楼主: mofunzone
收起左侧

[病毒样本] 今日的包36个

[复制链接]
红心王子
发表于 2008-5-27 14:48:51 | 显示全部楼层
Date,Virus Name,Virus Type,User,Filename,Scan Type
2008-5-27 14:48:32,Trojan.Vapsup.eml.qoli,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\xmpstean.exe,Manual scan
2008-5-27 14:48:32,Trojan.Obfuscated.aul.hmcu.dll,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\nnnmjgGv.dll,Manual scan
2008-5-27 14:48:32,TrojanDownloader.Zlob.nwz.lxlb,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\MediaTubeCodec_ver1.971.45.exe,Manual scan
2008-5-27 14:48:32,Adware.Virtumonde.tsv.vnuy,广告程序,Administrator,D:\我的文档\桌面\新建文件夹\virus\file.exe,Manual scan
2008-5-27 14:48:31,Trojan.Vapsup.foh.mirw,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\ekel.exe,Manual scan
2008-5-27 14:48:31,Trojan.Vtrosi.slfr,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\ctfmona.exe,Manual scan
2008-5-27 14:48:31,TrojanDownloader.Delf.idy.ktzj,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\c-setup.exe,Manual scan
2008-5-27 14:48:31,TrojanDownloader.Delf.gja.txyj.dll,木马,Administrator,D:\我的文档\桌面\新建文件夹\virus\apsagy.dll,Manual scan
tracydk
发表于 2008-5-27 14:49:49 | 显示全部楼层
原帖由 mofunzone 于 2008-5-27 14:47 发表
听你的话我就放心了,一个月内把40台电脑全改avg8 free
我自己也会开始用,等我把这个月的antivir测试做好了事后

AVG有M的支持,嗯,不错  不过顺便说下,AVG的引擎确实烂。。。
woai_jolin
发表于 2008-5-27 14:55:00 | 显示全部楼层
Time        Module        Event        User
2008/5/27 14:53:19        Kernel        The file 'G:\v\virus\xmpstean.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:50:21        Kernel        The file 'G:\v\virus\winjrs32.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:50:06        Kernel        The file 'G:\v\virus\vltdfabw.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:49:30        Kernel        The file 'G:\v\virus\setup2.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:49:19        Kernel        The file 'G:\v\virus\setup.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:49:12        Kernel        The file 'G:\v\virus\nyps4.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:47:48        Kernel        The file 'G:\v\virus\notepad.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:47:38        Kernel        The file 'G:\v\virus\msprint.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:47:21        Kernel        The file 'G:\v\virus\mooncodec4049.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:46:56        Kernel        The file 'G:\v\virus\keygen.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:46:41        Kernel        The file 'G:\v\virus\ekel.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:46:27        Kernel        The file 'G:\v\virus\c-setup.exe' has been sent to ESET's labs for analysis.       
2008/5/27 14:45:58        Kernel        The file 'G:\v\virus\atfxqogp.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:45:27        Kernel        The file 'G:\v\virus\vregfwlx.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:45:02        Kernel        The file 'G:\v\virus\qoMcbAQK.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:44:49        Kernel        The file 'G:\v\virus\nnnmjgGv.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:44:39        Kernel        The file 'G:\v\virus\khfCrSiG.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:44:32        Kernel        The file 'G:\v\virus\boqnrwdmtpe.dll' has been sent to ESET's labs for analysis.       
2008/5/27 14:43:43        Kernel        The file 'G:\v\virus\apsagy.dll' has been sent to ESET's labs for analysis.
秋叶濛濛
发表于 2008-5-27 14:56:49 | 显示全部楼层
Dr.Web
8

