查看: 3292|回复: 20
收起左侧

[病毒样本] 十九个

[复制链接]
liunanyuan
发表于 2007-12-17 08:15:48 | 显示全部楼层 |阅读模式
...............................

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Graybird
发表于 2007-12-17 08:17:02 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\Virus\19.rar'
E:\Virus\19.rar
  [0] Archive type: RAR
  --> a22[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Wow.agv
  --> a25[1].exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> a26[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfj
  --> a3[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> a4[1].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> a5[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.28160.23
  --> a6[1].exe
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.apq
  --> a8[1].exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> a9[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
  --> a10[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
  --> a11[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
  --> a12[1].exe
      [DETECTION] Is the Trojan horse TR/FWDisable.23430
  --> a14[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
  --> a15[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kry
  --> a16[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kru
  --> a17[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.27136.8
  --> a18[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
  --> a19[1].exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpq
  --> a20[1].exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [WARNING]   The file was ignored!


End of the scan: 2007年12月17日  08:17
Used time: 00:17 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     19 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
HC303
发表于 2007-12-17 08:18:06 | 显示全部楼层
毒霸17,瑞星12,红伞19,江民19个。
mofunzone
发表于 2007-12-17 08:54:42 | 显示全部楼层
为什么最近都看不见用nod32的人来测试样本了?
Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\19.rar'
C:\Users\morgan\Documents\
  19.rar
    [0] Archive type: RAR
      --> a22[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.Wow.agv
              [WARNING]   Infected files in archives cannot be repaired!
      --> a25[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      --> a26[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfj
              [WARNING]   Infected files in archives cannot be repaired!
      --> a3[1].exe
        [1] Archive type: RSRC
        --> Object
        --> Object
    --> a4[1].exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
      --> a5[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.28160.23
              [WARNING]   Infected files in archives cannot be repaired!
      --> a6[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains detection pattern of the worm WORM/Autorun.apq
              [WARNING]   Infected files in archives cannot be repaired!
      --> a8[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      --> a9[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ktu
              [WARNING]   Infected files in archives cannot be repaired!
      --> a10[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jyq
              [WARNING]   Infected files in archives cannot be repaired!
      --> a11[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kdk
              [WARNING]   Infected files in archives cannot be repaired!
      --> a12[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/FWDisable.23430
              [WARNING]   Infected files in archives cannot be repaired!
      --> a14[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.jfh
              [WARNING]   Infected files in archives cannot be repaired!
      --> a15[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kry
              [WARNING]   Infected files in archives cannot be repaired!
      --> a16[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.kru
              [WARNING]   Infected files in archives cannot be repaired!
      --> a17[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.27136.8
              [WARNING]   Infected files in archives cannot be repaired!
      --> a18[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnLinGame.ktm
              [WARNING]   Infected files in archives cannot be repaired!
      --> a19[1].exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.kpq
              [WARNING]   Infected files in archives cannot be repaired!
    --> a20[1].exe
        [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
        [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2007年12月16日  16:54
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     17 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
     18 Archives were scanned
     16 Warnings
      0 Notes
happytor
头像被屏蔽
发表于 2007-12-17 10:00:09 | 显示全部楼层
卡巴也是报19个。。
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ktp        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a22[1].exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kwh        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a25[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kwg        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a26[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kwj        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a3[1].exe
deleted: Trojan program Trojan-Downloader.Win32.Delf.aas        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a4[1].exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a5[1].exe
deleted: Trojan program Trojan-Dropper.Win32.Microjoin.gc        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a6[1].exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kkr        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a8[1].exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ktr        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a9[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a10[1].exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kev        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a11[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ktk        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a12[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kqd        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a14[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kzx        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a15[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kqu        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a16[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.isb        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a17[1].exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ktl        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a18[1].exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.kpq        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a19[1].exe//UPack
deleted: Trojan program Backdoor.Win32.Delf.cgb        File: C:\Documents and Settings\zhangwei.happy\桌面\19.rar/a20[1].exe//FSG//PEPatch
天灰
发表于 2007-12-17 10:10:01 | 显示全部楼层
大蜘蛛19个全杀

19.rar\a22[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.origin;;
a25[1].exe\data002;C:\Documents and Settings\77\My Documents\19.rar\a25[1].exe;Trojan.PWS.Gamania.6442;;
a25[1].exe\data003;C:\Documents and Settings\77\My Documents\19.rar\a25[1].exe;Trojan.PWS.Gamania.6442;;
a25[1].exe;C:\Documents and Settings\77\My Documents\19.rar;发现档案文件中有受感染的对象;;
19.rar\a26[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6404;;
19.rar\a3[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6448;;
19.rar\a4[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.DownLoader.30488;;
19.rar\a5[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Wsgame.2463;;
19.rar\a6[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Win32.HLLW.Autoruner.1030;;
19.rar\a8[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Wow.origin;;
19.rar\a9[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6406;;
19.rar\a10[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Wsgame.2379;;
19.rar\a11[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6346;;
19.rar\a12[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6408;;
19.rar\a14[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6427;;
19.rar\a15[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6427;;
19.rar\a16[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6404;;
19.rar\a17[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Wsgame.2418;;
19.rar\a18[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.origin;;
19.rar\a19[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.PWS.Gamania.6465;;
19.rar\a20[1].exe;C:\Documents and Settings\77\My Documents\19.rar;Trojan.Sniff;;
19.rar;C:\Documents and Settings\77\My Documents;发现档案文件中有受感染的对象;;
wenbin
发表于 2007-12-17 10:13:30 | 显示全部楼层
McAfee 14号病毒库 19个。
曲中求
发表于 2007-12-17 10:16:48 | 显示全部楼层
咖啡19

