查看: 4735|回复: 20
收起左侧

[病毒样本] 毒网更新1(28x)

[复制链接]
qianwenxiang
发表于 2007-11-3 18:11:16 | 显示全部楼层 |阅读模式
毒网更新1

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
promised
发表于 2007-11-3 18:17:03 | 显示全部楼层

25

2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: PWS:Win32/Frethog.gen!D
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa8.exe->(Upack)
Threat Severity: Severe
Threat Category: Password Stealer
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/Malagent
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\113.exe
Threat Severity: Severe
Threat Category: Trojan
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: PWS:Win32/Frethog.gen!D
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa9.exe->(Upack)
Threat Severity: Severe
Threat Category: Password Stealer
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: PWS:Win32/Frethog.gen!D
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\101.exe->(UPX)
Threat Severity: Severe
Threat Category: Password Stealer
Contained Object: (UPX)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/SystemHijack.gen
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa4.exe->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/SystemHijack.gen
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\106.exe->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/SystemHijack.gen
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa14.exe->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/SystemHijack.gen
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\112.exe->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/AgentBypass.gen!G
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa18.exe->(Upack)->[RSRCEmb]->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)->[RSRCEmb]->(Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/AgentBypass.gen!G
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\109.exe->(Upack)->[RSRCEmb]->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)->[RSRCEmb]->(Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/AgentBypass.gen!G
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\102.exe->(Upack)->[RSRCEmb]->(Upack)
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)->[RSRCEmb]->(Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Zlob.gen
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\explorer2.exe->(UPX)
Threat Severity: Severe
Threat Category: Trojan Downloader
Contained Object: (UPX)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/AgentBypass.gen!G
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa17.exe->(Upack)->[RSRCEmb]
Threat Severity: Severe
Threat Category: Trojan
Contained Object: (Upack)->[RSRCEmb]
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Agent
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\vip.exe->(NSPack)
Threat Severity: Severe
Threat Category: Trojan Downloader
Contained Object: (NSPack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/Pepatch.E
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\Vml.exe
Threat Severity: Severe
Threat Category: Trojan
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: PWS:Win32/Frethog.gen!H
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa2.exe->(Upack)
Threat Severity: Severe
Threat Category: Password Stealer
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: PWS:Win32/Frethog.gen!D
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\aa11.exe->(Upack)
Threat Severity: Severe
Threat Category: Password Stealer
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Small.GC
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\1.exe->(Upack)
Threat Severity: Severe
Threat Category: Trojan Downloader
Contained Object: (Upack)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Small
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\down.exe
Threat Severity: Severe
Threat Category: Trojan Downloader
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Small
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\user4.exe
Threat Severity: Severe
Threat Category: Trojan Downloader
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanClicker:Win32/Small
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\csrss32.exe
Threat Severity: Severe
Threat Category: Trojan
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Dialer:Win32/DialerHub
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\PR.exe->(UPX)
Threat Severity: High
Threat Category: Dialer
Contained Object: (UPX)
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: Trojan:Win32/Conhook.D
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\kcehc_eicooc20070702(1).exe
Threat Severity: Severe
Threat Category: Trojan
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Conhook.E
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\immortal_20070525.exe
Threat Severity: High
Threat Category: Trojan Downloader
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status: Detected


2007-11-3 18:15 Windows Live OneCare found potentially harmful or unwanted software on your computer
Threat Name: TrojanDownloader:Win32/Tearspear
Detection Date and Time: 2007-11-3 18:15
File Name: C:\ABC\Update1\Avast Virus Cleaner Tool crack.exe
Threat Severity: Severe
Threat Category: Trojan Downloader
Virus and spyware monitoring found potentially unwanted software: (ANTIVIRUS_ONACCESS_INFECTED)
Threat Status:

[ 本帖最后由 promised 于 2007-11-3 18:19 编辑 ]
清凉世界
发表于 2007-11-3 18:19:27 | 显示全部楼层
扫描进行于:2007-11-3 18:19:45
扫描日志
NOD32版本 2635 (20071102) NT
命令行: C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar

