[病毒样本] 26

显示全部楼层 · 发表于 2008-3-18 23:04:18

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.snb 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/20.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.axp 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/21.exe3//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.ayz 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/22.exe3//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.axp 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/23.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.rxov 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/5.exe2//#//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ryh 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/1.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.axp 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/18.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.BHO.bai 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/24.rar/19.exe1//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Small.gwd 檔案: C:\Documents and Settings\kato9096\桌面\26.rar/auto.rar/auto.exe2
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.sem 檔案: c:\documents and settings\kato9096\桌面\26.rar/24.rar/5.exe2//PE_Patch//UPack

卡巴报１０，不报的已上报

Hello,

10.exe2, 11.exe2, 12.exe2, 13.exe2, 14.exe3, 15.exe3, 16.exe2, 17.exe2, 24.exe2, 3.exe9, 4.exe4, 6.exe1, 7.exe3, 8.exe2, 9.exe2, lsass.exe2

These files are corrupted.

5.exe2 - Trojan-PSW.Win32.OnLineGames.sem

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 kato9096 于 2008-3-27 15:51 编辑 ]

显示全部楼层 · 发表于 2008-3-18 23:07:20

项目: 24.rar 24.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 4.exe4
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 5.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 6.exe1
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 7.exe3
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 9.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 10.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 11.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 12.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 13.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 15.exe3
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: 24.rar 16.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Trojan.PWS.OnLineGames.SQL (BD 引擎)
项目: auto.rar auto.exe2
检查档案: E:\pic\_PICtemp\26.rar
状态: 发现病毒
病毒: Win32.Worm.Winko.I (BD 引擎)

显示全部楼层 · 发表于 2008-3-18 23:08:06

Scan Log
Version of virus signature database: 2956 (20080318)
Date: 2008-3-18 Time: 23:06:17
Scanned disks, folders and files: C:\Documents and Settings\Don johnson\桌面\26.rar
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 20.exe2 - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 21.exe3 - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 22.exe3 - Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 23.exe2 - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 5.exe2 - a variant of Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 6.exe1 - Win32/PSW.OnLineGames.MUG trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 18.exe2 - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » 24.rar » RAR » 19.exe1 - a variant of Win32/PSW.OnLineGames.NML trojan
C:\Documents and Settings\Don johnson\桌面\26.rar » RAR » auto.rar » RAR » auto.exe2 - Win32/TrojanDownloader.Flux.B trojan
Number of scanned objects: 25
Number of threats found: 9
Time of completion: 23:06:18 Total scanning time: 1 sec (00:00:01)

其余的to EVL

显示全部楼层 · 发表于 2008-3-18 23:14:14

卡巴的后缀都有4位了，量真是足。制毒者也产业化了。

显示全部楼层 · 发表于 2008-3-18 23:22:51

达是我自己加上的

显示全部楼层 · 发表于 2008-3-18 23:27:56

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\26.rar'
C:\Documents and Settings\Administrator\桌面\26.rar
  [0] Archive type: RAR
--> 24.rar
   [1] Archive type: RAR
   --> 20.exe2
      [DETECTION] Contains suspicious code HEUR/Malware
   --> 21.exe3
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
   --> 22.exe3
      [DETECTION] Is the Trojan horse TR/BHO.aya.1
   --> 23.exe2
      [DETECTION] Contains suspicious code HEUR/Malware
   --> 3.exe9
      [DETECTION] Contains suspicious code HEUR/Malware
   --> 5.exe2
      [DETECTION] Is the Trojan horse TR/PSW.OnLin.8918.A
   --> 8.exe2
      [DETECTION] Contains suspicious code HEUR/Malware
   --> 14.exe3
      [DETECTION] Contains suspicious code HEUR/Crypted
   --> 17.exe2
      [DETECTION] Contains suspicious code HEUR/Malware
   --> 18.exe2
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
   --> 19.exe1
      [DETECTION] Contains suspicious code HEUR/Malware
--> auto.rar
   [1] Archive type: RAR
   --> auto.exe2
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
   [WARNING] The file was ignored!

End of the scan: 星期二 2008年3月18日  23:28
Used time: 00:11 min

The scan has been done completely.

   0 Scanning directories
   30 Files were scanned
   5 viruses and/or unwanted programs were found
   7 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   25 Files not concerned
   4 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-3-18 23:30:02

等你

显示全部楼层 · 发表于 2008-3-18 23:38:12

lsass.exe    死的
1.exe 4.exe 6.exe  7.exe 9.exe  10.exe  11.exe 12.exe  13.exe 15.exe 16.exe  24.exe 无动作

18.exe  21.exe  漏的
2008-03-18 23:36:33 应用程序保护(注册表转储)    操作:阻止
进程路径:C:\Documents and Settings\YCNET\桌面\24\21.exe
文件路径:\Device\HarddiskVolume1\WINDOWS\system32\tmpFile
2008-03-18 23:36:29 文件保护(创建文件)    操作:阻止
进程路径:C:\Documents and Settings\YCNET\桌面\24\21.exe
文件路径:C:\WINDOWS\system32\fmcvxy.dll

显示全部楼层 · 发表于 2008-3-19 00:13:19

显示全部楼层 · 发表于 2008-3-19 07:52:21

信息 2008-03-19  07:51:55 您此次查毒清除了15个病毒
信息 2008-03-19  07:51:55 您此次查毒共查出15个病毒以及危险代码
信息 2008-03-19  07:51:55 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件41个
信息 2008-03-19  07:51:55 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\auto.rar\auto.exe2 Win32.Troj.DownLoaderT.xy.6970 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\19.exe1 Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\18.exe2 Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\12.exe2 Win32.PSWTroj.OnLineGames.22775 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\10.exe2 Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\1.exe2 Win32.Troj.OnLineGamesT.ax.94208 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\9.exe2 Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\7.exe3 Win32.Troj.GamesHackT.gu.94304 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\6.exe1 Win32.PSWTroj.OnLineGames.22583 清除成功
病毒 2008-03-19  07:51:49 D:\Desktop\26.rar\24.rar\5.exe2 Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-19  07:51:48 D:\Desktop\26.rar\24.rar\24.exe2 Win32.Troj.OnlineGameT.am.107664 清除成功
病毒 2008-03-19  07:51:48 D:\Desktop\26.rar\24.rar\23.exe2 Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-19  07:51:48 D:\Desktop\26.rar\24.rar\22.exe3 Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-19  07:51:48 D:\Desktop\26.rar\24.rar\21.exe3 Win32.Troj.OnlineGamesT.oy.61440 清除成功
病毒 2008-03-19  07:51:48 D:\Desktop\26.rar\24.rar\20.exe2 Win32.Troj.OnlineGamesT.oy.61440 清除成功

[病毒样本] 26

本帖子中包含更多资源

BD 13

9

回复 4楼 aerbeisi 的帖子

伞7:杀10漏2 ,其他尸体或者无毒

本帖子中包含更多资源