[病毒样本] 30

显示全部楼层 · 发表于 2008-5-30 11:48:57

http://a.xiaba66.cn/yd.exe
http://a.xiaba66.cn/y0.exe
http://a.xiaba66.cn/y1.exe
http://a.xiaba66.cn/y2.exe
http://a.xiaba66.cn/y3.exe
http://a.xiaba66.cn/y4.exe
http://a.xiaba66.cn/y5.exe
http://a.xiaba66.cn/y6.exe
http://a.xiaba66.cn/y7.exe
http://a.xiaba66.cn/y8.exe
http://b.xiaba66.cn/y9.exe
http://b.xiaba66.cn/y10.exe
http://b.xiaba66.cn/y11.exe
http://b.xiaba66.cn/y12.exe
http://b.xiaba66.cn/y13.exe
http://b.xiaba66.cn/y14.exe
http://b.xiaba66.cn/y15.exe
http://b.xiaba66.cn/y16.exe
http://b.xiaba66.cn/y17.exe
http://c.xiaba66.cn/y18.exe
http://c.xiaba66.cn/y19.exe
http://c.xiaba66.cn/y20.exe
http://c.xiaba66.cn/y21.exe
http://c.xiaba66.cn/y22.exe
http://c.xiaba66.cn/y23.exe
http://c.xiaba66.cn/y24.exe
http://c.xiaba66.cn/y25.exe
http://c.xiaba66.cn/y26.exe
http://c.xiaba66.cn/y27.exe
http://c.xiaba66.cn/y28.exe

慢用

已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.nbl 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/yd.exe2
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.nbj 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y0.exe3
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsw 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y1.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajss 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y2.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akyd 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y3.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtr 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y4.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akwu 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y5.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.sbh 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y6.exe2//FSG
已刪除: 病毒 Worm.Win32.Downloader.ml 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y7.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.qqx 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y8.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aklk 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y10.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akau 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y11.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtn 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y12.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akka 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y13.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsz 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y14.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akcq 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y15.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsr 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y16.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akyh 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y17.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtq 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y9.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajta 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y19.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsu 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y20.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajsp 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y21.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajst 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y22.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.aknr 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y23.exe2//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajti 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y24.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajtl 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y25.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.ajts 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y26.exe3//FSG
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.adup 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y27.exe2//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.OnLineGames.akxv 檔案: C:\Documents and Settings\kato9096\桌面\0530\y.rar/y28.exe2//FSG

卡巴报29个,上报1个

y18.exe_ - Trojan-PSW.Win32.OnLineGames.alby

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

[ 本帖最后由 kato9096 于 2008-5-30 20:33 编辑 ]

显示全部楼层 · 发表于 2008-5-30 11:53:44

扫描系统区域...
扫描所选择的目录和文件...
对象: yd.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.Generic.276704 (BD 引擎)
对象: y0.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.Generic.278735 (BD 引擎)
对象: y1.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Dropped:Generic.PWS.Games.1.A52B5884 (BD 引擎)
对象: y2.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: BehavesLike:Win32.ExplorerHijack (BD 引擎)
对象: y3.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)
对象: y4.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.C0E02797 (BD 引擎)
对象: y6.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.YXH (BD 引擎)
对象: y7.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.Generic.282702 (BD 引擎)
对象: y8.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Dropped:Trojan.PWS.OnlineGames.YXH (BD 引擎)
对象: y10.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.BA36237E (BD 引擎)
对象: y11.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.C5BF71CF (BD 引擎)
对象: y12.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.75E88C91 (BD 引擎)
对象: y13.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)
对象: y14.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.14EAA4E7 (BD 引擎)
对象: y15.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)
对象: y16.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.27DF47D1 (BD 引擎)
对象: y17.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.81FCB0E1 (BD 引擎)
对象: y9.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.32E4C725 (BD 引擎)
对象: y19.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)
对象: y20.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.AF207F36 (BD 引擎)
对象: y21.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.4A2B6F57 (BD 引擎)
对象: y22.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.9EAC944C (BD 引擎)
对象: y23.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Dropped:Trojan.Generic.284019 (BD 引擎)
对象: y24.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.D441DBF5 (BD 引擎)
对象: y25.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.Generic.282861 (BD 引擎)
对象: y26.exe3
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnLineGames.NVI (BD 引擎)
对象: y27.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.WMA (BD 引擎)
对象: y28.exe2
在压缩档案里: C:\Documents and Settings\wangcheng\桌面\y.rar
Status: 已发现病毒
病毒: Generic.PWS.Games.4.6AB94CDA (BD 引擎)

