43个

显示全部楼层 · 发表于 2008-3-31 15:58:25

http://www.virustotal.com/
http://virscan.org/

显示全部楼层 · 发表于 2008-4-1 12:53:51

Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2008-4-1 12:57:01

已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wav 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/sauhad.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.waw 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/vhqq.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Delf.gfu 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/listmm.exe//FSG
已刪除: 病毒 Worm.Win32.AutoRun.def 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/kk.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yqf 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/cq.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ytf 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ch.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wpf 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/3k.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yip 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/cb.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wbe 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/9k.exe//#
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.waw 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/hx.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ymu 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/wow.exe//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.AutoRun.def 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/list.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wkm 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/zx.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yry 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/rx.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yth 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/j2.exe
已刪除: 病毒 Heur.Invader (修改) 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/j2.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wkm 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/gj.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yip 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/wd.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wpe 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/sg.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yip 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/qj.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xid 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/my.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wav 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/wl.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yip 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/tl.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.waw 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/j1.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wkm 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayDABDAB1056.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yjm 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayFKKFKK1055.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.woz 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayHADHAD1057.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yqg 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayKAEKAE1056.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yte 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayVUFVUF1010.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wav 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/d3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ylf 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayBAIBAI1052.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yrx 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayJHVJHV1015.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xie 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ayPATPAT1023.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yqt 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/aySADSAD1032.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yqf 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/cqzs.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.WOW.arq 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/ektvm.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ytg 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/gjjte.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yku 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/kiluw.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.yti 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/mgmgmm.dll//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.wav 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/mseion.sys
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.xkv 檔案: C:\Documents and Settings\kato9096\桌面\样本1.rar/msepbe.dll//UPack

报41！

显示全部楼层 · 发表于 2008-4-1 16:05:21

费尔42个
C:\Documents and Settings\swans\桌面\Virus.rar>>AutoRun.rar>>AutoRun.inf INF.Autorun.b 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>AutoRun.rar>>rejoice082.exe2 Backdoor.Hupigon.axbr.pkjz 后门还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP3B.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>D3D9_32.DLL.rar>>TMP4A.TMP TrojanPSW.OnLineGames.pmi.rycx 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dlbar.rar>>dlbar.dll Backdoor.Rbot.jcl.jnzo.arc.dll 后门还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>D3D9_32.DLL TrojanDownloader.Agent.loa.iime.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>D3D9_64.DLL TrojanPSW.OnLineGames.vpi.aujx.dll 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>dxdlg.rar>>DXDLG.EXE2 TrojanDownloader.Agent.loa.pxkp 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>MSEION.rar>>MSEION.SYS RootKit.Mnless.jz.xstj 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>mwisys32_080323.rar>>mwisys32_080323.dll Spyware.Agent.br.dll.qlib.dll 间谍程序还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\13[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\15[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\17[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\1\21[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\11[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\12[1].exe2 TrojanPSW.OnLineGames.rkf.skmg 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\16[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\20[1].exe4 TrojanPSW.OnLineGames.rkf.daak 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\2[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\2\4[1].exe4 TrojanPSW.OnLineGames.rkf.ohuo 木马还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\14[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\18[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\22[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\3[1].exe2 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\5[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\3\6[1].exe4 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>yangben.rar>>yangben\1\4\27[1].exe0 W32.Viking.k 病毒还未处理
C:\Documents and Settings\swans\桌面\Virus.rar>>新病毒vlmcgol.rar>>vlmcgol.exe2 TrojanDownloader.Todon.aq.pgwr 木马还未处理

显示全部楼层 · 发表于 2008-4-1 16:10:06

Starting the file scan:

Begin scan in 'E:\样本1.rar'
E:\样本1.rar
  [0] Archive type: RAR
  --> sauhad.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> vhqq.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> xqjy.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> listmm.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
  --> kk.exe
   [DETECTION] Is the Trojan horse TR/Drop.Cattivo.A
  --> cq.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> ch.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> 3k.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12107
  --> cb.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12607
  --> 9k.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> hx.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> wow.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> list.exe
   [DETECTION] Is the Trojan horse TR/Drop.Cattivo.A
  --> zx.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wkm.1
  --> rx.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> j2.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> gj.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wkm.4
  --> wd.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12134
  --> sg.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> qj.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.11703
  --> my.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.14034
  --> wl.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> tl.exe
   [DETECTION] Is the Trojan horse TR/Drop.Agent.12065
  --> j1.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> ayDABDAB1056.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.wkm.5
  --> ayFKKFKK1055.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.yjm
  --> ayHADHAD1057.dll
   [DETECTION] Is the Trojan horse TR/Agent.7211.1
  --> ayKAEKAE1056.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ayVUFVUF1010.dll
   [DETECTION] Is the Trojan horse TR/Agent.6799
  --> d3.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> ayBAIBAI1052.dll
   [DETECTION] Is the Trojan horse TR/Agent.7708
  --> ayJHVJHV1015.dll
   [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> ayPATPAT1023.dll
   [DETECTION] Is the Trojan horse TR/Agent.9138
  --> aySADSAD1032.dll
   [DETECTION] Is the Trojan horse TR/Agent.7703
  --> cqzs.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> ektvm.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> gjjte.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> kiluw.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> mgmgmm.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
  --> mseion.sys
   [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> msepbe.dll
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.xkv
  --> njritc.dll
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddn.2
   [WARNING] The file was ignored!

End of the scan: 2008年4月1日  16:11
Used time: 00:53 min

The scan has been done completely.

   0 Scanning directories
   44 Files were scanned
   42 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   0 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   2 Files not concerned
   1 Archives were scanned
   1 Warnings
   0 Notes

显示全部楼层 · 发表于 2008-4-1 16:54:22

红伞44个

[病毒样本] 43个

回复 19楼 hnkaspersky 的帖子

回复 22楼 kato9096 的帖子

42

浏览过的版块