查看: 2799|回复: 14
收起左侧

[病毒样本] 7个

[复制链接]
qianwenxiang
发表于 2007-10-14 17:40:47 | 显示全部楼层 |阅读模式
郁闷死 bf4.exe的下载速度只有几百字节每秒 结果下载下来一看是CNNIC

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-10-14 17:46:20 | 显示全部楼层
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\new\bd1.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.epp        File: E:\Ñù±¾\new\game.exe//UPX
detected: virus Worm.Win32.AutoRun.x        File: E:\Ñù±¾\new\iexplore.exe
detected: Trojan program Trojan-Downloader.Win32.Banload.eff        File: E:\Ñù±¾\new\qq.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.bi        File: E:\Ñù±¾\new\zhuxian.exe//ASPack


CNNIC卡巴不杀
gho
发表于 2007-10-14 17:46:59 | 显示全部楼层
2007-10-14        17:45:31        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\bd1.exe        BackDoor-CXI (Trojan)
2007-10-14        17:45:49        Deleted         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\zhuxian.exe        PWS-OnlineGames.i (Trojan)
2007-10-14        17:45:49        Not scanned  (scan timed out)         WHUT-D9193C067E\gho        WinRAR.exe        C:\Documents and Settings\gho\My Documents\zhuxian.exe         (Virus
gho
发表于 2007-10-14 17:47:53 | 显示全部楼层
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.epp        文件: C:\Documents and Settings\gho\My Documents\game.exe//UPX
已删除: 病毒 Worm.Win32.AutoRun.x        文件: C:\Documents and Settings\gho\My Documents\iexplore.exe
已删除: 木马程序 Trojan-Downloader.Win32.Banload.eff        文件: C:\Documents and Settings\gho\My Documents\qq.exe//ASPack
promised
发表于 2007-10-14 17:49:03 | 显示全部楼层
C:\ABC\1014\bd1.exe - 特征码 'BehavesLikeWin32.ExplorerHijack' 被发现
C:\ABC\1014\bd4.exe
C:\ABC\1014\game.exe - 特征码 'Trojan-PWS.Win32.QQGame.ad' 被发现
C:\ABC\1014\iexplore.exe - 特征码 'Worm.Win32.AutoRun.x' 被发现
C:\ABC\1014\qq.exe - 特征码 'Trojan-Downloader.Win32.Delf.cgm' 被发现
C:\ABC\1014\server.exe - 特征码 'Packed.Win32.PolyCrypt.b' 被发现
C:\ABC\1014\zhuxian.exe - 特征码 'Trojan-PWS.Win32.Delf.mc' 被发现
风野胤
发表于 2007-10-14 17:49:51 | 显示全部楼层
漏报一个。。。。。。
R:\新建文件夹\bd1.exe - a variant of Win32/PSW.QQRob.NAQ trojan
R:\新建文件夹\bd4.exe - a variant of Win32/Adware.CDN application
R:\新建文件夹\game.exe - probably a variant of Win32/Genetik trojan
R:\新建文件夹\qq.exe - a variant of Win32/TrojanDownloader.Delf.NZH trojan
R:\新建文件夹\server.exe - a variant of Win32/Hupigon trojan
R:\新建文件夹\zhuxian.exe - Win32/PSW.OnLineGames.NFE trojan
leonwu49
发表于 2007-10-14 18:09:26 | 显示全部楼层
过咖啡。。。。。晕
timhas266
发表于 2007-10-14 18:22:41 | 显示全部楼层
Start of the scan: Sunday, 14 October, 2007  18:22

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\樣本'
C:\Documents and Settings\tim\桌面\樣本\1014.part1.rar
  [0] Archive type: RAR
  --> bd1.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> game.exe
      [DETECTION] Is the Trojan horse TR/Copiet.B.1
  --> iexplore.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      A backup was created as '4742ee08.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\tim\桌面\樣本\1014.part2.rar
  [0] Archive type: RAR
  --> server.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> zhuxian.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.BI.16
      [INFO]      A backup was created as '4742ee09.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Sunday, 14 October, 2007  18:22
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     10 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      2 files were deleted
      0 files were repaired
      2 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      2 Archives were scanned
      0 Warnings
      0 Notes
qigang
发表于 2007-10-14 19:28:32 | 显示全部楼层

15/3

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.PSW.Win32.WorldOnline.ip
病毒: Trojan.PSW.Win32.MostGames.g
病毒: Trojan.DL.Win32.Autorun.ytt

MAC地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:19.44.62
The EQs
发表于 2007-10-14 19:38:30 | 显示全部楼层
诛仙?????盗诛仙的??
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-19 19:14 , Processed in 0.147038 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表