更新了？

显示全部楼层 · 发表于 2008-5-30 11:55:07

Starting the file scan:

Begin scan in 'E:\AV\新建文件夹'
E:\AV\新建文件夹\yd.exe2
   [DETECTION] Is the Trojan horse TR/Agent.nbl
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y0.exe3
   [DETECTION] Is the Trojan horse TR/Agent.nbj
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y1.exe3
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajus
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y2.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y3.exe2
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The fund was classified as suspicious.
   [NOTE]    The file was moved to '486d7b58.qua'!
E:\AV\新建文件夹\y4.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y5.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y6.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.akfk
   --> Object
      [DETECTION] Is the Trojan horse TR/Agent.qqx
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y7.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajsq
   --> Object
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.MM
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y8.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Agent.qqx.1
   --> Object
      [DETECTION] Is the Trojan horse TR/Agent.qqx
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y10.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y11.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y12.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y13.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y14.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y15.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y16.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y17.exe3
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The fund was classified as suspicious.
   [NOTE]    The file was moved to '48767b56.qua'!
E:\AV\新建文件夹\y9.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y18.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y19.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y20.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y21.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y22.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y23.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.MM
   [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/UPACK). Please verify the origin of the file
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y24.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y25.exe3
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.ajtm
   --> Object
      [DETECTION] Contains detection pattern of the worm WORM/Downloader.MM
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y26.exe3
   [DETECTION] Is the Trojan horse TR/Drop.Cinmus.Z
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y27.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.afqn
   [DETECTION] Is the Trojan horse TR/Dldr.Delphi.Gen
   [NOTE]    The file was deleted!
E:\AV\新建文件夹\y28.exe2
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The fund was classified as suspicious.
   [NOTE]    The file was moved to '48777b58.qua'!

End of the scan: 2008年5月30日  11:57
Used time: 00:08 min

The scan has been done completely.

   1 Scanning directories
   30 Files were scanned
   33 viruses and/or unwanted programs were found
   3 Files were classified as suspicious:
   27 files were deleted
   0 files were repaired
   3 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -3 Files not concerned
   0 Archives were scanned
   0 Warnings
   30 Notes

The file 'y3.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.akyd. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.115. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'y17.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.akyh. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.115. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

The file 'y28.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/PSW.OnlineGames.akxv. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.04.115. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware.

[ 本帖最后由 Exia 于 2008-5-30 16:56 编辑 ]

显示全部楼层 · 发表于 2008-5-30 11:56:40

AVK也扫出29个，剩下的一个居然被MCAFEE给杀掉了

30个全灭

显示全部楼层 · 发表于 2008-5-30 12:08:13

C:\Users\Administrator\Desktop\y.rar » RAR » yd.exe2 - Win32/Agent.NVR trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y0.exe3 - Win32/Small.NDW trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y1.exe3 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y2.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y3.exe2 - a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y4.exe2 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y5.exe2 - a variant of Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y6.exe2 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y7.exe2 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y8.exe2 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y10.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y11.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y12.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y13.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y14.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y15.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y16.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y17.exe3 - a variant of Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y9.exe2 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y18.exe3 - probably a variant of Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y19.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y20.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y21.exe2 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y22.exe2 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y23.exe2 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y24.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y25.exe3 - Win32/PSW.OnLineGames.NWB trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y26.exe3 - Win32/PSW.OnLineGames.NWC trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y27.exe2 - Win32/PSW.OnLineGames.ZJK trojan
C:\Users\Administrator\Desktop\y.rar » RAR » y28.exe2 - a variant of Win32/PSW.OnLineGames.NWC trojan

