查看: 2667|回复: 12
收起左侧

[病毒样本] 网马一箩筐

[复制链接]
zane_xzz
发表于 2007-10-15 17:03:01 | 显示全部楼层 |阅读模式
20个
[MD5: 27FC3C B95AB6 6F6953 E38FC1 443C4F B74F9E B2BE8E EB2B37 662773 CB370C F64107 ABEF62 1FCC73 0A2468 4C32FF C2C048 8593D3 89E2B9 B344AC 6F2CD2]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-10-15 17:07:50 | 显示全部楼层
20
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbz        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\0.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.egt        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\1.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbr        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\10.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ejx        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\11.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dzq        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\12.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fca        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\13.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eoa        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\14.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eqr        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\15.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.dzs        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\16.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fbq        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\17.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eav        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\18.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fdx        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\19.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.epn        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\2.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eqt        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\3.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fdy        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\4.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.fdi        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\5.exe//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.zs        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\6.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.djv        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\7.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.zs        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\8.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.eys        File: C:\Documents and Settings\Owner\×ÀÃæ\н¨Îļþ¼Ð.rar/н¨Îļþ¼Ð\9.exe//UPack
timhas266
发表于 2007-10-15 17:40:28 | 显示全部楼层
Start of the scan: Monday, 15 October, 2007  17:40

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\新建文件夹.rar'
C:\Documents and Settings\tim\桌面\新建文件夹.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\0.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fbz
  --> н¨Îļþ¼Ð\1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> н¨Îļþ¼Ð\10.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ejx.2
  --> н¨Îļþ¼Ð\12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dzq
  --> н¨Îļþ¼Ð\13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eoa
  --> н¨Îļþ¼Ð\15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eqr
  --> н¨Îļþ¼Ð\16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dzs.2
  --> н¨Îļþ¼Ð\17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fbq
  --> н¨Îļþ¼Ð\18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eav
  --> н¨Îļþ¼Ð\19.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.epn
  --> н¨Îļþ¼Ð\3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eqt.1
  --> н¨Îļþ¼Ð\4.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\5.exe
      [DETECTION] Is the Trojan horse TR/Agent.14414
  --> н¨Îļþ¼Ð\6.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> н¨Îļþ¼Ð\8.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eys
      [INFO]      A backup was created as 'ac9a947d.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Monday, 15 October, 2007  17:40
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
     21 Files were scanned
     16 viruses and/or unwanted programs were found
      4 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
yurius
发表于 2007-10-15 18:07:18 | 显示全部楼层
symantec 17个 Infostealer.Gampass
电影结束了
发表于 2007-10-15 18:35:35 | 显示全部楼层
Scan performed at: 2007-10-15 18:35:21
Scanning Log
NOD32 version 2591 (20071014) NT
Command line: C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 15.10.2007  Time: 18:35:22
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\0.exe - is OK
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\1.exe - Win32/PSW.Agent.NEC trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\10.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\11.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\12.exe - Win32/PSW.OnLineGames.DZQ trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\13.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\14.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\15.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\16.exe - Win32/PSW.OnLineGames.DZS trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\17.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\18.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\19.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\2.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\3.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\4.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\5.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\6.exe - a variant of Win32/PSW.WOW.WU trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\7.exe - Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\8.exe - a variant of Win32/PSW.WOW.WU trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar ?RAR ?新建文件夹\9.exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\wangcheng\桌面\新建文件夹.rar:Zone.Identifier - is OK
Number of scanned files: 22
Number of threats found: 19
Number of active threats: 1
Time of completion: 18:35:29 Total scanning time: 7 sec (00:00:07)
kp2006
头像被屏蔽
发表于 2007-10-15 18:37:33 | 显示全部楼层
kv2008报19个
残缺的唯美
发表于 2007-10-15 18:41:30 | 显示全部楼层
Result: 18 malware found
Trojan-PSW.Win32.OnLineGames.fbz (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\0.exe
Trojan-PSW.Win32.OnLineGames.egt (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\1.exe
Trojan-PSW.Win32.OnLineGames.fbr (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\10.exe
Trojan-PSW.Win32.OnLineGames.ejx (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\11.exe
Trojan-PSW.Win32.OnLineGames.dzq (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\12.exe
Trojan-PSW.Win32.OnLineGames.fca (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\13.exe
Trojan-PSW.Win32.OnLineGames.eoa (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\14.exe
Trojan-PSW.Win32.OnLineGames.eqr (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\15.exe
Trojan-PSW.Win32.OnLineGames.dzs (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\16.exe
Trojan-PSW.Win32.OnLineGames.fbq (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\17.exe
Trojan-PSW.Win32.OnLineGames.eav (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\18.exe
Trojan-PSW.Win32.OnLineGames.epn (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\2.exe
Trojan-PSW.Win32.OnLineGames.eqt (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\3.exe
Trojan-PSW.Win32.OnLineGames.fdi (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\5.exe
Trojan-PSW.Win32.WOW.zs (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\6.exe
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\8.exe
Trojan-PSW.Win32.OnLineGames.djv (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\7.exe
Trojan-PSW.Win32.OnLineGames.eys (virus)
C:\Users\Administrator\Desktop\н¨Îļþ¼Ð.rar\н¨Îļþ¼Ð\9.exe
uhthn2002
发表于 2007-10-15 21:16:08 | 显示全部楼层
Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 550
Paranoia Database - 10482
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\new