日期: 3.11.2007  时间:18:19:48
已开启反隐藏功能.
已扫描的磁盘,文件夹及文件:C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>Avast Virus Cleaner Tool crack.exe - 可能是 Win32/TrojanDownloader.Delf 木马 的一个变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>immortal_20070525.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>kcehc_eicooc20070702(1).exe - Win32/TrojanDownloader.Tiny.ID 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>PR.exe - Win32/Dialer.IT 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa1.exe - Win32/TrojanDownloader.SMW.A 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>csrss32.exe - Win32/TrojanClicker.Small.NBH 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>user4.exe - Win32/TrojanDownloader.Small.DXM 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>down.exe - Win32/TrojanDownloader.Small.NXD 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>1.exe - Win32/Drowor.NAD 病毒
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa11.exe - Win32/PSW.OnLineGames.NFL 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa2.exe - 可能是 Win32/PSW.OnLineGames.NFL 木马 的一个变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>vip.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa17.exe - Win32/PSW.OnLineGames.NGU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>explorer2.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>102.exe - Win32/PSW.OnLineGames.NGU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>109.exe - Win32/PSW.OnLineGames.NGU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa18.exe - Win32/PSW.OnLineGames.NGU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>112.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa14.exe - Win32/PSW.OnLineGames.FDY 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>106.exe - Win32/PSW.OnLineGames.FDY 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa4.exe - Win32/PSW.OnLineGames.FDY 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>101.exe - Win32/PSW.OnLineGames.NFL 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa9.exe - Win32/PSW.OnLineGames.NFL 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>113.exe - Win32/PSW.OnLineGames.NGU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\Update1.rar >>RAR >>aa8.exe - Win32/PSW.OnLineGames.NFL 木马的变种
已扫描的文件数目:28
已发现的病毒数目:25
完成时间: 18:19:54 总扫描时间:6 秒 (00:00:06)

注意:
[7] 该文件可能感染上未知病毒。
promised
发表于 2007-11-3 18:20:15 | 显示全部楼层
C:\ABC\Update1.rar:\Avast Virus Cleaner Tool crack.exe - 特征码 'Trojan-Downloader.Win32.Delf.amb' 被发现
C:\ABC\Update1.rar:\immortal_20070525.exe - 特征码 'Trojan-Downloader.Win32.Small.eyw' 被发现
C:\ABC\Update1.rar:\kcehc_eicooc20070702(1).exe - 特征码 'Trojan-Clicker.MNB' 被发现
C:\ABC\Update1.rar:\PR.exe - 特征码 'Trojan.Win32.Dialer.eh' 被发现
C:\ABC\Update1.rar:\aa1.exe - 特征码 'Virus.Win32.Downloader.LL' 被发现
C:\ABC\Update1.rar:\csrss32.exe - 特征码 'Trojan-Clicker.Win32.Small.KJ' 被发现
C:\ABC\Update1.rar:\user4.exe - 特征码 'Trojan-Downloader.Win32.Small.dxm' 被发现
C:\ABC\Update1.rar:\wr-1-682.exe - 特征码 'Trojan-Downloader.Win32.Small.gll' 被发现
C:\ABC\Update1.rar:\down.exe - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\Update1.rar:\1.exe - 特征码 'Trojan-Spy.Win32.Banker.ahy' 被发现
C:\ABC\Update1.rar:\aa11.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Update1.rar:\aa2.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Update1.rar:\Vml.exe - 特征码 'Trojan-PWS.Win32.Agent.BU' 被发现
C:\ABC\Update1.rar:\vip.exe - 特征码 'Packed.Win32.Klone.af' 被发现
C:\ABC\Update1.rar:\aa17.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\Update1.rar:\explorer2.exe - 特征码 'Virus.Trojan.Win32.LowZones.ek' 被发现
C:\ABC\Update1.rar:\102.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\Update1.rar:\109.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\Update1.rar:\aa18.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\Update1.rar:\112.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\Update1.rar:\aa14.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\Update1.rar:\106.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\Update1.rar:\aa4.exe - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\Update1.rar:\101.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.wp' 被发现
C:\ABC\Update1.rar:\aa9.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Update1.rar:\113.exe - 特征码 'Trojan-Spy.Win32.Delf.PD' 被发现
C:\ABC\Update1.rar:\L2.exe - 特征码 'Trojan.Win32.Agent.qt' 被发现
C:\ABC\Update1.rar:\aa8.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\Update1.rar

