刚抓的12个

显示全部楼层 · 发表于 2008-1-11 21:38:33

[MD5: 010FF8 B18B53 0030ED 766A89 E07D7D EF7274 4FB17A 9CFE6F 0FF026 25CB6B CAB198 9F1CE9]

显示全部楼层 · 发表于 2008-1-11 21:43:26

Starting the file scan:

Begin scan in 'E:\011105.rar'
E:\011105.rar
  [0] Archive type: RAR
  --> one-last.exe
   [DETECTION] Is the Trojan horse TR/Agent.dqx
  --> depoimento.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> postcard.exe
   [DETECTION] Is the Trojan horse TR/Hidrag.A
   [1] Archive type: RAR SFX (self extracting)
   --> control.ini
      [DETECTION] Is the Trojan horse TR/Zapchas.F.1
   --> nicks.txt
      [DETECTION] Is the Trojan horse TR/Mirc.Fizz.A
   --> sup.reg
      [DETECTION] Is the Trojan horse TR/REG.Ircflood.C
   --> svchost.exe
      [DETECTION] Contains code of the Windows virus W32/Hidrag.a
   --> script.ini
      [DETECTION] Contains detection pattern of the IRC virus IRC/Zapchast.16
  --> spoolsv.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> new.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.cds
  --> smss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> commen.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.32896
  --> iee.exe
   [DETECTION] Contains detection pattern of the worm WORM/Agent.P.5
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Agent.31744.B.2
  --> pula_cerca.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.bun
  --> veja_voce_mesmo.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> iexplore.exe
   [DETECTION] Is the Trojan horse TR/Spy.VB.QQ.8
   [WARNING] The file was ignored!

End of the scan: 2008年1月11日  21:44
Used time: 00:16 min

The scan has been done completely.

   0 Scanning directories
   25 Files were scanned
   17 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   8 Files not concerned
   2 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-1-11 21:47:21

Scan Information:


Object Name Status Action  Infection Date and Time

F:\011105.rar  Infected Quarantined trojan: TrojanSpy.VB.GLR  2008-1-11 21:46:27

显示全部楼层 · 发表于 2008-1-11 21:48:34

检测到：木马程序 Trojan-Spy.Win32.ESpy.a 文件: D:\1\样本\011105\commen.exe//UPX
检测到：木马程序 Trojan-Downloader.Win32.Banload.ack 文件: D:\1\样本\011105\depoimento.exe//UPack
检测到：病毒 Worm.Win32.Agent.p 文件: D:\1\样本\011105\iee.exe
检测到：木马程序 Trojan-Spy.Win32.VB.qq 文件: D:\1\样本\011105\iexplore.exe//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.Agent.cds 文件: D:\1\样本\011105\new.exe//file1
检测到：木马程序 Trojan.Win32.Agent.dqx 文件: D:\1\样本\011105\one-last.exe//PE_Patch.UPX//UPX
检测到：病毒 Virus.Win32.Hidrag.a 文件: D:\1\样本\011105\postcard.exe/svchost.exe
检测到：木马程序 Backdoor.IRC.Cloner.ae 文件: D:\1\样本\011105\postcard.exe/script.ini
检测到：木马程序 Trojan-Downloader.Win32.Banload.bun 文件: D:\1\样本\011105\pula_cerca.exe//PE_Patch.UltraProtect//UltraProtect
检测到：木马程序 Trojan-PSW.Win32.QQPass.aqy 文件: D:\1\样本\011105\setup.exe//ASPack
检测到：木马程序 Trojan.Win32.Qhost.ael 文件: D:\1\样本\011105\smss.exe//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Banload.bqy 文件: D:\1\样本\011105\veja_voce_mesmo.exe

