查看: 1877|回复: 7
收起左侧

[病毒样本] 几个病毒样本地址

[复制链接]
wanglaoban
发表于 2007-12-4 12:51:25 | 显示全部楼层 |阅读模式
hxxp://58.65.239.42/msc61/krea.exe
hxxp://58.65.239.42/msc61/ldig001.exe
hxxp://58.65.239.42/msc61/install.exe
hxxp://58.65.239.42/msc61/01112.exe
hxxp://58.65.239.42/msc61/u_f1_v33_61.exe
hxxp://58.65.239.42/msc61/zloi.exe
hxxp://208.72.169.78/25319.exe
mofunzone
发表于 2007-12-4 12:56:29 | 显示全部楼层
残留了一个。。

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\zloi.exe'
C:\TDDOWNLOAD\
  zloi.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.gxd
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\01112.exe'
C:\TDDOWNLOAD\
  01112.exe
    [0] Archive type: RSRC
    --> Object
Begin scan in 'C:\TDDOWNLOAD\25319.exe'
C:\TDDOWNLOAD\
  25319.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\install.exe'
C:\TDDOWNLOAD\
  install.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\krea.exe'
C:\TDDOWNLOAD\
  krea.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\ldig001.exe'
C:\TDDOWNLOAD\
  ldig001.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\u_f1_v33_61.exe'
C:\TDDOWNLOAD\
  u_f1_v33_61.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Saturn.M
      [INFO]      The file was deleted!


End of the scan: 2007年12月3日  20:56
Used time: 00:05 min

The scan has been done completely.

      0 Scanning directories
      7 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
红心王子
发表于 2007-12-4 13:40:05 | 显示全部楼层
楼主发的链接7个样本 先打包先供大家方便测试

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
绅博周幸
发表于 2007-12-4 13:47:38 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Users\Xing\Downloads\Downloads.rar'
C:\Users\Xing\Downloads\Downloads.rar
  [0] Archive type: RAR
  --> ldig001.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 01112.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
  --> zloi.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.gxd
  --> krea.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> u_f1_v33_61.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Saturn.M
  --> install.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 25319.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [INFO]      The file was deleted!

红伞全部杀死
绅博周幸
发表于 2007-12-4 13:50:47 | 显示全部楼层
原帖由 mofunzone 于 2007-12-4 12:56 发表
残留了一个。。

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\zloi.exe'
C:\TDDOWNLOAD\
  zloi.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.gxd
            The file was delet ...


V8 miss one because the new search engine has some bugs.
sam.to
发表于 2007-12-4 13:50:51 | 显示全部楼层
Viruslist.com(kaspersky)结果:

Scanned file:   Downloads.rar  - Infected
Downloads.rar/ldig001.exe - infected by Trojan-Dropper.Win32.Agent.cqg
Downloads.rar/01112.exe - infected by Trojan-Proxy.Win32.Xorpix.bt
Downloads.rar/zloi.exe - infected by Trojan-Downloader.Win32.Small.gxd
Downloads.rar/krea.exe - infected by Trojan-Downloader.Win32.Agent.evl
Downloads.rar/u_f1_v33_61.exe - infected by Trojan-Proxy.Win32.Saturn.m
Downloads.rar/install.exe - infected by Trojan-Clicker.Win32.Costrat.bz
Downloads.rar/25319.exe - infected by Trojan.Win32.Qhost.it
BING126
头像被屏蔽
发表于 2007-12-4 14:46:11 | 显示全部楼层
扫描开始时间: 2007-12-4 14:46:16
扫描日志
NOD32 版本 2699 (20071203) NT
命令行: C:\Documents and Settings\Administrator\桌面\Downloads.rar

日期: 2007年12月4日  时间: 14:46:19
反 Rookits 技术已启用。
已扫描磁盘、文件夹和文件: C:\Documents and Settings\Administrator\桌面\Downloads.rar
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?ldig001.exe<病毒 - Win32/TrojanDropper.Agent.CQD 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?01112.exe<病毒 - Win32/Agent.OH 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?zloi.exe<病毒 - Win32/Agent.NNN 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?krea.exe<病毒 - Win32/TrojanDownloader.Agent.EVL 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?u_f1_v33_61.exe<病毒 - Win32/Nulprot 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?install.exe<病毒 - Win32/Rustock.NCX 木马>
C:\Documents and Settings\Administrator\桌面\Downloads.rar ?RAR ?25319.exe<病毒 - Win32/TrojanDropper.Agent.AKO 木马 变种>
已扫描文件数量: 7
已发现病毒数量: 7
完成时间: 14:46:19 总共扫描时间: 0 秒 (00:00:00)
qigang
发表于 2007-12-4 19:10:36 | 显示全部楼层

8/6

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Dropper.Win32.Agent.cqg  
病毒: Trojan.Win32.Agent.zmv   
病毒: Trojan.Win32.Mnless.zym  
病毒: Trojan.DL.Win32.Agent.zyc
病毒: Trojan.Clicker.Win32.Costrat.bz
病毒: Trojan.Qhost.rb         

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.21.11
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-22 21:19 , Processed in 0.132349 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表