        29 文件被扫描
          (1 压缩档 28 文件)
        28 特征码被侦测
        0 可疑代码段被发现
        耗时: 0:00.203
caocao
发表于 2007-11-3 18:31:39 | 显示全部楼层
KIS7    28个
已删除:木马程序 Trojan-Downloader.Win32.Delf.amb        文件: D:\Downloads\Update1.rar/Avast Virus Cleaner Tool crack.exe
已删除:木马程序 Trojan-Downloader.Win32.Small.eyw        文件: D:\Downloads\Update1.rar/immortal_20070525.exe
已删除:木马程序 Trojan-Downloader.Win32.Tiny.id        文件: D:\Downloads\Update1.rar/kcehc_eicooc20070702(1).exe
已删除:木马程序 Trojan.Win32.Dialer.pn        文件: D:\Downloads\Update1.rar/PR.exe//UPX
已删除:木马程序 Trojan-Downloader.Win32.Delf.aas        文件: D:\Downloads\Update1.rar/aa1.exe//UPX
已删除:木马程序 Trojan-Clicker.Win32.Small.kj        文件: D:\Downloads\Update1.rar/csrss32.exe//PE_Patch.UPX//UPX
已删除:木马程序 Trojan-Downloader.Win32.Small.fgr        文件: D:\Downloads\Update1.rar/user4.exe
已删除:木马程序 Trojan-Downloader.Win32.Small.gll        文件: D:\Downloads\Update1.rar/wr-1-682.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX
已删除:木马程序 Trojan-Downloader.Win32.Small.fvu        文件: D:\Downloads\Update1.rar/down.exe
已删除:木马程序 Trojan-Downloader.Win32.Agent.buv        文件: D:\Downloads\Update1.rar/1.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.grr        文件: D:\Downloads\Update1.rar/aa11.exe//PE_Patch//UPack//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.grp        文件: D:\Downloads\Update1.rar/aa2.exe//PE_Patch//UPack//PE_Patch
已删除:风险软件 not-a-virus:NetTool.Win32.Agent.b        文件: D:\Downloads\Update1.rar/Vml.exe
已删除:木马程序 Trojan-Downloader.Win32.Agent.eai        文件: D:\Downloads\Update1.rar/vip.exe//NSPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gtg        文件: D:\Downloads\Update1.rar/aa17.exe//PE_Patch
已删除:木马程序 Trojan.Win32.LowZones.ek        文件: D:\Downloads\Update1.rar/explorer2.exe//PE_Patch.UPX//UPX
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gtg        文件: D:\Downloads\Update1.rar/102.exe//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gtg        文件: D:\Downloads\Update1.rar/109.exe//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gtg        文件: D:\Downloads\Update1.rar/aa18.exe//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.fzb        文件: D:\Downloads\Update1.rar/112.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.giv        文件: D:\Downloads\Update1.rar/aa14.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.get        文件: D:\Downloads\Update1.rar/106.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.giv        文件: D:\Downloads\Update1.rar/aa4.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gaa        文件: D:\Downloads\Update1.rar/101.exe//PE_Patch.UPX//UPX//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gro        文件: D:\Downloads\Update1.rar/aa9.exe//PE_Patch//UPack//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gtg        文件: D:\Downloads\Update1.rar/113.exe//PE_Patch
