查看: 5965|回复: 31
收起左侧

[病毒样本] 2008年2月样本大包,文件数3668个(中的222个未知的)

[复制链接]
qqq000@qq.com
头像被屏蔽
发表于 2008-2-26 09:14:18 | 显示全部楼层 |阅读模式
2008年2月样本大包,文件数3668个(中的222个未知的)
http://www.namipan.com/d/x222.rar/664e550c4e9f6ba980a1556e7f81915f26f2cc9735c6df00
zip:111222777
llgiggs
头像被屏蔽
发表于 2008-2-26 09:21:12 | 显示全部楼层
一共多少個來著

C:\Documents and Settings\Administrator\桌面\1\31FABF67.exe
      [DETECTION] Contains suspicious code HEUR/Malware

C:\Documents and Settings\Administrator\桌面\1\68B41F7A.dll
      [DETECTION] Contains detection pattern of the SPR/Tool.Packer.Themida.B.6 program

C:\Documents and Settings\Administrator\桌面\1\6D48B180.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ldb

C:\Documents and Settings\Administrator\桌面\1\8B96C512.exe
      [DETECTION] Contains detection pattern of the SPR/CnsKey.A.32072 program

C:\Documents and Settings\Administrator\桌面\1\E171C934.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  
C:\Documents and Settings\Administrator\桌面\1\F4EF6090.exe
      [DETECTION] Contains suspicious code HEUR/Malware

C:\Documents and Settings\Administrator\桌面\1\F642BA3C.exe
      [DETECTION] Contains suspicious code HEUR/Malware


      3 Scanning directories
    222 Files were scanned
      4 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
      4 files were deleted
      0 files were repaired
      7 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
    218 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

[ 本帖最后由 llgiggs 于 2008-2-26 09:32 编辑 ]
sam.to
发表于 2008-2-26 09:31:23 | 显示全部楼层
华东电信 快很多
xiaoxmj
发表于 2008-2-26 09:34:00 | 显示全部楼层
金山才扫出3个


信息        2008-02-26  09:31:54        您此次查毒共查出3个病毒以及危险代码                       
信息        2008-02-26  09:31:54        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件250个                       
信息        2008-02-26  09:31:54        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-02-26  09:31:54        E:\1\E171C934.exe        Win32.Troj.Clicker.c.258048        跳过,未处理       
病毒        2008-02-26  09:31:54        E:\1\6D48B180.exe        Win32.Troj.Agent.bu.4608        跳过,未处理       
病毒        2008-02-26  09:31:54        E:\1\42A2B69E.exe        Win32.Hack.Unknown.278528        跳过,未处理       
信息        2008-02-26  09:31:30        金山毒霸主程序启动查毒过程,查毒方式:命令行查毒                       
信息        2008-02-26  09:31:28        金山毒霸主程序 启动                       
信息        2008-02-26  09:31:17        金山毒霸主程序 退出
sam.to
发表于 2008-2-26 09:35:10 | 显示全部楼层
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Tiny.aca        檔案: C:\Documents and Settings\kato9096\桌面\x222\1\6D48B180.exe


卡巴只报一个???


上报的看看

[ 本帖最后由 kato9096 于 2008-2-26 09:38 编辑 ]
xiaoxmj
发表于 2008-2-26 09:35:53 | 显示全部楼层
费尔  零鸭蛋
nosferatu
头像被屏蔽
发表于 2008-2-26 09:38:31 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\x222'
C:\Documents and Settings\Administrator\桌面\x222\1\31FABF67.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\x222\1\68B41F7A.dll
      [DETECTION] Contains detection pattern of the SPR/Tool.Packer.Themida.B.6 program
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\x222\1\6D48B180.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ldb
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\x222\1\8B96C512.exe
      [DETECTION] Contains detection pattern of the SPR/CnsKey.A.32072 program
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\x222\1\8D2508EC.dll
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/NSPack). Please verify the origin of the file
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\x222\1\E171C934.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\x222\1\F4EF6090.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '48086d8e.qua'!
C:\Documents and Settings\Administrator\桌面\x222\1\F642BA3C.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '47f76d90.qua'!


End of the scan: 星期二 2008年2月26日  09:37
Used time: 00:17 min

The scan has been done completely.

      4 Scanning directories
    222 Files were scanned
      5 viruses and/or unwanted programs were found
      3 Files were classified as suspicious:
28654621
头像被屏蔽
发表于 2008-2-26 09:44:27 | 显示全部楼层
费尔一个不认识
capsshift
发表于 2008-2-26 09:49:56 | 显示全部楼层
这个样本包,下载起来太慢了,楼主能不能找个快一点的网盘啊。
qqq000@qq.com
头像被屏蔽
 楼主| 发表于 2008-2-26 09:54:18 | 显示全部楼层
原帖由 28654621 于 2008-2-25 20:44 发表
费尔一个不认识


还有更多


费尔杀2940,未知506,

安天[检测到木马2223,文件3446].txt
3446-2223-342(误报)=未杀881木马

卡巴7.0[检测到木马2907,文件9307]

AVSCAN(测到木马2760)
AntiVir-没杀的[586个]

AntiVir-没杀的[350个]
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-9-17 08:09 , Processed in 0.447777 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表