Avk
扫描系统区域...
扫描所选择的目录和文件...
对象: apsagy.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan-Downloader.Win32.Peregar.nb (AVP引擎)
对象: boqnrwdmtpe.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Vapsup-EB [Adw] (Avast/BD引擎)
对象: c-setup.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan-Downloader.Win32.Delf.idy (AVP引擎)
对象: ctfmona.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.Agent.qnp (AVP引擎)
对象: file.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: not-a-virus:AdWare.Win32.Virtumonde.tsv (AVP引擎)
对象: data0001
  在压缩档案里: F:\Virus\virus\mooncodec1345.exe
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dlc (AVP引擎)
对象: mooncodec1345.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dlc (AVP引擎)
对象: data0001
  在压缩档案里: F:\Virus\virus\mooncodec4049.exe
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dja (AVP引擎)
对象: mooncodec4049.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dja (AVP引擎)
对象: data0001
  在压缩档案里: F:\Virus\virus\mooncodec4192.exe
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dja (AVP引擎)
对象: mooncodec4192.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.DNSChanger.dja (AVP引擎)
对象: nnnmjgGv.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.Obfuscated.aul (AVP引擎)
对象: nyps4.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Trojan.Win32.Inject.cgy (AVP引擎)
对象: setup.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Zlob-CBY [Trj] (Avast/BD引擎)
对象: setup.exe1.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Zlob-CBY [Trj] (Avast/BD引擎)
对象: setup2.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Zlob-CBY [Trj] (Avast/BD引擎)
对象: Uninstall.exe
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Trojan-gen {Other} (Avast/BD引擎)
对象: urqOICvT.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: not-a-virus:AdWare.Win32.Virtumonde.tst (AVP引擎)
对象: urqPgGYR.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: not-a-virus:AdWare.Win32.Virtumonde.tst (AVP引擎)
对象: vltdfabw.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Agent-LTS [Trj] (Avast/BD引擎)
对象: winjrs32.dll
路径: F:\Virus\virus
状态: 已发现病毒
  病毒: Win32:Small-EDU [Trj] (Avast/BD引擎)
分析完成: 2008-5-27 14:59
    已扫描 36 个文件
    已发现 18 个感染文件
    发现 0 个可疑文件

[ 本帖最后由 秋叶濛濛 于 2008-5-27 14:57 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
hahacomcn
发表于 2008-5-27 15:00:38 | 显示全部楼层
AVG8 free的占用资源程度如何呢?

引擎的话,当然还是红伞的不错。
mofunzone
 楼主| 发表于 2008-5-27 15:03:59 | 显示全部楼层

回复 12楼 tracydk 的帖子

avg引擎烂?
为什么?
我用了半天,觉得还行,不过就是扫描有些东西的时候卡的可怕。。
不过侦测率很高,误报感觉比antivir还高,上来就砍了我3个软件。。
palfan
发表于 2008-5-27 15:07:24 | 显示全部楼层

回复 16楼 mofunzone 的帖子

红伞在我这里零误报...........Serv-U除外
挪威的冬天
发表于 2008-5-27 15:38:48 | 显示全部楼层
信息        2008-05-27  15:38:03        您此次查毒隔离了7个文件                       
信息        2008-05-27  15:38:03        您此次查毒共查出7个病毒以及危险代码                       
信息        2008-05-27  15:38:03        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件47个                       
信息        2008-05-27  15:38:03        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒                       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\xmpstean.exe        Win32.Troj.Vapsup.81920        隔离成功       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\setup2.exe        Win32.TrojDownloader.Zlob.20992        隔离成功       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\setup.exe1.exe        Win32.TrojDownloader.Zlob.20992        隔离成功       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\setup.exe        Win32.TrojDownloader.Zlob.20992        隔离成功       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\nnnmjgGv.dll        Win32.Troj.Obfuscated.57344        隔离成功       
病毒        2008-05-27  15:38:03        D:\Desktop\virus\virus\ctfmona.exe        Win32.Troj.Agent.96256        隔离成功       
病毒        2008-05-27  15:38:02        D:\Desktop\virus\virus\c-setup.exe        Win32.TrojDownloader.Delf.249856        隔离成功
palfan
发表于 2008-5-27 15:51:46 | 显示全部楼层
25029241 9kgen_up.int 433.5 KB MALWARE
25029240 9kgen_up1.int 436.5 KB MALWARE
25029242 Codec.exe 23 KB MALWARE
25029168 crack.exe 43.5 KB MALWARE
25029243 ekel.exe 92 KB MALWARE
25029167 keygen.exe 93 KB MALWARE
25028923 MediaTubeCodec_ve...45.exe 119 KB MALWARE
25029244 mooncodec1345.exe 170.18 KB MALWARE
25029245 mooncodec4049.exe 172.71 KB MALWARE
25029249 mooncodec4192.exe 172.86 KB MALWARE
25029239 notepad.exe 26.5 KB MALWARE
25029250 notepad1.exe 24 KB MALWARE
25029049 nyps4.exe 40.25 KB MALWARE
25029090 setup.exe1.exe 20.5 KB MALWARE
25029252 sn_pkz.int 419 KB MALWARE
25029251 sn_pkz1.int 431.5 KB MALWARE
25029253 Uninstall.exe 51.11 KB CLEAN
25029254 winjrs32.dll 31.5 KB MALWARE
25029248 xmpstean.exe 80 KB MALWARE


