查看: 2710|回复: 11
收起左侧

[病毒样本] 近期发现的病毒3

[复制链接]
youthnet
发表于 2008-2-23 13:46:28 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
dkdobe
发表于 2008-2-23 13:49:28 | 显示全部楼层
17个
deleted: virus Worm.Win32.Downloader.dq        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/014.exe//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Pakes.cea        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a1.exe//FSG//PEPatch
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rhu        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a2.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pwt        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a3.exe
deleted: Trojan program Trojan-PSW.Win32.Delf.anb        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a4.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.qgw        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a5.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.QQPass.auq        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a6.exe//UPX
deleted: Trojan program Backdoor.Win32.BlackHole.2004.h        File: C:\Documents and Settings\ivan\×ÀÃæ\sv1.zip/a7.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rqc        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a9.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rbf        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a11.exe//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Vaklik.ku        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a12.exe//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rbf        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a14.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rkf        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a16.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.riu        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a17.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.pry        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a19.exe//PE_Patch//UPack
deleted: Trojan program Backdoor.Win32.Delf.csn        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a20.exe//FSG//PEPatch
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rpd        File: C:\Documents and Settings\ivan\×ÀÃæ\sv2.zip/a21.exe//PE_Patch//UPack
spaceplane
发表于 2008-2-23 13:51:15 | 显示全部楼层
BD 16
挪威的冬天
发表于 2008-2-23 13:52:45 | 显示全部楼层
信息 2008-02-23  13:52:34 您此次查毒共查出17个病毒以及危险代码   
信息 2008-02-23  13:52:34 您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件34个   
信息 2008-02-23  13:52:34 金山毒霸主程序查毒过程结束,查毒方式:命令行查毒   
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a21.exe Win32.Troj.OnlineGamesT.af.57344 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a20.exe Win32.Hack.MaskPET.a.36864 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a19.exe Win32.Troj.OnlineGamesT.nr.37008 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a17.exe Win32.PSWTroj.OnLineGames.32654 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a16.exe Win32.PSWTroj.Agent.81920 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a14.exe Win32.Troj.OnlineGameT.am.107664 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a12.exe Win32.Troj.OnlineGamesT.e.94315 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a11.exe Win32.Troj.OnlineGameT.am.107664 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv2.zip\a9.exe Win32.Troj.OnlineGamesT.ty.98304 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a7.exe Win32.Hack.Huigezi.mk.14848 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a6.exe Win32.PSWTroj.QQPass.108696 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a5.exe Win32.Troj.OnlineGamesT.ky.151552 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a4.exe Win32.PSWTroj.Delf.110592 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a3.exe Win32.PSWTroj.Agent.4055 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a2.exe Win32.Troj.GamesHackT.gu.94304 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\a1.exe Win32.Packed.MaskPE 跳过,未处理
病毒 2008-02-23  13:52:34 C:\Users\挪威的冬天\Desktop\sv1.zip\014.exe Win32.Troj.DwonLoaderT.xy.133203 跳过,未处理
mofunzone
发表于 2008-2-23 14:08:51 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\sv1'
C:\Documents and Settings\Administrator\My Documents\sv1\
  014.exe
    [0] Archive type: Runtime Packed
    --> Object
      [INFO]      The file was deleted!
  a1.exe
      [DETECTION] Is the Trojan horse TR/Pakes.cea
      [INFO]      The file was deleted!
  a11.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.QYF.1
                [WARNING]   Infected files in archives cannot be repaired!
            --> Object
      [INFO]      The file was deleted!
  a12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [INFO]      The file was deleted!
  a14.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.rhj.8
                [WARNING]   Infected files in archives cannot be repaired!
            --> Object
      [INFO]      The file was deleted!
  a16.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGame.XO
      [INFO]      The file was deleted!
  a17.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  a19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
                [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.prw.3
                [WARNING]   Infected files in archives cannot be repaired!
            --> Object
      [INFO]      The file was deleted!
  a2.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
            [3] Archive type: RSRC
            --> Object
            --> Object
      [INFO]      The file was deleted!
  a20.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [INFO]      The file was deleted!
  a21.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.yub
      [INFO]      The file was deleted!
  a3.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.x
      [INFO]      The file was deleted!
  a4.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.anb.1
      [INFO]      The file was deleted!
  a5.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.175
            [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!
  a6.exe
      [DETECTION] Is the Trojan horse TR/PSW.QQpass.auq
      [INFO]      The file was deleted!
  a7.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  a9.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.NSR.370
            [WARNING]   Infected files in archives cannot be repaired!
      [INFO]      The file was deleted!


