查看: 2530|回复: 14
收起左侧

[病毒样本] 5个

[复制链接]
qianwenxiang
发表于 2007-11-24 12:43:17 | 显示全部楼层 |阅读模式
baidu.exe下载两个
http://www.onlinek.net/ad/log/ht4.exe  
http://vip.20-09.cn/dos.exe [失效]
[里面重复3个 已经删掉]

[ 本帖最后由 qianwenxiang 于 2007-11-24 12:46 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Nerazzurri
发表于 2007-11-24 12:45:04 | 显示全部楼层
deleted: Trojan program Trojan-PSW.Win32.Delf.ahq        File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\112401.rar/InfoMs.tdm
deleted: Trojan program Trojan-PSW.Win32.Delf.ahq        File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\112401.rar/MircSoft(1).exe//PE_Patch.UPX//UPX
deleted: virus Virus.Win32.AutoRun.aep        File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\112401.rar/baidu.exe//NSPack
deleted: riskware not-a-virus:AdTool.Win32.MyWebSearch.aw        File: C:\Documents and Settings\Nerazzurri\×ÀÃæ\112401.rar/f3Setup1.exe
Graybird
发表于 2007-11-24 12:45:39 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\112401.rar'
E:\112401.rar
  [0] Archive type: RAR
  --> InfoMs.sys
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
  --> InfoMs.tdm
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
  --> MircSoft(1).exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
  --> MircSoft.exe
      [DETECTION] Is the Trojan horse TR/Agent.21626
  --> baidu.exe
      [DETECTION] Is the Trojan horse TR/Agent.21626
  --> f3Setup1.exe
      [DETECTION] Contains detection pattern of the application APPL/AdInstaller.B
  --> ht4.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.vzw Backdoor server programs
      [INFO]      The file was deleted!


End of the scan: 2007年11月24日  12:45
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      7 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
will
发表于 2007-11-24 13:28:47 | 显示全部楼层

avast 3

"Win32:AutoRun-IE [Wrm]" has been found in "baidu.exe\[NsPack]" file.  
"Win32:Delf-FHQ [Trj]" has been found in "InfoMs.tdm" file.  
"Win32:Delf-FHQ [Trj]" has been found in "MircSoft(1).exe\[UPX]\[Embedded#05af0]" file.
promised
发表于 2007-11-24 13:36:46 | 显示全部楼层
C:\ABC\112401.rar:\InfoMs.tdm - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\112401.rar:\MircSoft(1).exe - 特征码 'Trojan-Proxy.Win32.Delf.AN' 被发现
C:\ABC\112401.rar:\urlmon.gjj
C:\ABC\112401.rar:\baidu.exe - 特征码 'Trojan-PWS.Win32.QQPass.pb' 被发现
C:\ABC\112401.rar:\f3Setup1.exe - 特征码 'not-a-virus:AdWare.Win32.FunWeb.e' 被发现
C:\ABC\112401.rar
promised
发表于 2007-11-24 13:37:57 | 显示全部楼层
C:\ABC\112401.rar
        C:\ABC\112401.rar\InfoMs.tdm
>>> Virus 'Mal/PWS-K' found in file C:\ABC\112401.rar\InfoMs.tdm
        C:\ABC\112401.rar\MircSoft(1).exe
        C:\ABC\112401.rar\MircSoft(1).exe\FILE:0000
>>> Virus 'Mal/PWS-K' found in file C:\ABC\112401.rar\MircSoft(1).exe\FILE:0000
>>> Virus 'Mal/Dropper-H' found in file C:\ABC\112401.rar\MircSoft(1).exe
        C:\ABC\112401.rar\urlmon.gjj
        C:\ABC\112401.rar\baidu.exe
>>> Virus 'Mal/Behav-156' found in file C:\ABC\112401.rar\baidu.exe
        C:\ABC\112401.rar\f3Setup1.exe
        C:\ABC\112401.rar\f3Setup1.exe\FILE:0000
kkgh
发表于 2007-11-24 14:22:35 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.DL.Win32.Mnless.db
病毒: Trojan.Dialer.Agent.z   

用户来源:互联网

软件版本:20.19.50
sam.to
发表于 2007-11-24 14:40:45 | 显示全部楼层
已刪除: 病毒 Virus.Win32.AutoRun.aep    檔案: C:\Documents and Settings\kato9096\桌面\161144\baidu.exe//NSPack
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.FunWeb.e    檔案: C:\Documents and Settings\kato9096\桌面\161144\f3Setup1.exe
已刪除: 廣告軟體 not-a-virus:AdWare.Win32.FunWeb.e    檔案: C:\Documents and Settings\kato9096\桌面\161144\f3Setup1.exe//#
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.ahq    檔案: C:\Documents and Settings\kato9096\桌面\161144\InfoMs.tdm
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Delf.ahq    檔案: C:\Documents and Settings\kato9096\桌面\161144\MircSoft(1).exe//PE_Patch.UPX//UPX

5,一个没报,已上报
sam.to
发表于 2007-11-24 17:08:35 | 显示全部楼层
Hello.
No malicious software was found in the attached file.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Maslennikov Denis
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com
qigang
发表于 2007-11-24 20:00:15 | 显示全部楼层

8/4

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.IMMSG.Win32.MsgSender.am
病毒: Trojan.IMMSG.Win32.MsgSender.am
病毒: Trojan.DL.Win32.Mnless.db
病毒: Trojan.Dialer.Agent.z   

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.19.52
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-28 15:52 , Processed in 0.127966 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表