qigang
发表于 2007-9-14 19:46:26 | 显示全部楼层

62/44

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.OnlineGames.dpq
病毒: Trojan.PSW.Win32.XYOnline.bl
病毒: Worm.Win32.Delf.ysd      
病毒: Trojan.PSW.Win32.OnlineGames.dlc
病毒: Worm.Win32.Delf.ysd      
病毒: Trojan.PSW.Win32.OnlineGames.dkh
病毒: Trojan.PSW.Win32.OnlineGames.dlc
病毒: Trojan.DL.Win32.Agent.wxj
病毒: Trojan.PSW.Win32.OnlineGames.ubt
病毒: Trojan.PSW.Win32.QQPass.qne
病毒: Trojan.PSW.Win32.QQPass.qne
病毒: Worm.Win32.Agent.xw      
病毒: Adware.Win32.Agent.npk   
病毒: Trojan.PSW.QQPass.hik   
病毒: Adware.Win32.Agent.npe   
病毒: Adware.Win32.Agent.npf   
病毒: Adware.Win32.Agent.npc   
病毒: Adware.Win32.Agent.npd   
病毒: Trojan.PSW.Win32.QQPass.qlv
病毒: Trojan.DL.QQHelper.ehm   
病毒: Trojan.DL.Win32.Agent.gg
病毒: Backdoor.Win32.Gpigeon.zzh
病毒: Trojan.PSW.Win32.RocOnline.x
病毒: Trojan.PSW.Win32.RocOnline.y
病毒: Trojan.Clicker.Win32.Pophot.t
病毒: Trojan.Clicker.Win32.Pophot.t
病毒: Trojan.IMMSG.Win32.TBMSG.ig
病毒: Trojan.IMMSG.Win32.TBMSG.ig
病毒: Trojan.Clicker.Win32.Agent.lh
病毒: Trojan.Clicker.Win32.Pophot.s
病毒: Dropper.Win32.Agent.y   
病毒: Backdoor.Win32.RWX.l     
病毒: Backdoor.Gpigeon.qod     
病毒: Backdoor.Livup.c         
病毒: Backdoor.Win32.Agent.lvp
病毒: Trojan.Win32.Agent.ips   
病毒: Backdoor.Win32.Agent.lvp
病毒: Worm.Delf.dy            
病毒: Backdoor.Galyporn.a      
病毒: Backdoor.Win32.Gpigeon.hs
病毒: Trojan.DL.Win32.Agent.wtb

MAC地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:19.40.42
uhthn2002
发表于 2007-9-14 20:19:37 | 显示全部楼层

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Paranoia Database - 4872
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\New Folder

C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (5).exe - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (6).EXE - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (7).dll - Suspicious of Win32.Trojan-PSW.Game.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (8).dll - Suspicious of Win32.Trojan.Autorun.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (9).bak - Infected with Win32.PDB-b5f Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (10).pif - Infected with Win32.PDB-b5f Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (11).dll - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (12).bak - Infected with Win32.PDB-3ce Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (13).exe - Suspicious of Trojan-PSW.Game.3
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (14).exe - Suspicious of Trojan-PSW.OnLineGames.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (15).dll - Suspicious of Win32.Trojan-Downloader.Zlob.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (16).ocx - Suspicious of Win32.Trojan-PSW.QQPass.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (17).exe - Infected with MalwareSpy.PDB-c2b Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (18).dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (19).dll - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (20).dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (21).dll - Suspicious of Trojan-PSW.OnLineGames.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (22).dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (23).dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (24).exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (25).dll - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (26).exe - Infected with Win32.PDB-0cd Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (27).exe - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (28).exe - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (29).dll - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (30).EXE - Suspicious of Trojan-PSW.Game.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (31).dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (32).scr - Suspicious of Trojan-PSW.Game.4
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (33).DLL - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (34).EXE - Infected with MalwareSpy.PDB-472 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (35).dll - Suspicious file
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (36).exe - Suspicious of Trojan-PSW.Game.4
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (37).vxd - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (38).dll - Suspicious of Win32.Backdoor.Hupigon.5
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (1).tmp - Infected with PDB-66f Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (2).exe - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (3).ini - Infected with Win32.PDB-d42 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (4).exe - OK
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (40).exe - Suspicious of Trojan-Downloader.Agent.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (41).dll - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (42).exe - Suspicious of Win32.Worm.Viking.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (43).dll - Suspicious of Trojan-Dropper.Rime.2
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (44).exe - Infected with Win32.PDB-3d7 Malware program - Deleted
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (45).exe - Suspicious of Win32.Backdoor.Hupigon.1
C:\Documents and Settings\uhthn\Desktop\New Folder\Virus (39).exe - Suspicious of MalwareSpy.Trojan-Downloader.Delf.1

45 Files scanned
9 Infected files found
33 Suspicious files found
0 Files cured
9 Files deleted
浪滔天
发表于 2007-9-14 20:31:56 | 显示全部楼层
卡巴 7.0.0.125
44个

