查看: 2997|回复: 18
收起左侧

[病毒样本] 10个

[复制链接]
qianwenxiang
发表于 2007-12-8 21:49:05 | 显示全部楼层 |阅读模式
同学机子上的

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Graybird
发表于 2007-12-8 21:52:56 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\windows.rar'
E:\windows.rar
  [0] Archive type: RAR
  --> tempaq
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AJ
  --> GenProtect.exE
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> LotusHlp.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.hzt.7
  --> llllllab
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 136588L.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> dodolook169.exe
      [DETECTION] Contains detection pattern of the dropper DR/BHO.MD.15
  --> h07.exe
      [DETECTION] Contains detection pattern of the dropper DR/BHO.MS
      [INFO]      The file was deleted!

已上报~

[ 本帖最后由 Graybird 于 2007-12-8 22:03 编辑 ]
伊の星
发表于 2007-12-8 21:56:32 | 显示全部楼层
avira 7 个~~
清凉世界
发表于 2007-12-8 21:57:28 | 显示全部楼层
扫描进行于:2007-12-8 21:57:23
扫描日志
NOD32版本 2711 (20071207) NT
命令行: C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar

日期: 8.12.2007  时间:21:57:28
已开启反隐藏功能.
已扫描的磁盘,文件夹及文件:C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>tempaq - Win32/TrojanDownloader.QQHelper.NDW 木马的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>GenProtect.exE - Win32/PSW.OnLineGames.NFL 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>LotusHlp.exe - Win32/PSW.OnLineGames.NFL 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>llllllab - Win32/PSW.WOW.WU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>136588L.exe - Win32/PSW.WOW.WU 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>dodolook169.exe >>NSIS >>ad5114.exe >>NSIS >>Uninst.exe - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>dodolook169.exe >>NSIS >>dodolook169.exe >>NSIS >>77.exe >>NSIS >>acpidisk.sys - Win32/Adware.Cinmus 应用程序的变种
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>h07.exe >>NSIS >>MSLogin32.exe - Win32/TrojanDownloader.QQHelper.NDZ 木马
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>h07.exe >>NSIS >>d03.exe >>NSIS >>cpush.dll - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>h07.exe >>NSIS >>d03.exe >>NSIS >>Uninst.exe - Win32/Adware.Cinmus 应用程序
C:\Documents and Settings\Administrator.0CDC92BBFF714E5\桌面\windows.rar >>RAR >>subc.exe >>NSIS >>baidubar.dat - 读取压缩文件时发生错误
已扫描的文件数目:33
已发现的病毒数目:10
完成时间: 21:57:33 总扫描时间:5 秒 (00:00:05)
qigang
发表于 2007-12-8 22:01:01 | 显示全部楼层

30/11

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.Win32.Mnless.zxw  
病毒: Trojan.PSW.Win32.GameOnline.akk
病毒: Trojan.PSW.Win32.OnlineGames.hzt
病毒: Trojan.PSW.Win32.LMir.yys
病毒: Trojan.PSW.Win32.Woool.c
病毒: Trojan.DL.Win32.Mnless.hc

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.21.52
cageblue
发表于 2007-12-8 22:03:48 | 显示全部楼层
F-Secure 7.1
Result: 8 malware found
Trojan-Downloader.Win32.Agent.fot (virus)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\suba.exe
Trojan-Downloader.Win32.Hmir.km (virus)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\tempaq
Trojan-PSW.Win32.OnLineGames.isb (virus)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\GenProtect.exE
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\LotusHlp.exe
Trojan-PSW.Win32.Lmir.boy (virus)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\llllllab
Trojan-PSW.Win32.OnLineGames.hfr (virus)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\136588L.exe
AdWare.Win32.BHO.md (adware)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\dodolook169.exe
AdWare.Win32.BHO.ms (adware)
    * C:\Documents and Settings\JOHN\®à­±\windows.rar\h07.exe
Statistics
Scanned:
    * Files: 11
    * Not scanned: 0
Result:
    * Viruses: 6
    * Spyware: 2
    * Suspicious items: 0
    * Riskware: 0
Options
Definitions version:

    * Viruses: 2007-12-08_01
    * Spyware: 2007-12-08_01

Scanning Engines:

    * F-Secure AVP: 7.00.171, 2007-12-08
    * F-Secure Libra: 2.04.01, 2007-11-28
    * F-Secure Orion: 1.02.37, 2007-12-08
    * F-Secure Draco: 1.00.35, 2007-11-28

Scanning options:

    * Scan all files
    * Scan inside archives
欠妳緈諨
发表于 2007-12-8 22:05:54 | 显示全部楼层
AVAST杀8个
e-pie
发表于 2007-12-8 22:06:29 | 显示全部楼层
nod32 v3.0 查出10个
luyi0619
发表于 2007-12-8 22:07:14 | 显示全部楼层
金山杀了7个
wangjay1980
发表于 2007-12-8 22:20:53 | 显示全部楼层
10

detected: virus         File: C:\Documents and Settings\Owner\×ÀÃæ\windows.rar/suba.exe
detected: virus         File: C:\Documents and Settings\Owner\×ÀÃæ\windows.rar/tempaq
detected: virus ÿ        File: C:\Documents and Settings\Owner\×ÀÃæ\windows.rar/GenProtect.exE
detected: virus ÿ        File: C:\Documents and Settings\Owner\×ÀÃæ\windows.rar/LotusHlp.exe
detected: virus êÔ’|ÿ
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-22 11:12 , Processed in 0.116313 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表