显示全部楼层 · 发表于 2008-1-11 21:52:50

17个

C:\Users\Wesley\Downloads\011105.rar
  [0] Archive type: RAR
  --> one-last.exe
   [DETECTION] Is the Trojan horse TR/Agent.dqx
  --> depoimento.exe
   [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
  --> postcard.exe
   [DETECTION] Is the Trojan horse TR/Hidrag.A
   [1] Archive type: RAR SFX (self extracting)
   --> control.ini
      [DETECTION] Is the Trojan horse TR/Zapchas.F.1
   --> nicks.txt
      [DETECTION] Is the Trojan horse TR/Mirc.Fizz.A
   --> sup.reg
      [DETECTION] Is the Trojan horse TR/REG.Ircflood.C
   --> svchost.exe
      [DETECTION] Contains code of the Windows virus W32/Hidrag.a
   --> script.ini
      [DETECTION] Contains detection pattern of the IRC virus IRC/Zapchast.16
  --> spoolsv.exe
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> new.exe
   [DETECTION] Contains detection pattern of the dropper DR/Agent.cds
  --> smss.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> commen.exe
   [DETECTION] Is the Trojan horse TR/PSW.Steal.32896
  --> iee.exe
   [DETECTION] Contains detection pattern of the worm WORM/Agent.P.5
  --> setup.exe
   [DETECTION] Is the Trojan horse TR/Agent.31744.B.2
  --> pula_cerca.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Banload.bun
  --> veja_voce_mesmo.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> iexplore.exe
   [DETECTION] Is the Trojan horse TR/Spy.VB.QQ.8
   [INFO]    The file was moved to '47b874d1.qua'!

显示全部楼层 · 发表于 2008-1-11 21:54:37

D:\病毒测试\未解压样本\011105.rar » RAR » depoimento.exe - probably unknown NewHeur_PE virus
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » nicks.txt - IRC/Cloner.AU trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » sup.bat - IRC/Zapchast.H trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » sup.reg - IRC/Cloner.AS trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » svchost.exe - Win32/Jeefo.A virus
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » script.ini - IRC/Cloner.AX trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » UPX v12_m2 » RAR » mirc.ini - IRC/Zapchast trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » nicks.txt - IRC/Cloner.AU trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » sup.bat - IRC/Zapchast.H trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » sup.reg - IRC/Cloner.AS trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » svchost.exe - Win32/Jeefo.A virus
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » script.ini - IRC/Cloner.AX trojan
D:\病毒测试\未解压样本\011105.rar » RAR » postcard.exe » RAR » mirc.ini - IRC/Zapchast trojan
D:\病毒测试\未解压样本\011105.rar » RAR » smss.exe - Win32/TrojanDownloader.FakeAlert.G trojan
D:\病毒测试\未解压样本\011105.rar » RAR » commen.exe - Win32/Spy.ESpy.C trojan
D:\病毒测试\未解压样本\011105.rar » RAR » iee.exe - a variant of Win32/Agent.P worm
D:\病毒测试\未解压样本\011105.rar » RAR » setup.exe - probably a variant of Win32/AutoRun.FS worm
D:\病毒测试\未解压样本\011105.rar » RAR » pula_cerca.exe - probably unknown NewHeur_PE virus
D:\病毒测试\未解压样本\011105.rar » RAR » veja_voce_mesmo.exe - a variant of Win32/TrojanDownloader.Dadobra.IA trojan
D:\病毒测试\未解压样本\011105.rar » RAR » iexplore.exe - probably unknown NewHeur_PE virus

显示全部楼层 · 发表于 2008-1-11 22:00:58

显示全部楼层 · 发表于 2008-1-11 22:04:30

大蜘蛛报的少

显示全部楼层 · 发表于 2008-1-11 22:20:18

20个，夸张

显示全部楼层 · 发表于 2008-1-11 22:25:31

13
detected: Trojan program Trojan.Win32.Agent.dqx File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/one-last.exe//PE_Patch.UPX//UPX
detected: Trojan program Trojan-Downloader.Win32.Banload.ack File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/depoimento.exe//UPack
detected: virus Virus.Win32.Hidrag.a File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/postcard.exe/svchost.exe
detected: Trojan program Backdoor.IRC.Cloner.ae File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/postcard.exe/script.ini
detected: Trojan program Trojan-Downloader.Win32.Alphabet.bi File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/spoolsv.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan.Win32.Agent.cds File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/new.exe//file1
detected: Trojan program Trojan.Win32.Qhost.ael File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/smss.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Spy.Win32.ESpy.a File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/commen.exe//UPX
detected: virus Worm.Win32.Agent.p File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/iee.exe
detected: Trojan program Trojan-PSW.Win32.QQPass.aqy File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/setup.exe//ASPack
detected: Trojan program Trojan-Downloader.Win32.Banload.bun File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/pula_cerca.exe//PE_Patch.UltraProtect//UltraProtect
detected: Trojan program Trojan-Downloader.Win32.Banload.bqy File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/veja_voce_mesmo.exe
detected: Trojan program Trojan-Spy.Win32.VB.qq File: C:\Documents and Settings\Owner\×ÀÃæ\011105.rar/iexplore.exe//PE_Patch.UPX//UPX

[病毒样本] 刚抓的12个

本帖子中包含更多资源

17

Avira AntiVir

本帖子中包含更多资源

本帖子中包含更多资源