测测

显示全部楼层 · 发表于 2007-12-16 14:50:29

...............

显示全部楼层 · 发表于 2007-12-16 14:56:04

http://61.157.109.222/a1.exe
http://222.92.41.228/a2.exe
http://222.92.41.228/a3.exe
http://222.92.41.228/a4.exe
http://222.92.41.228/a5.exe
http://222.92.41.228/a6.exe
http://222.92.41.228/a7.exe
http://222.92.41.228/a8.exe
http://222.92.41.228/a9.exe
http://222.92.41.228/a10.exe
http://61.157.109.222/a11.exe
http://61.157.109.222/a12.exe
http://61.157.109.222/a13.exe
http://61.157.109.222/a14.exe
http://58.211.79.209/a15.exe
http://58.211.79.209/a16.exe
http://58.211.79.209/a17.exe
http://58.211.79.209/a18.exe
http://58.211.79.209/a19.exe
http://58.211.79.117/a20.exe
http://58.211.79.209/a21.exe
http://58.211.79.209/a22.exe
http://58.211.79.209/a23.exe
http://58.211.79.209/a24.exe
http://58.211.79.117/a25.exe
http://58.211.79.117/a26.exe
http://222.92.41.228/a27.exe

detected: Trojan program Trojan-Downloader.Win32.Agent.blm File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a7.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kkr File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a8.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ktr File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a9.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a10.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kev File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a11.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ktk File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a12.exe//UPack
detected: Trojan program Trojan-PSW.Win32.Lmir.boy File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a13.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kqd File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a14.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kxq File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a15.exe//UPack//#
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kqu File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a16.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a17.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ktl File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a18.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kpq File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a19.exe//UPack
detected: Trojan program Backdoor.Win32.Delf.cgb File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a20.exe//FSG//PEPatch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kcw File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a21.exe//ASPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ktp File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a22.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kxp File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a23.exe//UPack
detected: virus Heur.Trojan.Generic File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a24.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kwh File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a25.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kwg File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a26.exe//UPack
detected: Trojan program Trojan.Win32.Delf.aom File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a1.exe//FSG//PEPatch
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kwk File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a2.exe//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.kwj File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a3.exe
detected: Trojan program Trojan-Downloader.Win32.Delf.aas File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a4.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.isb File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a5.exe
detected: Trojan program Trojan-Dropper.Win32.Microjoin.gc File: C:\Documents and Settings\Owner\×ÀÃæ\Downloads.rar/a6.exe

26

[ 本帖最后由 wangjay1980 于 2007-12-16 15:45 编辑 ]

显示全部楼层 · 发表于 2007-12-16 15:00:12

Suspicious Files and Miscellaneous Uploads

Thank you for your submission. Below you can see the current status of the uploaded files.

--------------------------------------------------------------------------------

We received the following archive files:

File ID  Filename  Size (Byte) Result
3600594  FSEc.rar 209 Byte OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
3600595  FSEc.COM  804 Byte  UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename Result
FSEc.COM  UNDER ANALYSIS

The file 'FSEc.COM' has been determined to be 'UNDER ANALYSIS'.

--------------------------------------------------------------------------------
Please note that you will receive an email which will contain the results shown above. In case the final outcome of the analysis is not yet finished for all files the notification will be sent once ready.
Print this page

