123
返回列表 发新帖
楼主: zzh161
收起左侧

[病毒样本] 奇怪的下载者,高手来看看

[复制链接]
sam.to
发表于 2008-2-1 21:02:10 | 显示全部楼层

回复 18楼 kato9096 的帖子

都是不报,今晚再試
ii88
发表于 2008-2-1 21:12:00 | 显示全部楼层
费尔没反应 天啊
mofunzone
发表于 2008-2-2 02:23:14 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\2'
C:\Documents and Settings\Administrator\My Documents\2\
  2.EXE
      [DETECTION] Is the Trojan horse TR/Drop.Agent.61440
      [INFO]      The file was deleted!
  DISKCDRIVER.SYS
  DISKDELL.EXE
      [DETECTION] Is the Trojan horse TR/Agent.sca
      [INFO]      The file was deleted!
  POLICEDATE.EXE
      [DETECTION] Is the Trojan horse TR/Agent.AGPG.3
      [INFO]      The file was deleted!
  SHIRTREPORT.DLL
  TIMEDRIVERKEYBOARD.EXE
      [DETECTION] Is the Trojan horse TR/Agent.AGPG.3
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\My Documents\2\Temp\
  RGI107.tmp
  tmp108.tmp
      [DETECTION] Is the Trojan horse TR/Agent.8192.224
      [INFO]      The file was deleted!
  tmp109.tmp
      [DETECTION] Is the Trojan horse TR/Agent.8192.224
      [INFO]      The file was deleted!
  tmp10A.tmp
  tmp10B.tmp
      [DETECTION] Is the Trojan horse TR/PSW.Online.aav.1
      [INFO]      The file was deleted!
  tmp10C.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pgp.2
      [INFO]      The file was deleted!
  tmp10D.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pim
      [INFO]      The file was deleted!
  tmp10E.tmp
  tmp10F.tmp
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  tmp110.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.27
      [INFO]      The file was deleted!
  tmp111.tmp
  tmp112.tmp
  tmp113.tmp
  tmp114.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.12
      [INFO]      The file was deleted!
  tmp115.tmp
  tmp116.tmp
  tmp117.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.27
      [INFO]      The file was deleted!
  tmp118.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
      [INFO]      The file was deleted!
  tmp119.tmp
  tmp11A.tmp
  tmp11B.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.12
      [INFO]      The file was deleted!
  tmp11C.tmp
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.27
      [INFO]      The file was deleted!
  tmp11D.tmp
  tmp11E.tmp
  tmp11F.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
      [INFO]      The file was deleted!
  tmp121.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.5
      [INFO]      The file was deleted!
  tmp122.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne
      [INFO]      The file was deleted!
  tmp123.tmp
  tmp124.tmp
  tmp125.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.5
      [INFO]      The file was deleted!
  tmp126.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oiv.2
      [INFO]      The file was deleted!
  tmp127.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.30
      [INFO]      The file was deleted!
  tmp128.tmp
  tmp129.tmp
  tmp12A.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.30
      [INFO]      The file was deleted!
  tmp12C.tmp
      [DETECTION] Is the Trojan horse TR/PSW.Online.aav.1
      [INFO]      The file was deleted!
  tmp12D.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pgp.2
      [INFO]      The file was deleted!
  tmp12E.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pim
      [INFO]      The file was deleted!
  tmp12F.tmp
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
  tmp130.tmp
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  tmp131.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.27
      [INFO]      The file was deleted!
  tmp132.tmp
  tmp133.tmp
  tmp134.tmp
  tmp135.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.12
      [INFO]      The file was deleted!
  tmp136.tmp
  tmp137.tmp
  tmp138.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.27
      [INFO]      The file was deleted!
  tmp139.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
      [INFO]      The file was deleted!
  tmp13A.tmp
  tmp13B.tmp
  tmp13C.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.12
      [INFO]      The file was deleted!
  tmp13D.tmp
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.27
      [INFO]      The file was deleted!
  tmp13E.tmp
  tmp13F.tmp
  tmp140.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
      [INFO]      The file was deleted!
  tmp141.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.5
      [INFO]      The file was deleted!
  tmp142.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne
      [INFO]      The file was deleted!
  tmp143.tmp
  tmp144.tmp
  tmp145.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.5
      [INFO]      The file was deleted!
  tmp146.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oiv.2
      [INFO]      The file was deleted!
  tmp147.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.30
      [INFO]      The file was deleted!
  tmp148.tmp
  tmp149.tmp
  tmp14A.tmp
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.30
      [INFO]      The file was deleted!
  TMP4352$.TMP
  ~DF2D3B.tmp
  ~DF4403.tmp
C:\Documents and Settings\Administrator\My Documents\2\WINDOWS\
  cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne
      [INFO]      The file was deleted!
  dtbqespn.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pgp.2
      [INFO]      The file was deleted!
  gdmthblq.dll
      [DETECTION] Is the Trojan horse TR/Small.NDX
      [INFO]      The file was deleted!
  jpgmtulkv.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pgp.2
      [INFO]      The file was deleted!
  jpgmtulkv.exe.hiv
  Kvsc3.exE
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oiv.2
      [INFO]      The file was deleted!
  lqvvieps.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pim
      [INFO]      The file was deleted!
  qveslvef.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pim
      [INFO]      The file was deleted!
  WinForm.exE
      [DETECTION] Is the Trojan horse TR/PSW.Online.aav.1
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\My Documents\2\WINDOWS\system32\
  auhad.cfg
  auhad.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.12
      [INFO]      The file was deleted!
  cmdbcs.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne
      [INFO]      The file was deleted!
  diskcdriver.sys
  dmvgqyhwow.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
  flashdriver.exe
      [DETECTION] Is the Trojan horse TR/Agent.AGPG.3
      [INFO]      The file was deleted!
  gnaixnauhqq.cfg
  gnaixnauhqq.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.30
      [INFO]      The file was deleted!
  gnolnait.cfg
  gnolnait.dll
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  HHHCompress.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
  iqnauhc.cfg
  iqnauhc.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.5
      [INFO]      The file was deleted!
  jduhjz.dll
      [DETECTION] Is the Trojan horse TR/Vaklik.FE.2
      [INFO]      The file was deleted!
  ktfxho.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pne
      [INFO]      The file was deleted!
  Kvsc3.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.oiv.2
      [INFO]      The file was deleted!
  msepion.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was deleted!
  naixuhz.cfg
  naixuhz.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
      [INFO]      The file was deleted!
  shirtwin.exe
      [DETECTION] Is the Trojan horse TR/Agent.sca
      [INFO]      The file was deleted!
  utgnehz.cfg
  utgnehz.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.pmi.27
      [INFO]      The file was deleted!
  windowsjazz.dll
  WinForm.dll
      [DETECTION] Is the Trojan horse TR/Vaklik.FE.2
      [INFO]      The file was deleted!
  yjscmucwow.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\My Documents\2\WINDOWS\system32\DRIVERS\
  pop.sys
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ppu.1
      [INFO]      The file was deleted!


End of the scan: 2008年2月1日  10:21
Used time: 00:05 min

The scan has been done completely.

      5 Scanning directories
    110 Files were scanned
     67 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     67 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     43 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-6-2 06:19 , Processed in 0.098097 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表