已删除: 木马程序 Trojan.Win32.Agent.aqj        文件: F:\病毒样本\0914\Virus (29).dll//Petite
已删除: 木马程序 Trojan.Win32.Agent.aqj        文件: F:\病毒样本\0914\Virus (30).EXE//FSG
已删除: 木马程序 Trojan.Win32.Agent.ajx        文件: F:\病毒样本\0914\Virus (42).exe
已删除: 木马程序 Trojan.Win32.Agent.ajx        文件: F:\病毒样本\0914\Virus (41).dll
已删除: 木马程序 Trojan.Win32.Agent.ajx        文件: F:\病毒样本\0914\Virus (43).dll
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn        文件: F:\病毒样本\0914\Virus (38).dll
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn        文件: F:\病毒样本\0914\Virus (31).dll
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn        文件: F:\病毒样本\0914\Virus (36).exe//PE_Patch//UPack
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn        文件: F:\病毒样本\0914\Virus (35).dll
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn        文件: F:\病毒样本\0914\Virus (32).scr//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.QQPass.qg        文件: F:\病毒样本\0914\Virus (16).ocx
已删除: 木马程序 Trojan-PSW.Win32.QQGame.j        文件: F:\病毒样本\0914\Virus (19).dll
已删除: 木马程序 Trojan-PSW.Win32.QQGame.j        文件: F:\病毒样本\0914\Virus (24).exe//PE_Patch//Enigma//PE_Patch
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nn        文件: F:\病毒样本\0914\Virus (15).dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.aci        文件: F:\病毒样本\0914\Virus (5).exe//PE_Patch
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.ach        文件: F:\病毒样本\0914\Virus (6).EXE//PE_Patch//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.abx        文件: F:\病毒样本\0914\Virus (11).dll
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.abx        文件: F:\病毒样本\0914\Virus (14).exe
已删除: 木马程序 Trojan-PSW.Win32.Delf.wh        文件: F:\病毒样本\0914\Virus (9).bak//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.Delf.wh        文件: F:\病毒样本\0914\Virus (7).dll//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-PSW.Win32.Delf.wh        文件: F:\病毒样本\0914\Virus (10).pif//PE_Patch.UPX//UPX
已删除: 木马程序 Trojan-Downloader.Win32.QQHelper.ve        文件: F:\病毒样本\0914\Virus (25).dll
已删除: 木马程序 Trojan-Downloader.Win32.Murlo.fl        文件: F:\病毒样本\0914\Virus (13).exe//UPack
已删除: 木马程序 Trojan-Downloader.Win32.Delf.bok        文件: F:\病毒样本\0914\Virus (37).vxd
已删除: 木马程序 Trojan-Clicker.Win32.Flyst.d        文件: F:\病毒样本\0914\Virus (39).exe//PE_Patch//NSPack//script.fly
已删除: 木马程序 Backdoor.Win32.Livup.c        文件: F:\病毒样本\0914\Virus (40).exe
已删除: 木马程序 Backdoor.Win32.Hupigon.iwk        文件: F:\病毒样本\0914\Virus (3).ini
已删除: 木马程序 Backdoor.Win32.Hupigon.fbs        文件: F:\病毒样本\0914\Virus (28).exe
已删除: 木马程序 Backdoor.Win32.Hupigon.csc        文件: F:\病毒样本\0914\Virus (45).exe
已删除: 木马程序 Backdoor.Win32.Hupigon.bdt        文件: F:\病毒样本\0914\Virus (44).exe
已删除: 木马程序 Backdoor.Win32.Delf.azc        文件: F:\病毒样本\0914\Virus (2).exe
已删除: 木马程序 Backdoor.Win32.Delf.avc        文件: F:\病毒样本\0914\Virus (27).exe
已删除: 木马程序 Backdoor.Win32.Agent.apy        文件: F:\病毒样本\0914\Virus (26).exe//PE_Patch.UPX//UPX
已删除: 木马程序 Backdoor.Win32.Agent.ahj        文件: F:\病毒样本\0914\Virus (34).EXE
已删除: 木马程序 Backdoor.Win32.Agent.ahj        文件: F:\病毒样本\0914\Virus (33).DLL
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (20).dll
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (21).dll
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (22).dll
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (18).dll
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (23).dll
已删除: 广告程序 not-a-virus:AdWare.Win32.Boran.ai        文件: F:\病毒样本\0914\Virus (1).tmp
已删除: 病毒 Virus.Win32.AutoRun.ji        文件: F:\病毒样本\0914\Virus (12).bak
已删除: 病毒 Virus.Win32.AutoRun.f        文件: F:\病毒样本\0914\Virus (17).exe//NSPack
已删除: 病毒 Virus.Win32.AutoRun.bk        文件: F:\病毒样本\0914\Virus (8).dll//PE_Patch.UPX//UPX
小邪邪
发表于 2007-9-14 21:09:44 | 显示全部楼层
AVK全杀45个
微点卫士
发表于 2007-9-14 21:15:06 | 显示全部楼层
已知的我不贴了
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0914\VIRUS (2).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\DLLHOST.EXE
2) C:\RUNAUT~1\AUTORUN.PIF
3) D:\RUNAUT~1\AUTORUN.PIF
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0914\VIRUS (5).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\SYSTEM32\RAV008C.EXE
2) C:\WINDOWS.0\SYSTEM32\RAV008C.DAT
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0914\VIRUS (14).EXE
木马程序生成以下文件:
1) C:\WINDOWS.0\MPPDS.EXE
2) C:\WINDOWS.0\SYSTEM32\MPPDS.DLL
是否删除木马程序及其衍生物?
木马名称:未知间谍软件

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\0914\VIRUS (11).DLL
是木马程序!
已成功阻止其运行,是否要删除此文件?

4和27是死的,能运行的都杀
欠妳緈諨
发表于 2007-9-14 21:49:53 | 显示全部楼层
AVAST杀42个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-3-1 09:03 , Processed in 0.087292 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表