已删除:木马程序 Trojan.Win32.Dialer.qn        文件: D:\Downloads\Update1.rar/L2.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.gti        文件: D:\Downloads\Update1.rar/aa8.exe//PE_Patch//UPack//PE_Patch
残缺的唯美
发表于 2007-11-3 18:54:37 | 显示全部楼层
Result: 26 malware found
Trojan-Downloader.Win32.Delf.amb (virus)
C:\Users\Administrator\Desktop\Update1.rar\Avast Virus Cleaner Tool crack.exe
Trojan-Downloader.Win32.Small.eyw (virus)
C:\Users\Administrator\Desktop\Update1.rar\immortal_20070525.exe
Trojan-Downloader.Win32.Tiny.id (virus)
C:\Users\Administrator\Desktop\Update1.rar\kcehc_eicooc20070702(1).exe
Trojan.Win32.Dialer.pn (virus)
C:\Users\Administrator\Desktop\Update1.rar\PR.exe
Trojan-Downloader.Win32.Delf.aas (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa1.exe
Trojan-Clicker.Win32.Small.kj (virus)
C:\Users\Administrator\Desktop\Update1.rar\csrss32.exe
Trojan-Downloader.Win32.Small.fgr (virus)
C:\Users\Administrator\Desktop\Update1.rar\user4.exe
Trojan-Downloader.Win32.Small.gll (virus)
C:\Users\Administrator\Desktop\Update1.rar\wr-1-682.exe
Trojan-Downloader.Win32.Small.fvu (virus)
C:\Users\Administrator\Desktop\Update1.rar\down.exe
Trojan-Downloader.Win32.Agent.buv (virus)
C:\Users\Administrator\Desktop\Update1.rar\1.exe
Trojan-PSW.Win32.OnLineGames.grr (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa11.exe
Trojan-PSW.Win32.OnLineGames.grp (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa2.exe
Trojan-Downloader.Win32.Agent.eai (virus)
C:\Users\Administrator\Desktop\Update1.rar\vip.exe
Trojan-PSW.Win32.OnLineGames.fei (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa17.exe
Trojan.Win32.LowZones.ek (virus)
C:\Users\Administrator\Desktop\Update1.rar\explorer2.exe
Trojan-PSW.Win32.OnLineGames.gko (virus)
C:\Users\Administrator\Desktop\Update1.rar\102.exe
Trojan-PSW.Win32.OnLineGames.fnn (virus)
C:\Users\Administrator\Desktop\Update1.rar\109.exe
C:\Users\Administrator\Desktop\Update1.rar\aa18.exe
Trojan-PSW.Win32.OnLineGames.fzb (virus)
C:\Users\Administrator\Desktop\Update1.rar\112.exe
Trojan-PSW.Win32.OnLineGames.giv (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa14.exe
C:\Users\Administrator\Desktop\Update1.rar\aa4.exe
Trojan-PSW.Win32.OnLineGames.get (virus)
C:\Users\Administrator\Desktop\Update1.rar\106.exe
Trojan-PSW.Win32.OnLineGames.gaa (virus)
C:\Users\Administrator\Desktop\Update1.rar\101.exe
Trojan-PSW.Win32.OnLineGames.gro (virus)
C:\Users\Administrator\Desktop\Update1.rar\aa9.exe
Trojan-PSW.Win32.OnLineGames.ger (virus)
C:\Users\Administrator\Desktop\Update1.rar\113.exe
Trojan.Win32.Dialer.qn (virus)
C:\Users\Administrator\Desktop\Update1.rar\L2.exe


