一堆

显示全部楼层 · 发表于 2008-5-11 04:57:25

c0=http://67.198.201.26/Images/0.exe
c1=http://67.198.201.26/Images/1.exe
c2=http://67.198.201.26/Images/2.exe
c3=http://67.198.201.26/Images/3.exe
c4=http://67.198.201.26/Images/4.exe
c5=http://67.198.201.26/Images/5.exe
c6=http://67.198.201.26/Images/6.exe
c7=http://67.198.201.26/Images/7.exe
c8=http://67.198.201.26/Images/8.exe
c9=http://67.198.201.26/Images/9.exe
c10=http://67.198.201.26/Images/10.exe
c11=http://67.198.201.26/Images/11.exe
c12=http://66.186.60.178/Images/12.exe
c13=http://66.186.60.178/Images/13.exe
c14=http://66.186.60.178/Images/14.exe
c15=http://66.186.60.178/Images/15.exe
c16=http://66.186.60.178/Images/16.exe
c17=http://66.186.60.178/Images/17.exe
c18=http://66.186.60.178/Images/18.exe
c19=http://66.186.60.178/Images/19.exe
c20=http://66.186.60.178/Images/20.exe
c21=http://66.186.60.178/Images/21.exe
c22=http://66.186.60.178/Images/22.exe
c23=http://66.186.63.242/Images/23.exe
c24=http://66.186.63.242/Images/24.exe
c25=http://66.186.63.242/Images/25.exe
c26=http://66.186.63.242/Images/26.exe
c27=http://66.186.63.242/Images/27.exe
c28=http://66.186.63.242/Images/28.exe
c29=http://66.186.63.242/Images/29.exe
c30=http://66.186.63.242/Images/30.exe
c31=http://66.186.63.242/Images/31.exe
c32=http://66.186.63.242/Images/32.exe
c33=http://66.186.63.242/Images/33.exe
c34=http://66.186.63.242/Images/oKoK.exe
http://arpcnn.cn/s.exe

显示全部楼层 · 发表于 2008-5-11 04:58:28

上面所有样本打包后的附件见这个帖子17楼

帖子地址:　http://bbs.kafan.cn/viewthread.p ... page%3D1&page=2

显示全部楼层 · 发表于 2008-5-11 05:04:38

清空
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\dddd'
C:\Documents and Settings\morgan\My Documents\dddd\
  2008-5-10__1E3.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__1F516.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__29F82.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
         [WARNING] Infected files in archives cannot be repaired!
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__2EDD0.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__306EC.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__40F99.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adrg
         [WARNING] Infected files in archives cannot be repaired!
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aks.1
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  2008-5-10__4A805.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__55301.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.Steal.44657
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  2008-5-10__589B1.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
         [WARNING] Infected files in archives cannot be repaired!
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__59750.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__5C4BD.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__641E7.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__707ED.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__7172D.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__75C30.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__8C3F1.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__97B21.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__99CCC.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
  2008-5-10__9C731.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__A8E9E.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__AA0DA.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__B6825.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__B7152.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__B9ED2.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__C8253.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adwk
         [WARNING] Infected files in archives cannot be repaired!
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
  2008-5-10__CB33A.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__DBC13.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.acjm
         [WARNING] Infected files in archives cannot be repaired!
      --> Object
      --> Object
      --> Object
      --> Object
   [NOTE]    The file was deleted!
  2008-5-10__DC5FD.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__DD344.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  2008-5-10__E377B.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
         [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adxo.1
         [WARNING] Infected files in archives cannot be repaired!
      --> Object
         [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
         [WARNING] Infected files in archives cannot be repaired!
   [NOTE]    The file was deleted!
  2008-5-10__E83FF.exe
[0] Archive type: Runtime Packed
--> Object
      [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
   [NOTE]    The file was deleted!
  2008-5-10__EDD04.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
  2008-5-10__F0608.exe
[0] Archive type: Runtime Packed
--> Object
   [NOTE]    The file was deleted!
  s.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: OVL
      --> Object
      [2] Archive type: OVL
      --> Object
         [3] Archive type: Runtime Packed
         --> Object
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年5月10日  14:04
Used time: 00:05 min

The scan has been done completely.

