查看: 1949|回复: 9
收起左侧

[病毒样本] 一包疑似病毒的东西

[复制链接]
luohk
发表于 2008-5-12 20:19:50 | 显示全部楼层 |阅读模式
大家都来扫下吧,在朋友家找出来的。

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Exia 该用户已被删除
发表于 2008-5-12 20:21:54 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\xia4.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48893747.qua'!
E:\AV\新建文件夹\xia9.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48893748.qua'!
E:\AV\新建文件夹\xia12.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '492dd589.qua'!
E:\AV\新建文件夹\xia16.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '4889374a.qua'!
E:\AV\新建文件夹\xia29.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '48893749.qua'!


End of the scan: 2008年5月12日  20:24
Used time: 00:14 min

The scan has been done completely.

      1 Scanning directories
     25 Files were scanned
      0 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      5 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     25 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes
电影结束了
发表于 2008-5-12 20:22:45 | 显示全部楼层
对象: xia20.exe
        在压缩档案里: F:\system32.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnLineGames.WGF (BD 引擎)
对象: xia21.exe
        在压缩档案里: F:\system32.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnLineGames.WGF (BD 引擎)
对象: xia26.exe
        在压缩档案里: F:\system32.rar
        Status: 已发现病毒
        病毒: Generic.PWS.Games.1.CFF27EE3 (BD 引擎)
对象: xia31.exe
        在压缩档案里: F:\system32.rar
        Status: 已发现病毒
        病毒: Trojan.PWS.OnlineGames.WNY (BD 引擎)
Palkia
发表于 2008-5-12 20:24:54 | 显示全部楼层

kv

在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia6.exe 中发现 Trojan/PSW.OnLineGames.ssf 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia9.exe 中发现 Trojan/PSW.OnLineGames.ssf 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia15.exe 中发现 Trojan/PSW.OnLineGames.ssf 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia18.exe 中发现 Trojan/PSW.OnLineGames.ssf 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia21.exe 中发现 Trojan/PSW.OnLineGames.acrk 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\system32.rar->xia31.exe 中发现 TrojanDownloader.Small.ackx 病毒, 已删除
wangjay1980
发表于 2008-5-12 20:27:25 | 显示全部楼层
看来基本都是尸体
qigang
发表于 2008-5-12 20:31:24 | 显示全部楼层

26/2

瑞星病毒查杀结果报告

清除病毒种类列表:

病毒: Packer.Win32.Upack.a     

MAC 地址:00:11:5B:F3:6D:69

用户来源:互联网

软件版本:20.44.02
jpljpl1987
发表于 2008-5-12 21:09:23 | 显示全部楼层
恶意软件名称:Win32:OnLineGames-DJV [Trj]
特洛伊木马
AVAST直接阻止另存为了
挪威的冬天
发表于 2008-5-12 22:32:51 | 显示全部楼层
信息        2008-05-12  22:32:42        您此次查毒清除了6个病毒                       
信息        2008-05-12  22:32:42        您此次查毒共查出6个病毒以及危险代码                       
信息        2008-05-12  22:32:42        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件30个                       
信息        2008-05-12  22:32:42        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia30.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia26.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia24.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia23.exe        Win32.Troj.OnlineGamesT.zy.32923        清除成功       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia21.exe        Win32.Hack.UpackT.a.15981        清除成功       
病毒        2008-05-12  22:32:42        D:\Desktop\system32.rar\xia20.exe        Win32.Hack.UpackT.a.15981        清除成功
Exia 该用户已被删除
发表于 2008-5-13 15:13:10 | 显示全部楼层
25017014  xia2.exe  12.4 KB  DAMAGED FILE (MALWARE)
25017015  xia3.exe  27.87 KB  DAMAGED FILE (UNKNOWN)
25017016  xia5.exe  13.8 KB  DAMAGED FILE (UNKNOWN)
25017017  xia6.exe  12.4 KB  DAMAGED FILE (UNKNOWN)
25017018  xia8.exe  12.4 KB  DAMAGED FILE (UNKNOWN)
25017019  xia10.exe  12.4 KB  DAMAGED FILE (UNKNOWN)
25017020  xia13.exe  13.8 KB  DAMAGED FILE (UNKNOWN)
25017021  xia15.exe  13.8 KB  DAMAGED FILE (UNKNOWN)
25017022  xia17.exe  12.4 KB  DAMAGED FILE (UNKNOWN)
25017023  xia18.exe  12.4 KB  DAMAGED FILE (UNKNOWN)
25017024  xia19.exe  12.4 KB  DAMAGED FILE (MALWARE)
25017025  xia20.exe  10.99 KB  DAMAGED FILE (MALWARE)
25017026  xia21.exe  15.21 KB  MALWARE
25017027  xia23.exe  15.21 KB  DAMAGED FILE (MALWARE)
25017028  xia24.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017029  xia25.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017030  xia26.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017031  xia27.exe  12.4 KB  DAMAGED FILE (MALWARE)
25017032  xia30.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017033  xia31.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017048  xia4.exe  16.62 KB  DAMAGED FILE (MALWARE)
25017049  xia9.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017050  xia12.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017051  xia16.exe  13.8 KB  DAMAGED FILE (MALWARE)
25017052  xia29.exe  13.8 KB  DAMAGED FILE (MALWARE)