End of the scan: 2008年2月22日  22:08
Used time: 00:06 min

The scan has been done completely.

      1 Scanning directories
     17 Files were scanned
     20 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
     17 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
     11 Archives were scanned
      5 Warnings
      0 Notes
kkgh
发表于 2008-2-23 14:13:44 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.Win32.Mnless.zyt  
病毒: Trojan.PSW.Win32.GameOL.mau
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.AskTao.gu
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.QQPass.GEN
病毒: Trojan.DL.Delf.xxb      
病毒: Trojan.PSW.Win32.GameOL.lzr
病毒: Trojan.PSW.Win32.Agent.vrp
病毒: Trojan.PSW.Win32.GameOL.lmd
病毒: Trojan.PSW.Win32.XYOnline.abc
病毒: Trojan.Win32.Undef.app   
病毒: Trojan.PSW.Win32.GamesOnline.oa

用户来源:互联网

软件版本:20.32.50

18个
啊弥陀佛
发表于 2008-2-23 14:14:10 | 显示全部楼层
蠕虫名称:Worm.Win32.Jalous.dn
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV1\014.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.lgh
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV1\A3.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.Delf.gla
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV1\A4.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OLGames.ilb
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV1\A5.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.QQPass.hxs
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SV1\A6.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
傻猪猪米走鸡
发表于 2008-2-23 14:34:26 | 显示全部楼层
Scan Log
Version of virus signature database: 2897 (20080222)
Date: 2008-2-23  Time: 14:33:53
Scanned disks, folders and files: E:\virus\sv2.zip;E:\virus\sv1.zip
E:\virus\sv2.zip » ZIP » a9.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\virus\sv2.zip » ZIP » a11.exe - Win32/PSW.OnLineGames.MUG trojan
E:\virus\sv2.zip » ZIP » a12.exe - a variant of Win32/PSW.OnLineGames.NFL trojan
E:\virus\sv2.zip » ZIP » a14.exe - Win32/PSW.OnLineGames.MUG trojan
E:\virus\sv2.zip » ZIP » a16.exe - a variant of Win32/PSW.OnLineGames.GJV trojan
E:\virus\sv2.zip » ZIP » a17.exe - is OK
E:\virus\sv2.zip » ZIP » a19.exe - Win32/PSW.OnLineGames.MUG trojan
E:\virus\sv2.zip » ZIP » a20.exe - Win32/Delf.CSN trojan
E:\virus\sv2.zip » ZIP » a21.exe - a variant of Win32/PSW.OnLineGames.PBQ trojan
E:\virus\sv1.zip » ZIP » 014.exe - Win32/Jalous.AA worm
E:\virus\sv1.zip » ZIP » a1.exe » FSG v2.0 - is OK
E:\virus\sv1.zip » ZIP » a2.exe - a variant of Win32/PSW.OnLineGames.MUG trojan
E:\virus\sv1.zip » ZIP » a3.exe - Win32/PSW.Agent.NGZ trojan
E:\virus\sv1.zip » ZIP » a4.exe - a variant of Win32/PSW.OnLineGames.NMN trojan
E:\virus\sv1.zip » ZIP » a5.exe - probably a variant of Win32/PSW.OnLineGames.NFL trojan
E:\virus\sv1.zip » ZIP » a6.exe - Win32/PSW.QQPass.AUQ trojan
E:\virus\sv1.zip » ZIP » a7.exe - Win32/TrojanDownloader.SMW.A trojan
Number of scanned objects: 17
Number of threats found: 15
Time of completion: 14:34:06  Total scanning time: 13 sec (00:00:13)
傻猪猪米走鸡
发表于 2008-2-23 14:38:25 | 显示全部楼层
2008-2-23 14:38:41        Kernel        File  'E:\virus\sv1.rar' was sent to ESET for analysis.
qigang
发表于 2008-2-23 20:59:08 | 显示全部楼层

22/9第一包

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Trojan.Win32.Mnless.zyt  
病毒: Trojan.PSW.Win32.GameOL.mau
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.XYOnline.abe
病毒: Trojan.PSW.Win32.AskTao.gu
病毒: Trojan.PSW.Win32.GameOL.GEN
病毒: Trojan.PSW.Win32.QQPass.GEN
病毒: Trojan.DL.Delf.xxb      

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.32.52
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-13 09:48 , Processed in 0.117570 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表