收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 20个
12下一页
返回列表 发新帖
查看: 3390|回复: 15
收起左侧

[病毒样本] 20个

[复制链接]
mofunzone
发表于 2008-5-28 02:29:04 | 显示全部楼层 |阅读模式
在cnbeta看到的新闻里面拉到的

Starting the file scan:

Begin scan in 'C:\TDDOWNLOAD\21.exe'
C:\TDDOWNLOAD\
  21.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\1.exe'
C:\TDDOWNLOAD\
  1.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\2.exe'
C:\TDDOWNLOAD\
  2.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\3.exe'
C:\TDDOWNLOAD\
  3.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\4.exe'
C:\TDDOWNLOAD\
  4.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\5.exe'
C:\TDDOWNLOAD\
  5.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\7.exe'
C:\TDDOWNLOAD\
  7.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\8.exe'
C:\TDDOWNLOAD\
  8.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\9.exe'
C:\TDDOWNLOAD\
  9.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\10.exe'
C:\TDDOWNLOAD\
  10.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\11.exe'
C:\TDDOWNLOAD\
  11.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\12.exe'
C:\TDDOWNLOAD\
  12.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\13.exe'
C:\TDDOWNLOAD\
  13.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\14.exe'
C:\TDDOWNLOAD\
  14.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\15.exe'
C:\TDDOWNLOAD\
  15.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\16.exe'
C:\TDDOWNLOAD\
  16.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\17.exe'
C:\TDDOWNLOAD\
  17.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\18.exe'
C:\TDDOWNLOAD\
  18.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\19.exe'
C:\TDDOWNLOAD\
  19.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'C:\TDDOWNLOAD\20.exe'
C:\TDDOWNLOAD\
  20.exe
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月27日  11:28
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     20 Files were scanned
     20 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     20 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     20 Notes

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

palfan
发表于 2008-5-28 03:11:51 | 显示全部楼层
对木马群已经失去兴趣了
回复

举报

woai_jolin
发表于 2008-5-28 06:31:23 | 显示全部楼层
Scan performed at: 2008/5/28 6:31:07
Scanning Log
NOD32 version 3136 (20080527) NT
Command line: G:\v\TDDOWNLOAD.rar
C:\Program Files\Eset\nod32.exe - is OK

Date: 28.5.2008  Time: 06:31:11
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\TDDOWNLOAD.rar
G:\v\TDDOWNLOAD.rar ?RAR ?21.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?1.exe - a variant of Win32/PSW.OnLineGames.NWB trojan
G:\v\TDDOWNLOAD.rar ?RAR ?2.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?3.exe - a variant of Win32/PSW.OnLineGames.NWC trojan
G:\v\TDDOWNLOAD.rar ?RAR ?4.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?5.exe - probably a variant of Win32/PSW.OnLineGames.NWB trojan
G:\v\TDDOWNLOAD.rar ?RAR ?7.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?8.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?9.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?10.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar ?RAR ?11.exe - a variant of Win32/PSW.OnLineGames.NWC trojan
G:\v\TDDOWNLOAD.rar ?RAR ?12.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar ?RAR ?13.exe - a variant of Win32/PSW.OnLineGames.ZJK trojan
G:\v\TDDOWNLOAD.rar ?RAR ?14.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?15.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?16.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar ?RAR ?17.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar ?RAR ?18.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\TDDOWNLOAD.rar ?RAR ?19.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar ?RAR ?20.exe - probably a variant of Win32/Genetik trojan
G:\v\TDDOWNLOAD.rar:Zone.Identifier - is OK
Number of scanned files: 21
Number of threats found: 20
Time of completion: 06:31:18 Total scanning time: 7 sec (00:00:07)
回复

举报

sam.to
发表于 2008-5-28 11:05:25 | 显示全部楼层
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsw        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/1.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtr        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/3.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtf        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/5.exe//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajod        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/10.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajpz        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/12.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.Agent.amb        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/13.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajod        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/16.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajoi        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/17.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajqb        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/19.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajpx        檔案: C:\Documents and Settings\kato9096\桌面\TDDOWNLOAD.rar/20.exe//UPack

10个,to kl
回复

举报

csliss
发表于 2008-5-28 11:20:32 | 显示全部楼层
检测到
------
状态        对象
----        ----
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajsw        文件: D:\病毒樣本\TDDOWNLOAD.rar/1.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajtr        文件: D:\病毒樣本\TDDOWNLOAD.rar/3.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajtf        文件: D:\病毒樣本\TDDOWNLOAD.rar/5.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajod        文件: D:\病毒樣本\TDDOWNLOAD.rar/10.exe//UPack
已隔离：病毒 Heur.Trojan.Generic (修改)        文件: D:\病毒樣本\TDDOWNLOAD.rar/11.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajpz        文件: D:\病毒樣本\TDDOWNLOAD.rar/12.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.Agent.amb        文件: D:\病毒樣本\TDDOWNLOAD.rar/13.exe//#//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajod        文件: D:\病毒樣本\TDDOWNLOAD.rar/16.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajoi        文件: D:\病毒樣本\TDDOWNLOAD.rar/17.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajqb        文件: D:\病毒樣本\TDDOWNLOAD.rar/19.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ajpx        文件: D:\病毒樣本\TDDOWNLOAD.rar/20.exe//UPack
已删除：木马程序 Trojan-PSW.Win32.Agent.amb        文件: D:\病毒樣本\TDDOWNLOAD.rar/13.exe//PE_Patch//UPack
回复

举报

sam.to
发表于 2008-5-28 11:52:10 | 显示全部楼层
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.
-----------------
Regards, Namestnikov Yury
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com
回复

举报

Nerazzurri
发表于 2008-5-28 11:55:01 | 显示全部楼层
KL好多工程师越来越懒了。。。
命名也不给个。。
而且这两天上报了好几次，没一次回了。。。
回复

举报

sam.to
发表于 2008-5-28 11:57:20 | 显示全部楼层

回复 7楼 Nerazzurri 的帖子

自上星期四开始,病毒入庫的數量只有平日的3分之一
回复都慢了不少

[ 本帖最后由 kato9096 于 2008-5-28 12:01 编辑 ]
回复

举报

sam.to
发表于 2008-5-28 12:03:56 | 显示全部楼层
LZ可給网址來看嗎?
回复

举报

jiffy
发表于 2008-5-28 12:48:55 | 显示全部楼层
pc   tools  全挂
回复

举报

下一页 »
12下一页
返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-15 11:03 , Processed in 0.134126 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表