[ 本帖最后由 palfan 于 2008-5-27 16:01 编辑 ]
woai_jolin
发表于 2008-5-27 18:54:41 | 显示全部楼层
还不错 更新了一个
Scan performed at: 2008/5/27 18:53:36
Scanning Log
NOD32 version 3134 (20080527) NT
Command line: G:\v\virus
C:\Program Files\Eset\nod32.exe - is OK

Date: 27.5.2008  Time: 18:53:38
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\virus\
G:\v\virus\9kgen_up.int - is OK
G:\v\virus\9kgen_up1.int - is OK
G:\v\virus\apsagy.dll - Win32/Adware.IeDefender.NEN application
G:\v\virus\atfxqogp.dll - is OK
G:\v\virus\boqnrwdmtpe.dll - is OK
G:\v\virus\c-setup.exe ?ASPack v2.12 - is OK
G:\v\virus\Codec.exe - is OK
G:\v\virus\crack.exe - is OK
G:\v\virus\ctfmona.exe - is OK
G:\v\virus\ekel.exe - is OK
G:\v\virus\file.exe - is OK
G:\v\virus\keygen.exe - is OK
G:\v\virus\khfCrSiG.dll - is OK
G:\v\virus\MediaTubeCodec_ver1.971.45.exe - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?calc.exe.dat - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?linux - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?DcryptDll.dll - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?StartMenu.dll - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?calc.exe.dat - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?linux - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?StartMenu.dll - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?calc.exe.dat - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?linux - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?StartMenu.dll - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\msprint.exe ?PECompact v2.xx - is OK
G:\v\virus\nnnmjgGv.dll - is OK
G:\v\virus\notepad.exe - is OK
G:\v\virus\notepad1.exe - is OK
G:\v\virus\nyps4.exe - is OK
G:\v\virus\qoMcbAQK.dll - is OK
G:\v\virus\setup.exe - is OK
G:\v\virus\setup.exe1.exe - is OK
G:\v\virus\setup2.exe - is OK
G:\v\virus\sn_pkz.int - is OK
G:\v\virus\sn_pkz1.int - is OK
G:\v\virus\Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\virus\Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\virus\Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\virus\urqOICvT.dll - is OK
G:\v\virus\urqPgGYR.dll - is OK
G:\v\virus\vltdfabw.dll - is OK
G:\v\virus\vregfwlx.dll - is OK
G:\v\virus\winjrs32.dll - is OK
G:\v\virus\wvUmkiiJ.dll - is OK
G:\v\virus\xmpstean.exe - is OK
Number of scanned files: 68
Number of threats found: 1
Time of completion: 18:53:51 Total scanning time: 13 sec (00:00:13)
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-15 11:06 , Processed in 0.117137 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表