C:\Documents and Settings\uhthn\Desktop\new\0.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\1.exe - Infected Trojan-PSW.OnLineGames.u
C:\Documents and Settings\uhthn\Desktop\new\10.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\11.exe - Infected Trojan-PSW.OnLineGames.49
C:\Documents and Settings\uhthn\Desktop\new\12.exe - Infected Trojan-PSW.OnLineGames.50
C:\Documents and Settings\uhthn\Desktop\new\13.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\14.exe - Infected Trojan-PSW.OnLineGames.am
C:\Documents and Settings\uhthn\Desktop\new\15.exe - Infected Generic.Malware.15245.8ed
C:\Documents and Settings\uhthn\Desktop\new\16.exe - Infected Generic.Malware.13820.94f
C:\Documents and Settings\uhthn\Desktop\new\17.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\18.exe - Infected Generic.Malware.14378.3c6
C:\Documents and Settings\uhthn\Desktop\new\19.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\2.exe - Infected Generic.Malware.15102.3bf
C:\Documents and Settings\uhthn\Desktop\new\3.exe - Infected Generic.Malware.15310.9e1
C:\Documents and Settings\uhthn\Desktop\new\4.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\5.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\6.exe - Suspected MalwareDetector:Generic.PSW.3
C:\Documents and Settings\uhthn\Desktop\new\7.exe - Infected Trojan-PSW.OnLineGames.g
C:\Documents and Settings\uhthn\Desktop\new\8.exe - Infected Generic.Malware.32400.21d
C:\Documents and Settings\uhthn\Desktop\new\9.exe - Suspected MalwareDetector:Generic.PSW.3

20 Files scanned
11 Infected files found
9 Suspected files found
0 Files cured
11 Files deleted
tracydk
发表于 2007-10-15 21:19:17 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\病毒样本\新建文件夹.rar'
F:\病毒样本\新建文件夹.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\0.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> н¨Îļþ¼Ð\10.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\11.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ejx.2
  --> н¨Îļþ¼Ð\12.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dzq
  --> н¨Îļþ¼Ð\13.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eoa
  --> н¨Îļþ¼Ð\15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eqr
  --> н¨Îļþ¼Ð\16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dzs.2
  --> н¨Îļþ¼Ð\17.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eav
  --> н¨Îļþ¼Ð\19.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.epn
  --> н¨Îļþ¼Ð\3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eqt.1
  --> н¨Îļþ¼Ð\4.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\6.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> н¨Îļþ¼Ð\8.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\9.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eys
      [INFO]      The file was moved to 'ac9ac7d0.qua'!


End of the scan: 2007年10月15日  21:19
Used time: 00:02 min

The scan has been done completely.

      0 Scanning directories
     22 Files were scanned
     13 viruses and/or unwanted programs were found
      7 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
winxp0286
发表于 2007-10-15 21:21:51 | 显示全部楼层
小紅傘P版。。高啟發。19個
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-19 18:13 , Processed in 0.145689 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表