http://1.51xj.net

冷冷

你的是最新的么？
我发现我电脑很适合病毒作客啊

ALEXBLAIR

我用之前的flash版本浏览也是一样的~~~
现在也晕了，不知道那里出错了，不少木马在我的电脑上都不能正常运行，最近在样本区的木马，在我的电脑上执行不是出错就是自动报废~~ 无奈了~~

tanlimo

http://www.nbpao.cn/dw.txt

2008-6-01= http://www.skpao.cn/p1.exe
2008-6-01= http://www.skpao.cn/p2.exe
2008-6-01= http://www.skpao.cn/p3.exe
2008-6-01= http://www.skpao.cn/p4.exe
2008-6-01= http://www.skpao.cn/p5.exe
2008-6-01= http://www.skpao.cn/p6.exe
2008-6-01= http://www.skpao.cn/p7.exe
2008-6-01= http://www.skpao.cn/p8.exe
2008-6-01= http://www.skpao.cn/p9.exe
2008-6-01= http://www.skpao.cn/p10.exe
2008-6-01= http://www.skpao.cn/p11.exe
2008-6-01= http://www.skpao.cn/p12.exe
2008-6-01= http://www.skpao.cn/p13.exe
2008-6-01= http://www.skpao.cn/p14.exe
2008-6-01= http://www.skpao.cn/p15.exe
2008-6-01= http://www.skpao.cn/p16.exe
2008-6-01= http://www.skpao.cn/p17.exe
2008-6-01= http://www.skpao.cn/p18.exe
2008-6-01= http://www.skpao.cn/p19.exe
2008-6-01= http://www.skpao.cn/p20.exe
2008-6-01= http://www.skpao.cn/p21.exe
2008-6-01= http://www.skpao.cn/p22.exe
2008-6-01= http://www.skpao.cn/p23.exe（挂）
2008-6-01= http://www.skpao.cn/p24.exe
2008-6-01= http://www.skpao.cn/p25.exe
2008-6-01= http://www.skpao.cn/p26.exe
2008-6-01= http://www.skpao.cn/p27.exe
2008-6-01= http://www.skpao.cn/p28.exe
2008-6-01= http://www.skpao.cn/p29.exe  (挂）
2008-6-01= http://www.skpao.cn/p30.exe
2008-6-01= http://www.skpao.cn/p31.exe
2008-6-01= http://www.skphp.cn/cj.exe

样本（30个）.rar (604.35 KB, 下载次数: 166)

2008-6-3 01:21 上传

点击文件名下载附件

[ 本帖最后由 tanlimo 于 2008-6-3 01:21 编辑 ]

ALEXBLAIR

这些也是从那个地址出来的〉？

冷冷

同上

tanlimo

嗯，运行ms.exe得来的

曲中求

Starting the file scan:

Begin scan in 'E:\病毒\样本（30个）.rar'
E:\病毒\样本（30个）.rar
E:\病毒\样本（30个）.rar
  [0] Archive type: RAR
    --> p9.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/Inject.cky
    --> p12.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alhf
    --> p16.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p17.exe
      --> Object
        [2] Archive type: RSRC
        --> Object
            [DETECTION] Is the Trojan horse TR/PSW.Nilage.cnj
    --> p19.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p20.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p21.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p22.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p27.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p28.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> cj.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> ms.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alln.2
    --> p1.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p3.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p4.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
    --> p6.exe
          [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年6月3日  10:00
Used time: 00:14 min

The scan has been done completely.

      0 Scanning directories
     31 Files were scanned
     30 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

最近在收集TD，这个ms一起留着了

[ 本帖最后由 曲中求 于 2008-6-3 10:02 编辑 ]

曲中求

5楼朋友上报的已更新

Begin scan in 'E:\病毒\ms.rar'
E:\病毒\ms.rar
  [0] Archive type: RAR
  --> ms.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.alln.2
      [WARNING]   The file was ignored!

啊弥陀佛

微点砍掉

冷冷

哎  没有虚拟机就是吃亏