[病毒样本] 群

显示全部楼层 · 发表于 2008-5-12 22:30:02

Url1=http://www.2xun.net/down/e1.exe
Url2=http://www.2xun.net/down/r2.exe
Url3=http://www.2xun.net/down/a3.exe
Url4=http://www.2xun.net/down/j4.exe
Url5=http://www.2xun.net/down/y5.exe
Url6=http://www.bye88.com/down/m6.exe
Url7=http://www.bye88.com/down/r7.exe
Url8=http://www.bye88.com/down/i8.exe
Url9=http://www.bye88.com/down/x9.exe
Url10=http://www.bye88.com/down/l10.exe
Url11=http://www.78856.net/down/b11.exe
Url12=http://www.78856.net/down/z12.exe
Url13=http://www.78856.net/down/m13.exe
Url14=http://www.78856.net/down/n14.exe
Url15=http://www.78856.net/down/o15.exe
Url16=http://www.78856.net/down/g16.exe
Url17=http://www.78856.net/down/j17.exe
Url18=http://www.78856.net/down/l18.exe
Url19=http://www.78856.net/down/c19.exe
Url20=http://www.78856.net/down/t20.exe
Url21=http://www.1860on.com/down/p21.exe
Url22=http://www.1860on.com/down/x22.exe
Url23=http://www.1860on.com/down/m23.exe
Url24=http://www.1860on.com/down/o24.exe
Url25=http://www.1860on.com/down/b25.exe
Url26=http://www.1860on.com/down/e26.exe
Url27=http://www.1860on.com/down/v27.exe
Url28=http://www.1860on.com/down/m28.exe
Url29=http://www.1860on.com/down/u29.exe
Url30=http://www.1860on.com/down/h30.exe
Url31=http://www.1860on.com/down/b31.exe
Url32=http://www.1860on.com/down/c32.exe

显示全部楼层 · 发表于 2008-5-12 22:34:46

谁打包？

显示全部楼层 · 发表于 2008-5-12 22:34:52

占座等打包

显示全部楼层 · 发表于 2008-5-12 22:37:17

来

[ 本帖最后由 wangjay1980 于 2008-5-12 22:38 编辑 ]

显示全部楼层 · 发表于 2008-5-12 22:39:32

在 C:\Documents and Settings\Administrator\桌面\virus.zip->a3.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->b31.exe 中发现 Backdoor/Popwin.cq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->c19.exe 中发现 Trojan/PSW.OnLineGames.sss 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->c32.exe 中发现 Trojan/PSW.QQPass.sxg 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->e26.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->h30.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->l18.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->m13.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->m23.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->m28.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->o24.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->r2.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->r7.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->t20.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->u29.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->v27.exe 中发现 Trojan/CallBeep.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->x9.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\virus.zip->x22.exe 中发现 Trojan/Ck88866.Gen 病毒, 已删除

显示全部楼层 · 发表于 2008-5-12 22:54:33

红伞清空

Begin scan in 'D:\Downloads\Sample\5.12\virus'
D:\Downloads\Sample\5.12\virus\a3.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\b11.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\b25.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Proxy.Xorpix.ES
   --> Object
      [DETECTION] Is the Trojan horse TR/Proxy.Xorpix.ES.1
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\b31.exe
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/PopWin.bfu Backdoor server programs
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\c19.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adwk
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\c32.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains detection pattern of the worm WORM/Autorun.FF.43
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\e1.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\e26.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\g16.exe
   [DETECTION] Is the Trojan horse TR/PSW.18001
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\h30.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adrg
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aks.1
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\i8.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\j17.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\j4.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\l10.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\l18.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\m13.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\m23.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\m28.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\m6.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.aepl
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\n14.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\o15.exe
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\o24.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ala
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\p21.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\r2.exe
   [DETECTION] Is the Trojan horse TR/PSW.Online.ddo
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\r7.exe
   [DETECTION] Is the Trojan horse TR/Onlinegames.NVI
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\t20.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adxc
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.aks.1
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\u29.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Proxy.Xorpix.EQ
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\v27.exe
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.adxo.1
   --> Object
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.ald
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\x22.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\x9.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\y5.exe
   [DETECTION] Is the Trojan horse TR/Hijacker.Gen
   [NOTE]    The file was deleted!
D:\Downloads\Sample\5.12\virus\z12.exe
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    The file was deleted!

End of the scan: 2008年5月12日  22:53
Used time: 00:03 min

The scan has been done completely.

   1 Scanning directories
   32 Files were scanned
   39 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   32 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -7 Files not concerned
   0 Archives were scanned
   0 Warnings
   32 Notes

显示全部楼层 · 发表于 2008-5-13 00:44:49

nod32 found threats

[病毒样本] 群

本帖子中包含更多资源

kv 18