显示全部楼层 · 发表于 2008-5-30 12:21:51

IKARUS全灭！
D:\病毒测试\临时解压\y0.exe3 - 特征码 'Virus.Trojan.Win32.Agent.nbj' 被发现
D:\病毒测试\临时解压\y1.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsw' 被发现
D:\病毒测试\临时解压\y10.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsp' 被发现
D:\病毒测试\临时解压\y11.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsp' 被发现
D:\病毒测试\临时解压\y12.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsp' 被发现
D:\病毒测试\临时解压\y13.exe3 - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\病毒测试\临时解压\y14.exe3 - 特征码 'Trojan-PWS.Win32.Lmir.awg' 被发现
D:\病毒测试\临时解压\y15.exe3 - 特征码 'Trojan-PWS.OnlineGames.NVI' 被发现
D:\病毒测试\临时解压\y16.exe3 - 特征码 'Trojan-PWS.Win32.Lmir.awg' 被发现
D:\病毒测试\临时解压\y17.exe3 - 可疑代码段被发现 (Level: 140)
D:\病毒测试\临时解压\y18.exe3 - 可疑代码段被发现 (Level: 140)
D:\病毒测试\临时解压\y19.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajta' 被发现
D:\病毒测试\临时解压\y2.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajss' 被发现
D:\病毒测试\临时解压\y20.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsu' 被发现
D:\病毒测试\临时解压\y21.exe2 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajsp' 被发现
D:\病毒测试\临时解压\y22.exe2 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajst' 被发现
D:\病毒测试\临时解压\y23.exe2 - 特征码 'Trojan-Dropper' 被发现
D:\病毒测试\临时解压\y24.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajti' 被发现
D:\病毒测试\临时解压\y25.exe3 - 特征码 'Trojan-Spy.Win32.Vagon.A' 被发现
D:\病毒测试\临时解压\y26.exe3 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajts' 被发现
D:\病毒测试\临时解压\y27.exe2 - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
D:\病毒测试\临时解压\y28.exe2 - 可疑代码段被发现 (Level: 140)
D:\病毒测试\临时解压\y3.exe2 - 可疑代码段被发现 (Level: 140)
D:\病毒测试\临时解压\y4.exe2 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajtr' 被发现
D:\病毒测试\临时解压\y5.exe2 - 可疑代码段被发现 (Level: 140)
D:\病毒测试\临时解压\y6.exe2 - 特征码 'Trojan-Dropper' 被发现
D:\病毒测试\临时解压\y7.exe2 - 特征码 'Virus.Worm.Win32.Downloader.ml' 被发现
D:\病毒测试\临时解压\y8.exe2 - 特征码 'Trojan-Downloader.Win32.Delf.aam' 被发现
D:\病毒测试\临时解压\y9.exe2 - 特征码 'Trojan-PWS.Win32.OnLineGames.ajtq' 被发现
D:\病毒测试\临时解压\yd.exe2 - 特征码 'Trojan.Generic' 被发现

30 文件被扫描
(0 压缩档 0 文件)
25 特征码被侦测
5 可疑代码段被发现
耗时: 0:01.112

[ 本帖最后由欠妳緈諨于 2008-5-30 13:35 编辑 ]

显示全部楼层 · 发表于 2008-5-30 12:59:32

avast!

E:\VirusZoo\MalCol\y1.exe3\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y2.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y3.exe2\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y4.exe2\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y5.exe2\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y6.exe2\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y7.exe2\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y8.exe2\[FSG]\[Embedded#4000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y10.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y11.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y12.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y13.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y14.exe3\[FSG] [L] Win32:OnLineGames-DQN [Trj] (0)
E:\VirusZoo\MalCol\y15.exe3\[FSG] [L] Win32:OnLineGames-DJX [Trj] (0)
E:\VirusZoo\MalCol\y16.exe3\[FSG] [L] Win32:Agent-CNF [Trj] (0)
E:\VirusZoo\MalCol\y17.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y9.exe2\[FSG] [L] Win32:OnLineGames-DQN [Trj] (0)
E:\VirusZoo\MalCol\y18.exe3\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y19.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y20.exe3\[FSG] [L] Win32:OnLineGames-DAB [Trj] (0)
E:\VirusZoo\MalCol\y21.exe2\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y22.exe2\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y23.exe2\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y24.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y25.exe3\[FSG]\[Embedded#3000]\[Upack] [L] Win32:Agent-BQC [Trj] (0)
E:\VirusZoo\MalCol\y26.exe3\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
E:\VirusZoo\MalCol\y27.exe2\[Upack]\[Embedded#50c0]\[Upack] [L] Win32:WOW-FXY [Trj] (0)
E:\VirusZoo\MalCol\y28.exe2\[FSG] [L] Win32:OnLineGames-DQS [Trj] (0)
Infected files: 28

onlinegames..已经比以前要好了...