Riskware found
NetTool.Win32.Agent.b (riskware)
C:\Users\Administrator\Desktop\Update1.rar\Vml.exe
傻猪猪米走鸡
发表于 2007-11-3 19:01:21 | 显示全部楼层

25

F:\virus\Update1.rar » RAR » Avast Virus Cleaner Tool crack.exe - probably a variant of Win32/TrojanDownloader.Delf trojan
F:\virus\Update1.rar » RAR » immortal_20070525.exe - probably unknown NewHeur_PE virus
F:\virus\Update1.rar » RAR » kcehc_eicooc20070702(1).exe - Win32/TrojanDownloader.Tiny.ID trojan
F:\virus\Update1.rar » RAR » PR.exe - a variant of Win32/Dialer.IT trojan
F:\virus\Update1.rar » RAR » aa1.exe - Win32/TrojanDownloader.SMW.A trojan
F:\virus\Update1.rar » RAR » csrss32.exe - Win32/TrojanClicker.Small.NBH trojan
F:\virus\Update1.rar » RAR » user4.exe - Win32/TrojanDownloader.Small.DXM trojan
F:\virus\Update1.rar » RAR » down.exe - a variant of Win32/TrojanDownloader.Small.NXD trojan
F:\virus\Update1.rar » RAR » 1.exe - Win32/Drowor.NAD virus
F:\virus\Update1.rar » RAR » aa11.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
F:\virus\Update1.rar » RAR » aa2.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
F:\virus\Update1.rar » RAR » vip.exe - probably unknown NewHeur_PE virus
F:\virus\Update1.rar » RAR » aa17.exe - Win32/PSW.OnLineGames.NGU trojan
F:\virus\Update1.rar » RAR » explorer2.exe - probably a variant of Win32/Genetik trojan
F:\virus\Update1.rar » RAR » 102.exe - Win32/PSW.OnLineGames.NGU trojan
F:\virus\Update1.rar » RAR » 109.exe - Win32/PSW.OnLineGames.NGU trojan
F:\virus\Update1.rar » RAR » aa18.exe - Win32/PSW.OnLineGames.NGU trojan
F:\virus\Update1.rar » RAR » 112.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
F:\virus\Update1.rar » RAR » aa14.exe - Win32/PSW.OnLineGames.FDY trojan
F:\virus\Update1.rar » RAR » 106.exe - a variant of Win32/PSW.OnLineGames.FDY trojan
F:\virus\Update1.rar » RAR » aa4.exe - Win32/PSW.OnLineGames.FDY trojan
F:\virus\Update1.rar » RAR » 101.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
F:\virus\Update1.rar » RAR » aa9.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
F:\virus\Update1.rar » RAR » 113.exe - Win32/PSW.OnLineGames.NGU trojan
F:\virus\Update1.rar » RAR » aa8.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
hahacomcn
发表于 2007-11-3 19:11:30 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\Administrator\桌面\Update1.rar'
C:\Documents and Settings\Administrator\桌面\Update1.rar
  [0] Archive type: RAR
  --> Avast Virus Cleaner Tool crack.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> immortal_20070525.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.AAAB
  --> kcehc_eicooc20070702(1).exe
      [DETECTION] Is the Trojan horse TR/Click.MNB
  --> PR.exe
      [DETECTION] Is the Trojan horse TR/Dialer.PN.298
  --> aa1.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> csrss32.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> user4.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.dxm.4
  --> wr-1-682.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> down.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zhidao
  --> aa11.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> aa2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> Vml.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> vip.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.eai
  --> aa17.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fei
  --> explorer2.exe
      [DETECTION] Is the Trojan horse TR/Agent.14336.17
  --> 102.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ges
  --> 109.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fnn
  --> aa18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.fnn
  --> 112.exe
      [DETECTION] Is the Trojan horse TR/FWDisable.22620.1
  --> aa14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.giy
  --> 106.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.gey
  --> aa4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.giz
  --> 101.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> aa9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 113.exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> L2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.PEC2X.Gen
  --> aa8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen


End of the scan: 2007年11月3日  19:11
Used time: 00:04 min

The scan has been done completely.

      0 Scanning directories
     30 Files were scanned
     28 viruses and/or unwanted programs were found
scottxzt
发表于 2007-11-3 19:18:37 | 显示全部楼层
木马名称:Trojan.Win32.Dialer.si

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\PR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Trojan-Downloader.Win32.Delf.hmu

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Clicker.Win32.Small.fc

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\CSRSS32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Small.euf

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\DOWN.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Agent.lrh

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?木马名称:Backdoor.Win32.ARP.d

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\VML.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Agent.kvu

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\VIP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Downloader.Win32.Agent.kvu

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\VIP.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.rxb

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA17.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan.Win32.Genetik.bsl
程序:C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\EXPLORER2.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.tao

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\102.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.tkd

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\109.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.rzi

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA18.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.sxe

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\112.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.tiv

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA14.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGames.tej

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\106.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.udn