2007-12-17        10:17:11        引擎版本=5200.2160
2007-12-17        10:17:11        防病毒 DAT 版本=5186.0000
2007-12-17        10:17:11        EXTRA.DAT 中的检测项特征码数=无
2007-12-17        10:17:11        EXTRA.DAT 中的检测项特征码名称=无
2007-12-17        10:17:00        扫描已启动        MICROSOF-F67B91\Administrator        按需扫描
2007-12-17        10:17:11        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A22[1].EXE        PWS-Mmorpg.gen(特洛伊)
2007-12-17        10:17:11        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A25[1].EXE        New Malware.n(特洛伊)
2007-12-17        10:17:12        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A26[1].EXE\A26[1].EXE\0000630c.EXE        PWS-OnlineGames.q.dll(特洛伊)
2007-12-17        10:17:14        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A3[1].EXE\00000e80.EXE\00000e80.EXE        PWS-LegMir.gen.h(特洛伊)
2007-12-17        10:17:14        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A4[1].EXE        Generic Downloader.c(特洛伊)
2007-12-17        10:17:16        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A5[1].EXE\A5[1].EXE\00004060.EXE        PWS-OnlineGames.v.dll(特洛伊)
2007-12-17        10:17:17        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A6[1].EXE\A6[1].EXE\0000b4f8.EXE        PWS-QQGame(特洛伊)
2007-12-17        10:17:17        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A8[1].EXE        PWS-Mmorpg.gen(特洛伊)
2007-12-17        10:17:17        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A9[1].EXE\A9[1].EXE\0000630c.EXE        PWS-OnlineGames.i(特洛伊)
2007-12-17        10:17:20        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A10[1].EXE\A10[1].EXE\00004060.EXE        PWS-Mmorpg.gen(特洛伊)
2007-12-17        10:17:20        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A11[1].EXE        New Malware.n(特洛伊)
2007-12-17        10:17:21        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A12[1].EXE        New Malware.n(特洛伊)
2007-12-17        10:17:21        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A14[1].EXE        New Malware.n(特洛伊)
2007-12-17        10:17:22        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A15[1].EXE\A15[1].EXE\0000630c.EXE        PWS-OnlineGames.i(特洛伊)
2007-12-17        10:17:22        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A16[1].EXE\A16[1].EXE\0000630c.EXE        PWS-OnlineGames.i(特洛伊)
2007-12-17        10:17:24        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A17[1].EXE\A17[1].EXE\00004060.EXE        PWS-OnlineGames.v.dll(特洛伊)
2007-12-17        10:17:25        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A18[1].EXE\A18[1].EXE\0000630c.EXE        PWS-OnlineGames.q.dll(特洛伊)
2007-12-17        10:17:25        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A19[1].EXE        New Malware.n(特洛伊)
2007-12-17        10:17:27        未采取操作         Administrator        C:\Documents and Settings\Administrator\桌面\19.rar\A20[1].EXE\A20[1].EXE\0000a200.EXE        Generic BackDoor(特洛伊)
风野胤
发表于 2007-12-17 10:17:16 | 显示全部楼层

回复 4楼 mofunzone 的帖子

因为要上课
19

R:\19.rar » RAR » a22[1].exe - probably a variant of Win32/PSW.OnLineGames.GJV trojan
R:\19.rar » RAR » a25[1].exe - a variant of Win32/PSW.OnLineGames.JOJ trojan
R:\19.rar » RAR » a26[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a3[1].exe - a variant of Win32/PSW.Agent.NEC trojan
R:\19.rar » RAR » a4[1].exe - Win32/TrojanDownloader.SMW.A trojan
R:\19.rar » RAR » a5[1].exe - a variant of Win32/PSW.OnLineGames.NFL trojan
R:\19.rar » RAR » a6[1].exe - probably a variant of Win32/AutoRun.Q worm
R:\19.rar » RAR » a8[1].exe - a variant of Win32/PSW.OnLineGames.GJV trojan
R:\19.rar » RAR » a9[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a10[1].exe - a variant of Win32/PSW.OnLineGames.YA trojan
R:\19.rar » RAR » a11[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a12[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a14[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a15[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a16[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a17[1].exe - a variant of Win32/PSW.OnLineGames.NFL trojan
R:\19.rar » RAR » a18[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a19[1].exe - a variant of Win32/PSW.OnLineGames.FDY trojan
R:\19.rar » RAR » a20[1].exe - Win32/Delf.CGB trojan
傻猪猪米走鸡
发表于 2007-12-17 11:22:33 | 显示全部楼层

回复 4楼 mofunzone 的帖子

顾着拍拖了……
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-9 00:58 , Processed in 0.132665 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表