显示全部楼层 · 发表于 2008-5-30 14:25:52

诺顿26个

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Undef.gzb
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.PSW.Win32.GameOL.nsq
病毒： Trojan.PSW.Win32.GameOL.nsz
病毒： RootKit.Win32.Undef.ic
病毒： RootKit.Win32.RESSDT.al
病毒： Trojan.PSW.Win32.GamesOnline.wb

用户来源：互联网

软件版本：20.46.40
25个

显示全部楼层 · 发表于 2008-5-30 19:08:56

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Undef.gzb
病毒： Trojan.PSW.Win32.GameOL.GEN
病毒： Trojan.PSW.Win32.GameOL.nsu
病毒： Trojan.PSW.Win32.GameOL.nsq
病毒： Trojan.PSW.Win32.GameOL.nsz
病毒： RootKit.Win32.Undef.ic
病毒： Trojan.PSW.Win32.GameOL.nto
病毒： RootKit.Win32.RESSDT.al
病毒： Trojan.PSW.Win32.GamesOnline.wb

MAC 地址：00:17:31:40:A3:57

用户来源：局域网

软件版本：20.46.42

显示全部楼层 · 发表于 2008-5-30 19:11:50

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y0.exe3 <- Trojan.Agent.Nbj : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y1.exe3 <- Trojan.Psw.Onlinegames.Ajsw : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y1.exe3<FSG>:y1.exe3<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ajus : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y2.exe3 <- Trojan.Psw.Onlinegames.Ajss : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y3.exe2 <- Trojan.Psw.Onlinegames.Akyd : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y4.exe2 <- Trojan.Psw.Onlinegames.Ajtr : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y5.exe2 <- Trojan.Psw.Onlinegames.Akwu : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y6.exe2 <- Trojan.Dropper.Agent.Sbh : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y6.exe2<FSG>:y6.exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Akfk : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y6.exe2<FSG>:y6.exe2<DLLRES>:res1.exe <- Trojan.Agent.Qqx : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y7.exe2 <- Worm.Downloader.Ml : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y7.exe2<FSG>:y7.exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ajsq : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y7.exe2<FSG>:y7.exe2<DLLRES>:res1.exe <- Worm.Downloader.Mm : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y8.exe2 <- Trojan.Agent.Qqx : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y8.exe2<FSG>:y8.exe2<DLLRES>:res1.exe <- Trojan.Agent.Qqx : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y11.exe3 <- Trojan.Psw.Onlinegames.Akau : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y12.exe3 <- Trojan.Psw.Onlinegames.Ajtn : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y13.exe3 <- Trojan.Psw.Onlinegames.Akka : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y14.exe3 <- Trojan.Psw.Onlinegames.Ajsz : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y15.exe3 <- Trojan.Psw.Onlinegames.Akcq : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y16.exe3 <- Trojan.Psw.Onlinegames.Ajsr : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y17.exe3 <- Trojan.Psw.Onlinegames.Akyh : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y9.exe2 <- Trojan.Psw.Onlinegames.Ajtq : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y19.exe3 <- Trojan.Psw.Onlinegames.Ajta : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y19.exe3<FSG>:y19.exe3 <- Trojan.Psw.Onlinegames.Ajta : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y20.exe3 <- Trojan.Psw.Onlinegames.Ajsu : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y21.exe2 <- Trojan.Psw.Onlinegames.Ajsp : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y22.exe2 <- Trojan.Psw.Onlinegames.Ajst : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y23.exe2 <- Trojan.Psw.Onlinegames.Aknr : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y23.exe2<FSG>:y23.exe2<DLLRES>:res1.exe <- Worm.Downloader.Mm : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y24.exe3 <- Trojan.Psw.Onlinegames.Ajti : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y25.exe3 <- Trojan.Psw.Onlinegames.Ajtl : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y25.exe3<FSG>:y25.exe3<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Ajtm : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y25.exe3<FSG>:y25.exe3<DLLRES>:res1.exe <- Worm.Downloader.Mm : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y26.exe3 <- Trojan.Psw.Onlinegames.Ajts : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y27.exe2<UPack>:y27.exe2<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Akcs : No action
C:\Documents and Settings\All Users\Documents\Test\y.rar<RAR>:y27.exe2<UPack>:y27.exe2<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Afqn : No action

Scanned objects : 86

Infected objects : 37

[病毒样本] 30

本帖子中包含更多资源

30

55/26

ArcaVir2008

浏览过的版块