查看: 3523|回复: 16
收起左侧

[病毒样本] 26个

[复制链接]
zzh161
发表于 2008-3-16 17:47:05 | 显示全部楼层 |阅读模式
样本:

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Palkia
发表于 2008-3-16 17:48:20 | 显示全部楼层

27/8

C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1111.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1112.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1113.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1116.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1118.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1120.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1123.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\11.rar > RAR > 11\1124.exe - Win32/PSW.OnLineGames.MUG 特洛伊木马 的变种
qianwenxiang
发表于 2008-3-16 17:53:51 | 显示全部楼层
耗子又来以大包摧残测试组的人了。。
zzh161
 楼主| 发表于 2008-3-16 17:55:53 | 显示全部楼层

回复 3楼 qianwenxiang 的帖子

难得小冒泡啊
Joker
发表于 2008-3-16 17:59:33 | 显示全部楼层
费尔启发15个、、全灭
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1123.exe        TrojanPSW.OnLineGames.uir.pojk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1125.exe        TrojanPSW.OnLineGames.ubw.kgfo        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1135.exe        TrojanPSW.OnLineGames.ubw.fvdu        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1117.exe        TrojanPSW.OnLineGames.ubw.avtn        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1138.exe        TrojanPSW.OnLineGames.ubw.audp        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1120.exe        TrojanPSW.OnLineGames.tmj.woun        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1116.exe        TrojanPSW.OnLineGames.tmj.ujqy        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1111.exe        TrojanPSW.OnLineGames.tmj.qcht        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1118.exe        TrojanPSW.OnLineGames.tmj.kogp        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1112.exe        TrojanPSW.OnLineGames.tmj.futm        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1113.exe        Trojan.Cap83121.crmx        木马        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1114.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1115.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1119.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1121.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1122.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1124.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1127.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1128.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1129.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1130.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1131.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1132.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1133.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1134.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
C:\Documents and Settings\Administrator\桌面\11.rar>>11\1136.exe        Heuri.Suspicious.ERNM        启发式扫描        还未处理
hj5abc
发表于 2008-3-16 18:08:18 | 显示全部楼层
全.

Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1111.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1112.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1113.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1114.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1115.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1116.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1117.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1118.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1119.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1120.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1121.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1122.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1123.exe\[Upack]" file.  
Sign of "Win32:OnLineGames-CTO [Trj]" has been found in "F:\11\11\1124.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1125.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1127.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1128.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1129.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1130.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1131.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1132.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1133.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1134.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1135.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1136.exe\[Upack]" file.  
Sign of "Win32:Agent-SOA [Trj]" has been found in "F:\11\11\1138.exe\[Upack]" file.
冷冷
发表于 2008-3-16 18:10:03 | 显示全部楼层

回复 3楼 qianwenxiang 的帖子

今天差点没有样本了。。
无尽藏海
发表于 2008-3-16 18:10:50 | 显示全部楼层
Begin scan in 'E:\VIRUS\11(2).rar'
E:\VIRUS\11(2).rar
  [0] Archive type: RAR
  --> 11\1111.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 11\1112.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 11\1113.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11\1114.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1115.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1116.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 11\1117.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.4
  --> 11\1118.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 11\1119.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1120.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> 11\1121.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.8
  --> 11\1122.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.10
  --> 11\1123.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> 11\1124.exe
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> 11\1125.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.12
  --> 11\1127.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1128.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.16
  --> 11\1129.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.17
  --> 11\1130.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.20
  --> 11\1131.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1132.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.24
  --> 11\1133.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ubw.26
  --> 11\1134.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1135.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1136.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 11\1138.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!


End of the scan: 2008年3月16日  18:10
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     17 viruses and/or unwanted programs were found
      9 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     10 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
qianwenxiang
发表于 2008-3-16 18:11:32 | 显示全部楼层

回复 7楼 冷冷 的帖子

这么说的话我也来个大包包
凝逸反毒
发表于 2008-3-16 18:11:37 | 显示全部楼层

[凝逸反毒>病毒:13

[凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸反毒.扫描病毒引擎3.4-日志]       20080316_161836
----------
[凝逸反毒>病毒:13


扫描目录:f:\080315\11\|
文件总数:26
报告 | virus [115>20080313_ny0805.axx] | f:\080315\11\11\1112.exe
报告 | virus [116>20080313_ny0805.axx] | f:\080315\11\11\1113.exe
报告 | virus [189>20080313_ny0805.axx] | f:\080315\11\11\1116.exe
报告 | virus [190>20080313_ny0805.axx] | f:\080315\11\11\1117.exe
报告 | virus [188>20080313_ny0805.axx] | f:\080315\11\11\1118.exe
报告 | virus [192>20080313_ny0805.axx] | f:\080315\11\11\1120.exe
报告 | virus [196>20080313_ny0805.axx] | f:\080315\11\11\1121.exe
报告 | virus [200>20080313_ny0805.axx] | f:\080315\11\11\1122.exe
报告 | virus [194>20080313_ny0805.axx] | f:\080315\11\11\1125.exe
报告 | virus [208>20080313_ny0805.axx] | f:\080315\11\11\1128.exe
报告 | virus [203>20080313_ny0805.axx] | f:\080315\11\11\1129.exe
报告 | virus [205>20080313_ny0805.axx] | f:\080315\11\11\1130.exe
报告 | virus [210>20080313_ny0805.axx] | f:\080315\11\11\1133.exe
扫描完成|病毒:13|感染:0|未知:13|正常:0|文件:26|耗时:0.37分
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-14 13:57 , Processed in 0.118098 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表