毒网及样本[MD5: CEC7B5]

wulm

http://cc.ehai01.com/1.htm

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\样本.rar'
C:\Users\morgan\Documents\
  样本.rar
    [0] Archive type: RAR
    --> a.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

浪滔天

已检测到: 木马程序 Trojan-Downloader.Win32.Delf.czb        URL: http://bbs.kafan.cn/attachment.php?aid=154584//a.exe

mofunzone

下载的东西

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\20.exe'
C:\TDDOWNLOAD\
  20.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\2.exe'
C:\TDDOWNLOAD\
  2.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\3.exe'
C:\TDDOWNLOAD\
  3.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\4.exe'
C:\TDDOWNLOAD\
  4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\5.exe'
C:\TDDOWNLOAD\
  5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\6.exe'
C:\TDDOWNLOAD\
  6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\7.exe'
C:\TDDOWNLOAD\
  7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\8.exe'
C:\TDDOWNLOAD\
  8.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\10.exe'
C:\TDDOWNLOAD\
  10.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\11.exe'
C:\TDDOWNLOAD\
  11.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\12.exe'
C:\TDDOWNLOAD\
  12.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\13.exe'
C:\TDDOWNLOAD\
  13.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\14.exe'
C:\TDDOWNLOAD\
  14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\15.exe'
C:\TDDOWNLOAD\
  15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hqq
      [WARNING]   The file was ignored!
Begin scan in 'C:\TDDOWNLOAD\19.exe'
C:\TDDOWNLOAD\
  19.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.hcv
      [WARNING]   The file was ignored!


End of the scan: 2007年11月17日  19:26
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
     14 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
     15 Warnings
      0 Notes

微点卫士

木马名称:Trojan-Downloader.Win32.Delf.huh

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR.DDB55590E8074DB\桌面\A.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

欠妳緈諨

D:\病毒测试\未解压样本\样本.rar » RAR » a.exe - Win32/TrojanDownloader.Delf.OAF trojan

欠妳緈諨

D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 19.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 20.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 2.exe - a variant of Win32/PSW.Agent.NEC trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 4.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 5.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 6.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 7.exe - Win32/PSW.OnLineGames.NIF trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 8.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 10.exe - a variant of Win32/PSW.OnLineGames.YA trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 11.exe - probably a variant of Win32/PSW.OnLineGames.GJV trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 12.exe - probably a variant of Win32/Genetik trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 13.exe - probably a variant of Win32/PSW.WOW.WU trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 14.exe - Win32/PSW.WOW.WU trojan
D:\病毒测试\未解压样本\TDDOWNLOAD.rar » RAR » 15.exe - Win32/PSW.OnLineGames.NFL trojan

promised

落雪的东西

killloop

江民0个

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 939
Paranoia Database - 48881
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\a.exe

C:\Documents and Settings\Uhthn\Desktop\a.exe - Infected WIN32.TROJAN-DOWNLOADER.AGENT.20 - Deleted

1 Files scanned
1 Infected files found
0 Suspected files found
0 Files disinfected
1 Files deleted