The file 'xia21.exe' has been determined to be 'MALWARE'.
Our analysts named the threat TR/PSW.OnlineGames.WGF.202. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.27.

[ 本帖最后由 Exia 于 2008-5-13 15:14 编辑 ]
sam.to
发表于 2008-5-13 15:20:39 | 显示全部楼层
原帖由 wangjay1980 于 2008-5-12 20:27 发表
看来基本都是尸体

Kaspersky Virus Scanner


Scanned file:   system32.rar
system32.rar/xia2.exe Corrupted
system32.rar/xia2.exe Corrupted
system32.rar/xia3.exe Corrupted
system32.rar/xia3.exe Corrupted
system32.rar/xia4.exe Corrupted
system32.rar/xia4.exe Corrupted
system32.rar/xia5.exe Corrupted
system32.rar/xia5.exe Corrupted
system32.rar/xia6.exe Corrupted
system32.rar/xia6.exe Corrupted
system32.rar/xia8.exe Corrupted
system32.rar/xia8.exe Corrupted
system32.rar/xia9.exe - OK
system32.rar/xia9.exe - OK
system32.rar/xia10.exe Corrupted
system32.rar/xia10.exe Corrupted
system32.rar/xia12.exe Corrupted
system32.rar/xia12.exe Corrupted
system32.rar/xia13.exe Corrupted
system32.rar/xia13.exe Corrupted
system32.rar/xia15.exe Corrupted
system32.rar/xia15.exe Corrupted
system32.rar/xia16.exe - OK
system32.rar/xia17.exe Corrupted
system32.rar/xia17.exe Corrupted
system32.rar/xia18.exe Corrupted
system32.rar/xia18.exe Corrupted
system32.rar/xia19.exe Corrupted
system32.rar/xia19.exe Corrupted
system32.rar/xia20.exe - OK
system32.rar/xia20.exe - OK
system32.rar/xia21.exe - OK
system32.rar/xia21.exe - OK
system32.rar/xia23.exe Unknown format UPX
system32.rar/xia23.exe Corrupted
system32.rar/xia23.exe Corrupted
system32.rar/xia23.exe Corrupted
system32.rar/xia24.exe Unknown format UPX
system32.rar/xia24.exe Corrupted
system32.rar/xia24.exe Corrupted
system32.rar/xia24.exe Corrupted
system32.rar/xia25.exe Unknown format UPX
system32.rar/xia25.exe Corrupted
system32.rar/xia25.exe Corrupted
system32.rar/xia26.exe Unknown format UPX
system32.rar/xia26.exe Corrupted
system32.rar/xia26.exe Corrupted
system32.rar/xia26.exe Corrupted
system32.rar/xia27.exe Corrupted
system32.rar/xia27.exe Corrupted
system32.rar/xia29.exe Corrupted
system32.rar/xia29.exe Corrupted
system32.rar/xia30.exe Unknown format UPX
system32.rar/xia30.exe Corrupted
system32.rar/xia30.exe Corrupted
system32.rar/xia30.exe Corrupted
system32.rar/xia31.exe - OK

你有沒有上报?
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 09:19 , Processed in 0.169288 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表