   1 Scanning directories
   34 Files were scanned
   39 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   34 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -5 Files not concerned
   0 Archives were scanned
   9 Warnings
   34 Notes

显示全部楼层 · 发表于 2008-5-11 06:38:07

显示全部楼层 · 发表于 2008-5-11 07:35:26

原帖由 woai_jolin 于 2008-5-11 06:38 发表

诺顿和红伞不好比阿

显示全部楼层 · 发表于 2008-5-11 07:49:42

难道你认为红伞比norton好

显示全部楼层 · 发表于 2008-5-11 08:40:39

红伞暴杀 norton反之

显示全部楼层 · 发表于 2008-5-11 09:24:40

2008-5-11 9:23:57 已删除: Trojan-PSW.Win32.OnLineGames.accx C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__DBC13.exe
2008-5-11 9:23:48 已删除: Trojan-PSW.Win32.OnLineGames.acla C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__1F516.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.OnLineGames.adrw C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__40F99.exe
2008-5-11 9:23:53 已删除: Trojan-PSW.Win32.OnLineGames.adup C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__C8253.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.OnLineGames.aecd C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__5C4BD.exe
2008-5-11 9:24:03 已删除: Trojan-PSW.Win32.OnLineGames.aecg C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__F0608.exe
2008-5-11 9:23:52 已删除: Trojan-PSW.Win32.OnLineGames.aecx C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__B9ED2.exe
2008-5-11 9:23:51 已删除: Trojan-PSW.Win32.OnLineGames.aecx C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__9C731.exe
2008-5-11 9:23:51 已删除: Trojan-PSW.Win32.OnLineGames.aedk C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__A8E9E.exe
2008-5-11 9:24:03 已删除: Trojan-PSW.Win32.OnLineGames.aedo C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__E83FF.exe
2008-5-11 9:23:50 已删除: Trojan-PSW.Win32.OnLineGames.aedt C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__641E7.exe
2008-5-11 9:23:48 已删除: Trojan-PSW.Win32.OnLineGames.aedt C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__1E3.exe
2008-5-11 9:23:48 已删除: Trojan-PSW.Win32.OnLineGames.aedv C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__2EDD0.exe
2008-5-11 9:23:53 已删除: Trojan-PSW.Win32.OnLineGames.aeen C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__CB33A.exe
2008-5-11 9:23:50 已删除: Trojan-PSW.Win32.OnLineGames.aefc C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__707ED.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.OnLineGames.aefs C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__4A805.exe
2008-5-11 9:24:03 已删除: Trojan-PSW.Win32.OnLineGames.aefw C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__EDD04.exe
2008-5-11 9:23:50 已删除: Trojan-PSW.Win32.OnLineGames.aegg C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__7172D.exe
2008-5-11 9:23:50 已删除: Trojan-PSW.Win32.OnLineGames.aegh C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__75C30.exe
2008-5-11 9:23:58 已删除: Trojan-PSW.Win32.OnLineGames.aegl C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__DC5FD.exe
2008-5-11 9:23:48 已删除: Trojan-PSW.Win32.OnLineGames.aegm C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__306EC.exe
2008-5-11 9:23:52 已删除: Trojan-PSW.Win32.OnLineGames.aegn C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__B7152.exe
2008-5-11 9:23:48 已删除: Trojan-PSW.Win32.OnLineGames.aehr C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__29F82.exe
2008-5-11 9:23:51 已删除: Trojan-PSW.Win32.OnLineGames.aekc C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__AA0DA.exe
2008-5-11 9:23:51 已删除: Trojan-PSW.Win32.OnLineGames.aeli C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__B6825.exe
2008-5-11 9:23:50 已删除: Trojan-PSW.Win32.OnLineGames.aelm C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__8C3F1.exe
2008-5-11 9:24:02 已删除: Trojan-PSW.Win32.OnLineGames.aeny C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__E377B.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.OnLineGames.aeoa C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__589B1.exe
2008-5-11 9:23:51 已删除: Trojan-PSW.Win32.OnLineGames.aeoj C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__97B21.exe
2008-5-11 9:24:01 已删除: Trojan-PSW.Win32.OnLineGames.aeon C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__DD344.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.QQPass.buw C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__55301.exe
2008-5-11 9:23:49 已删除: Trojan-PSW.Win32.WOW.axo C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__59750.exe
2008-5-11 9:23:51 已删除: Trojan-Proxy.Win32.Xorpix.es C:\Documents and Settings\Administrator\桌面\dddd.rar/2008-5-10__99CCC.exe

显示全部楼层 · 发表于 2008-5-11 09:38:27

在 C:\Documents and Settings\Administrator\桌面\1.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\2.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\3.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\4.exe 中发现 Trojan/Vaklik.gs 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\33.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\7.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\9.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\10.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\11.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\12.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\13.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\14.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\15.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\16.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\17.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\20.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\21.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\22.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\23.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\24.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\25.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\26.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\27.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\28.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\31.exe 中发现 Trojan/PSW.OnLineGames.sss 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\6.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\oKoK.exe 中发现 Trojan/PSW.OnLineGames.aeki 病毒, 已删除

显示全部楼层 · 发表于 2008-5-11 10:19:13

过不了红伞，
Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL: http://arpcnn.cn/s.exe
Information: Is the Trojan horse TR/Downloader.Gen

Generated by AntiVir WebGuard 8.0.13.0, AVE 8.1.0.42, VDF 7.0.4.23

[病毒样本] 一堆

本帖子中包含更多资源

回复 5楼 VISN 的帖子

0,30,29下不到~kv 28