显示全部楼层 · 发表于 2007-12-16 15:02:29

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\a8.exe'
C:\TDDOWNLOAD\
  a8.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a9.exe'
C:\TDDOWNLOAD\
  a9.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a10.exe'
C:\TDDOWNLOAD\
  a10.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a11.exe'
C:\TDDOWNLOAD\
  a11.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a12.exe'
C:\TDDOWNLOAD\
  a12.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/FWDisable.23430
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a13.exe'
C:\TDDOWNLOAD\
  a13.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a14.exe'
C:\TDDOWNLOAD\
  a14.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a15.exe'
C:\TDDOWNLOAD\
  a15.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a16.exe'
C:\TDDOWNLOAD\
  a16.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kru
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a17.exe'
C:\TDDOWNLOAD\
  a17.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.27136.8
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a18.exe'
C:\TDDOWNLOAD\
  a18.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a19.exe'
C:\TDDOWNLOAD\
  a19.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpq
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a20.exe'
C:\TDDOWNLOAD\
  a20.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a21.exe'
C:\TDDOWNLOAD\
  a21.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/Spy.Gen
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a22.exe'
C:\TDDOWNLOAD\
  a22.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Wow.agv
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a23.exe'
C:\TDDOWNLOAD\
  a23.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a24.exe'
C:\TDDOWNLOAD\
  a24.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a25.exe'
C:\TDDOWNLOAD\
  a25.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a26.exe'
C:\TDDOWNLOAD\
  a26.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfj
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a1.exe'
C:\TDDOWNLOAD\
  a1.exe
   [DETECTION] Is the Trojan horse TR/Delf.aom
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a2.exe'
C:\TDDOWNLOAD\
  a2.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a3.exe'
C:\TDDOWNLOAD\
  a3.exe
[0] Archive type: RSRC
--> Object
--> Object
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a4.exe'
C:\TDDOWNLOAD\
  a4.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a5.exe'
C:\TDDOWNLOAD\
  a5.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains suspicious code HEUR/Malware
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a6.exe'
C:\TDDOWNLOAD\
  a6.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Contains detection pattern of the worm WORM/Autorun.apq
         [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\a7.exe'
C:\TDDOWNLOAD\
  a7.exe
[0] Archive type: RSRC
--> Object
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
      [WARNING] Infected files in archives cannot be repaired!
   [INFO]    The file was deleted!

End of the scan: 2007年12月15日  23:02
Used time: 00:07 min

The scan has been done completely.

   0 Scanning directories
   26 Files were scanned
   19 viruses and/or unwanted programs were found
   7 Files were classified as suspicious:
   26 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   7 Files not concerned
   23 Archives were scanned
   20 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-16 15:04:02

这个住文件是个txt文档。。。
这样貌似不能自动下载的吧。。

显示全部楼层 · 发表于 2007-12-16 15:08:40

原帖由 wangjay1980 于 2007-12-16 14:56 发表
http://61.157.109.222/a1.exe
http://222.92.41.228/a2.exe
http://222.92.41.228/a3.exe
http://222.92.41.228/a4.exe
http://222.92.41.228/a5.exe
http://222.92.41.228/a6.exe
http://222.92.41.228/a7.e ...

26个全灭，27号那个网址失效。

Starting the file scan:
Begin scan in 'C:\Users\Xing\Desktop\Downloads\Downloads.rar'
C:\Users\Xing\Desktop\Downloads\Downloads.rar
  [0] Archive type: RAR
  --> a7.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Agent.blm.3
  --> a8.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a9.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
  --> a10.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
  --> a11.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
  --> a12.exe
   [DETECTION] Is the Trojan horse TR/FWDisable.23430
  --> a13.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> a14.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
  --> a15.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a16.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kru
  --> a17.exe
   [DETECTION] Is the Trojan horse TR/PSW.27136.8
  --> a18.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
  --> a19.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpq
  --> a20.exe
   [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
  --> a21.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a22.exe
   [DETECTION] Is the Trojan horse TR/PSW.Wow.agv
  --> a23.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a24.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a25.exe
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> a26.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfj
  --> a1.exe
   [DETECTION] Is the Trojan horse TR/Delf.aom
  --> a2.exe
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> a3.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> a4.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> a5.exe
   [DETECTION] Is the Trojan horse TR/PSW.28160.23
  --> a6.exe
   [DETECTION] Contains detection pattern of the worm WORM/Autorun.apq
   [WARNING] The file was ignored!

End of the scan: 2007年12月15日  23:06
Used time: 00:16 min
The scan has been done completely.
   0 Scanning directories
   27 Files were scanned
   26 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   1 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2007-12-16 15:10:47

原帖由 mofunzone 于 2007-12-16 15:04 发表
这个住文件是个txt文档。。。
这样貌似不能自动下载的吧。。

V8还是有问题哦，V7全部已知，V8居然不能

显示全部楼层 · 发表于 2007-12-16 15:19:19

原帖由 绅博周幸 于 2007-12-16 15:10 发表

V8还是有问题哦，V7全部已知，V8居然不能

要是V7启发报也就算了，既然全部报已知，V8还不能……
神奇……

AVAST 22个

[ 本帖最后由无尽藏海于 2007-12-16 15:24 编辑 ]

显示全部楼层 · 发表于 2007-12-16 15:37:51

因为V8很多gen去掉了

显示全部楼层 · 发表于 2007-12-16 15:59:52

费尔杀26个。。

[病毒样本] 测测

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 7楼绅博周幸的帖子

[病毒样本] 测测

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 7楼 绅博周幸 的帖子

回复 7楼绅博周幸的帖子