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.ted

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\101.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件
木马名称:Trojan-PSW.Win32.OnLineGames.teg
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA2.EXE
木马程序生成以下文件:
1) C:\WINDOWS\UPXDND.EXE
2) C:\WINDOWS\SYSTEM32\UPXDND.DLL
是否删除木马程序及其衍生物?
程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA8.EXE
木马程序生成以下文件:
1) C:\WINDOWS\CMDBCS.EXE
2) C:\WINDOWS\SYSTEM32\CMDBCS.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA9.EXE
木马程序生成以下文件:
1) C:\WINDOWS\AVPSRV.EXE
2) C:\WINDOWS\SYSTEM32\AVPSRV.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\AA11.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NVDISPDRV.EXE
2) C:\WINDOWS\SYSTEM32\NVDISPDRV.DLL
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\DELL\桌面\新建文件夹 (2)\USER4.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\LDCORE.DLL
是否删除木马程序及其衍生物?
uhthn2002
发表于 2007-11-3 21:44:54 | 显示全部楼层

vba32

C:\Documents and Settings\Uhthn\Desktop\New Folder\Avast Virus Cleaner Tool crack.exe : infected Trojan-Downloader.Win32.Delf.amb
C:\Documents and Settings\Uhthn\Desktop\New Folder\immortal_20070525.exe : infected Trojan.Click.2454
C:\Documents and Settings\Uhthn\Desktop\New Folder\kcehc_eicooc20070702(1).exe : infected Trojan-Downloader.Win32.Tiny.id
C:\Documents and Settings\Uhthn\Desktop\New Folder\PR.exe : infected Dialer.Wanadoo
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa1.exe : infected Trojan-Downloader.Win32.Delf.aas
C:\Documents and Settings\Uhthn\Desktop\New Folder\csrss32.exe : infected Trojan-Clicker.Win32.Small.kj
C:\Documents and Settings\Uhthn\Desktop\New Folder\user4.exe : infected Trojan-Downloader.Win32.Small.dxm
C:\Documents and Settings\Uhthn\Desktop\New Folder\down.exe : infected Trojan-Downloader.Win32.Small.ffx
C:\Documents and Settings\Uhthn\Desktop\New Folder\1.exe : is suspected of Trojan-Spy.Banker.8
C:\Documents and Settings\Uhthn\Desktop\New Folder\1.exe : backup copy created
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa11.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa2.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\Vml.exe : infected Trojan.Sniff
C:\Documents and Settings\Uhthn\Desktop\New Folder\vip.exe : infected Trojan-Downloader.Win32.Agent.eai
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa17.exe : infected Trojan-PSW.Win32.OnLineGames.fei
C:\Documents and Settings\Uhthn\Desktop\New Folder\explorer2.exe : infected Trojan.Win32.LowZones.ek
C:\Documents and Settings\Uhthn\Desktop\New Folder\102.exe : infected Trojan-PSW.Win32.OnLineGames.gko
C:\Documents and Settings\Uhthn\Desktop\New Folder\109.exe : infected Trojan-PSW.Win32.OnLineGames.eop
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa18.exe : infected Trojan-PSW.Win32.OnLineGames.eop
C:\Documents and Settings\Uhthn\Desktop\New Folder\112.exe : infected Trojan-PSW.Win32.OnLineGames.fzb
C:\Documents and Settings\Uhthn\Desktop\New Folder\106.exe : infected Trojan-PSW.Win32.OnLineGames.get
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa4.exe : infected Trojan-PSW.Win32.OnLineGames.giv
C:\Documents and Settings\Uhthn\Desktop\New Folder\101.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa9.exe : infected MalwareScope.Trojan-PSW.Game.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\113.exe : infected Trojan-PSW.Win32.OnLineGames.ger
C:\Documents and Settings\Uhthn\Desktop\New Folder\aa8.exe : infected MalwareScope.Trojan-PSW.Game.3


Directories       : 0       Files in archives:      Files on disks:
Archives:                   - total       : 0       - total       : 28   
- scanned         : 0       -  scanned    : 0       - scanned     : 28   
- contain viruses : 0       -  infected   : 0       - infected    : 24   
- deleted         : 0       -  suspicious : 0       - suspicious  : 1
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-8-22 05:21 , Processed in 0.141453 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表