查看: 5013|回复: 20
收起左侧

[病毒样本] 游戏盗号木马地址 【22个】

[复制链接]
mofunzone
发表于 2007-11-21 10:43:03 | 显示全部楼层
1和16失效,剩下全灭
Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\22.exe'
C:\TDDOWNLOAD\
  22.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hzt.8
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\2.exe'
C:\TDDOWNLOAD\
  2.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\3.exe'
C:\TDDOWNLOAD\
  3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hnt
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\4.exe'
C:\TDDOWNLOAD\
  4.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\5.exe'
C:\TDDOWNLOAD\
  5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\6.exe'
C:\TDDOWNLOAD\
  6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\7.exe'
C:\TDDOWNLOAD\
  7.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\8.exe'
C:\TDDOWNLOAD\
  8.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bty.34
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\9.exe'
C:\TDDOWNLOAD\
  9.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\10.exe'
C:\TDDOWNLOAD\
  10.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\11.exe'
C:\TDDOWNLOAD\
  11.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\12.exe'
C:\TDDOWNLOAD\
  12.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\13.exe'
C:\TDDOWNLOAD\
  13.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\14.exe'
C:\TDDOWNLOAD\
  14.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\15.exe'
C:\TDDOWNLOAD\
  15.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bty.29
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\17.exe'
C:\TDDOWNLOAD\
  17.exe
      [DETECTION] Is the Trojan horse TR/Agent.AFVL
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\18.exe'
C:\TDDOWNLOAD\
  18.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlineg.KC.2
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\19.exe'
C:\TDDOWNLOAD\
  19.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bty.17
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\20.exe'
C:\TDDOWNLOAD\
  20.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\21.exe'
C:\TDDOWNLOAD\
  21.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月20日  18:42
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     20 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     20 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
tonger2003
发表于 2007-11-21 10:48:52 | 显示全部楼层


已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hqh 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/17.exe
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hqh 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/18.exe
已删除:木马程序 Trojan-PSW.Win32.Nilage.bty 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/19.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.igz 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/21.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hzt 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/22.exe//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.ifu 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/2.exe//PE_Patch//UPack//#
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hnt 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/3.exe//FSG
已删除:病毒 Heur.Invader (修改) 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/4.exe//UPack
已删除:病毒 Heur.Invader (修改) 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/5.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hhn 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/6.exe//PE_Patch//UPack//#
已删除:病毒 Heur.Invader (修改) 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/7.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.Nilage.bty 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/8.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hqh 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/9.exe
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.icd 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/10.exe//PE_Patch//UPack//#
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.igy 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/11.exe//FSG
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.igw 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/12.exe//UPX
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hfr 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/14.exe//ASPack
已删除:木马程序 Trojan-PSW.Win32.Lmir.boy 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/13.exe//ASPack
已删除:木马程序 Trojan-PSW.Win32.Nilage.bty 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/15.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.ifv 文件: C:\Documents and Settings\Administrator\桌面\桌面.rar/2.exe//PE_Patch//UPack
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.hho 文件: c:\documents and settings\administrator\桌面\桌面.rar/6.exe//PE_Patch//UPack//PE_Patch
已删除:木马程序 Trojan-PSW.Win32.OnLineGames.icd 文件: c:\documents and settings\administrator\桌面\桌面.rar/10.exe//PE_Patch//UPack//PE_Patch

[ 本帖最后由 tonger2003 于 2007-11-21 10:52 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wanglaoban
 楼主| 发表于 2007-11-21 10:57:01 | 显示全部楼层
KAV6才灭了差不多一半
我是小菜鸟
发表于 2007-11-21 11:27:27 | 显示全部楼层
20个,传说中的红伞
wangjay1980
发表于 2007-11-21 11:44:54 | 显示全部楼层
卡6杀16个
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/17.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/18.exe
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/19.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igz        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/21.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hzt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/22.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ifv        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/2.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hnt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/3.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hho        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/6.exe//PE_Patch//UPack//PE_Patch
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/9.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.icd        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/10.exe//PE_Patch//UPack//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igy        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/11.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igw        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/12.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hfr        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/14.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.Lmir.boy        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/13.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/15.exe//PE_Patch//UPack

卡7 19个,漏一个
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/17.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/18.exe
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/19.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igz        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/21.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hzt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/22.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ifv        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/2.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hnt        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/3.exe//FSG
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/4.exe//UPack
detected: virus Heur.Trojan.Generic (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/5.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hho        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/6.exe//PE_Patch//UPack//PE_Patch
detected: virus Heur.AntiAV (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/7.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hqh        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/9.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.icd        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/10.exe//PE_Patch//UPack//PE_Patch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igy        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/11.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.igw        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/12.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.hfr        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/14.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.Lmir.boy        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/13.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.Nilage.bty        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/15.exe//PE_Patch//UPack
kidaaaa
发表于 2007-11-21 12:13:31 | 显示全部楼层
NOD32全杀~~

扫描开始时间: 2007-11-21 12:12:47
扫描日志
NOD32 版本 2674 (20071121) NT
命令行: H:\Download\毒样\桌面22g.rar
D:\Program Files\Eset\nod32.exe<病毒 - 正常>
物理磁盘 1 的 MBR 扇区,<病毒 - 正常>
物理磁盘 1 的活动引导扇区,<病毒 - 正常>

日期: 2007年11月21日  时间: 12:12:49
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: H:\Download\毒样\桌面22g.rar
H:\Download\毒样\桌面22g.rar ?RAR ?17.exe<病毒 - Win32/PSW.OnLineGames.NGU 木马>
H:\Download\毒样\桌面22g.rar ?RAR ?18.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?19.exe<病毒 - Win32/PSW.OnLineGames.HCV 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?20.exe<病毒 - Win32/PSW.OnLineGames.GJV 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?21.exe<病毒 - Win32/PSW.OnLineGames.YA 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?22.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马>
H:\Download\毒样\桌面22g.rar ?RAR ?2.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?3.exe<病毒 - Win32/PSW.OnLineGames.GJV 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?4.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?5.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?6.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?7.exe<病毒 - Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?8.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?9.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NGU 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?10.exe<病毒 - Win32/PSW.OnLineGames.YA 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?11.exe<病毒 - 可能是 Win32/PSW.OnLineGames.GJV 木马 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?12.exe<病毒 - 可能是 Win32/AutoRun.Q 蠕虫 变种>
H:\Download\毒样\桌面22g.rar ?RAR ?14.exe<病毒 - Win32/PSW.WOW.WU 木马>
H:\Download\毒样\桌面22g.rar ?RAR ?13.exe<病毒 - Win32/PSW.WOW.WU 木马>
H:\Download\毒样\桌面22g.rar ?RAR ?15.exe<病毒 - 可能是 Win32/PSW.OnLineGames.NFL 木马 变种>
H:\Download\毒样\桌面22g.rar:Zone.Identifier<病毒 - 正常>
已扫描文件数量: 21
已发现病毒数量: 20
完成时间: 12:12:52 总共扫描时间: 3 秒 (00:00:03)
taitan001
发表于 2007-11-21 12:33:14 | 显示全部楼层
vba  20```
viruscn
发表于 2007-11-21 12:38:38 | 显示全部楼层
同样是1和16下载失败,文件不存在,其他的都搞定了,AVAST专业版
葬禮
发表于 2007-11-21 13:19:09 | 显示全部楼层
Fs只查到16个
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-11-8 05:59 , Processed in 0.135883 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表