收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › kv的trojan/agent族
12
返回列表 发新帖
楼主: aaad2008
 收起左侧

[病毒样本] kv的trojan/agent族

[复制链接]
啊弥陀佛
发表于 2008-5-16 15:59:18 | 显示全部楼层
不是有效PE文件

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

allinwonderi
发表于 2008-5-16 16:26:29 | 显示全部楼层

F-Prot 6.0.9.0

[Found virus]        <W32/InfoStealer!Generic (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\桌面.rar->~f1c.tmp
[Found virus]        <W32/InfoStealer!Generic (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\桌面.rar->~f40.tmp

---------------------------------------------------------------------
Scan ended:        2008-5-16, 16:26:03
Duration:        0:00:01

Scan result:

Scanned files:                 6
Infected objects:         2
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------
回复

举报

allinwonderi
发表于 2008-5-16 16:27:17 | 显示全部楼层

ArcaVir2008

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file0.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file1.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file2.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file3.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file4.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1c.tmp<DLLRES>:file5.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file0.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file1.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file2.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file3.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file4.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f10.tmp<DLLRES>:file5.exe <- Trojan.Agent.Lzs : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file0.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file1.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file2.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file3.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file4.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f12.tmp<DLLRES>:file5.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file0.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file1.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file2.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file3.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file4.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f13.tmp<DLLRES>:file5.exe <- Trojan.Agent.Lzu : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file0.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file1.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file2.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file3.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file4.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f14.tmp<DLLRES>:file5.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file0.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file1.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file2.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file3.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file4.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f1a.tmp<DLLRES>:file5.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file0.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file1.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file2.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file3.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file4.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f3e.tmp<DLLRES>:file5.exe <- Trojan.Dropper.Agent.Qze : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file0.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file1.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file2.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file3.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file4.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~f40.tmp<DLLRES>:file5.exe <- Trojan.Agent.Mbp : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file0.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file1.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file2.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file3.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file4.exe <- Trojan.Agent.Lxg : No action
C:\Documents and Settings\All Users\Documents\Test\桌面.rar<RAR>:~fb.tmp<DLLRES>:file5.exe <- Trojan.Agent.Lxg : No action



Scanned objects : 71

Infected objects : 63
回复

举报

sam.to
发表于 2008-5-16 17:32:25 | 显示全部楼层
Hello.

New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

--
Regards, Ilya Goncharov
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com
回复

举报

Redevil
发表于 2008-5-16 18:45:55 | 显示全部楼层
楼主的“快杀”这两个字
让我想起了一个人
并且我的想法是正确的
回复

举报

Palkia
发表于 2008-5-16 20:14:18 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\桌面\~f10.tmp        Trojan.Gampass.pubc.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f12.tmp        Trojan.Gampass.azcr.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f13.tmp        Trojan.Agent.lzu.beiv.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f14.tmp        Trojan.Gampass.efmb.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f1a.tmp        Trojan.Gampass.ljxa.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f1c.tmp        Trojan.Gampass.sics.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f3e.tmp        Trojan.Gampass.ljxa.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~f40.tmp        Trojan.Gampass.sics.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~fb.tmp        Trojan.Agent.lxg.fqkp.arc.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\桌面\~fd.tmp        Trojan.Gampass.mglq.arc.dll        木马        还未处理
回复

举报

zwl2828
发表于 2008-5-16 20:16:37 | 显示全部楼层
2008/5/16 20:16:15        http://bbs.kafan.cn/attachment.p ... 210940107//~f1c.tmp        Internet Explorer        Detected: Trojan.Win32.Agent.mbp
回复

举报

sam.to
发表于 2008-5-16 20:17:57 | 显示全部楼层

回复 17楼 zwl2828 的帖子

什麼殺軟?
回复

举报

qigang
发表于 2008-5-16 21:02:19 | 显示全部楼层

11/0

RS20.44.42未杀！
回复

举报

12
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 09:13 , Processed in 0.098457 second(s), 16 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表