过江民的～～～

冷冷

I:\virus\test\样本\014(1).exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\14.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\bf(1).exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\bf.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\g.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\lz.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\pps(1).exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\pps.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\q.exe - Signature 'Packed.Win32.Klone.af' found
I:\virus\test\样本\rl.exe - Signature 'Packed.Win32.Klone.af' found

        10 Files scanned
          (0 Archives with 0 files)
        10 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.047

挪威的冬天

they're all the same

信息        2008-01-28  10:21:30        您此次查毒共查出10个病毒以及危险代码                       
信息        2008-01-28  10:21:30        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件21个                       
信息        2008-01-28  10:21:30        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\rl.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\q.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\pps.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\pps(1).exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\lz.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\g.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\bf.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\bf(1).exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\14.exe        Win32.Troj.DropDown.vv.77824        跳过，未处理       
病毒        2008-01-28  10:21:30        C:\Users\挪威的冬天\Desktop\样本.rar\样本\014(1).exe        Win32.Troj.DropDown.vv.77824        跳过，未处理

marksu2006

咖啡杀了

zwl2828

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:  bbs.kafan.cn/attachment.php?aid=191491
Information:  Is the Trojan horse TR/Dldr.Agent.YM

leonfg

ESET 10
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\014(1).exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\14.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\bf(1).exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\bf.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\g.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\lz.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\pps(1).exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\pps.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\q.exe - Win32/TrojanDownloader.Small.NZL trojan
C:\Documents and Settings\GUNDAM\桌面\样本.rar » RAR » 样本\rl.exe - Win32/TrojanDownloader.Small.NZL trojan

鱼是一只我

江民的样本区表现真实够寒碜的

jiffy

江民居然没有反应。。。。。。。。。

sam.to

原帖由 鱼是一只我 于 2008-1-28 09:14 发表
2楼用的是什么杀软  费尔吗?

kis7

ballakay

Scanning Report
28 January 2008 12:23:13 - 12:23:15
Computer name: PUMA-PC
Scanning type: Scan target
Target: C:\Users\Administrator\Desktop\Ñù±¾.rar


--------------------------------------------------------------------------------

Result: 10 malware found
Trojan-PSW.Win32.OnLineGames.ode (virus)
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\014(1).exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\14.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\bf(1).exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\bf.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\g.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\lz.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\pps(1).exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\pps.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\q.exe
C:\Users\Administrator\Desktop\Ñù±¾.rar\Ñù±¾\rl.exe




--------------------------------------------------------------------------------

Statistics
Scanned:
Files: 11
Not scanned: 0
Result:
Viruses: 10
Spyware: 0
Suspicious items: 0
Riskware: 0
Actions:
Disinfected: 0
Renamed: 0
Deleted: 0
Quarantined: 0
Failed: 0
Boot Sectors:
Scanned: 0
Infected: 0
Suspicious items: 0
Disinfected: 0


--------------------------------------------------------------------------------

Options
Definitions version:
Viruses: 2008-01-27_04
Spyware: 2008-01-27_04
Scanning Engines:
F-Secure AVP: 7.00.171, 2008-01-28
F-Secure Libra: 2.04.01, 2008-01-28
F-Secure Orion: 1.02.37, 2008-01-27
F-Secure Draco: 1.00.35, 2008-01-14
Scanning options:
Scan all files
Scan inside archives
Actions:
Viruses: Delete infected files
Spyware: Delete infected files

挪威的冬天

原帖由 鱼是一只我 于 2008-1-28 10:31 发表
江民的样本区表现真实够寒碜的

最好稍微好点了还算

以前真是默默无闻的小弟