木马群

显示全部楼层 · 发表于 2008-6-7 17:46:58

kv杀28

显示全部楼层 · 发表于 2008-6-7 18:22:08

E:\virus\木马群.rar > RAR > p4.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p5.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p6.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\木马群.rar > RAR > p7.exe - 正常
E:\virus\木马群.rar > RAR > p8.exe - 正常
E:\virus\木马群.rar > RAR > p9.exe - 正常
E:\virus\木马群.rar > RAR > p12.exe - 正常
E:\virus\木马群.rar > RAR > p13.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\木马群.rar > RAR > p14.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p15.exe - 正常
E:\virus\木马群.rar > RAR > p29.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p16.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p17.exe - 正常
E:\virus\木马群.rar > RAR > p18.exe - Win32/PSW.OnLineGames.OAF 特洛伊木马
E:\virus\木马群.rar > RAR > p19.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p20.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p21.exe - 正常
E:\virus\木马群.rar > RAR > p30.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p22.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p23.exe - 正常
E:\virus\木马群.rar > RAR > p24.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p25.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p26.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p27.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p28.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p1.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p10.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p11.exe - 可能是 Win32/Genetik 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p2.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar > RAR > p3.exe - 可能是 Win32/PSW.OnLineGames.NML 特洛伊木马的变种
E:\virus\木马群.rar:Zone.Identifier - 正常

显示全部楼层 · 发表于 2008-6-7 19:44:44

p8把360干掉了

显示全部楼层 · 发表于 2008-6-7 19:46:16

看来这个群今天刚更新。。。
昨天卡巴MISS的不是这两个

显示全部楼层 · 发表于 2008-6-7 20:01:19

[Scanning : C:\Documents and Settings\All Users\Documents\Test]

C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p5.exe <- Trojan.Psw.Onlinegames.Alzp : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p6.exe <- Trojan.Psw.Onlinegames.Ajoo : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p6.exe<UPack>:p6.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Aemz : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p13.exe <- Trojan.Psw.Onlinegames.Ajoi : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p13.exe<UPack>:p13.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Ahvx : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p14.exe <- Trojan.Psw.Onlinegames.Alqk : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p18.exe <- Trojan.Psw.Onlinegames.Ajod : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p18.exe<UPack>:p18.exe<DLLRES>:MAIN0.exe <- Trojan.Psw.Onlinegames.Affc : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p24.exe <- Trojan.Psw.Onlinegames.Amqs : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p25.exe <- Trojan.Psw.Onlinegames.Ajrc : No action
C:\Documents and Settings\All Users\Documents\Test\木马群.rar<RAR>:p26.exe <- Trojan.Psw.Onlinegames.Amrj : No action

Scanned objects : 80

Infected objects : 11

显示全部楼层 · 发表于 2008-6-7 20:02:57

[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p4.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p5.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p6.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p7.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p8.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p9.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p12.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p13.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p14.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p15.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p29.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p16.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p17.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p18.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p19.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p20.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p21.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p30.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p22.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p23.exe
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p24.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p25.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p26.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p27.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p28.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p1.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p10.exe->(UPack)
[Found security risk] <W32/Agent.L.gen!Eldorado (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p11.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p2.exe->(UPack)
[Found security risk] <W32/Nilage.gen!GSA (not disinfectable, generic)> C:\Documents and Settings\All Users\Documents\Test\木马群.rar->p3.exe->(UPack)

---------------------------------------------------------------------
Scan ended: 2008-6-7, 20:02:00
Duration: 0:00:30

Scan result:

Scanned files:    6
Infected objects:    30
Disinfected objects:    0
Quarantined files:    0
---------------------------------------------------------------------

全歼

显示全部楼层 · 发表于 2008-6-7 21:36:06

卡巴未杀的两个查不出，还是给微点拦了，除了那两个，其它的还没下就杀了

显示全部楼层 · 发表于 2008-6-7 23:22:46

哈....我下载了.
番公司..要测试病毒.

显示全部楼层 · 发表于 2008-6-7 23:24:28

扫描开始于2008年6月7日 23:24:57
G:\v\新建文件夹\p1.exe,查到病毒: W32/OnLineGames.AMAL!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p10.exe,查到病毒: W32/OnLineGames.AMAL!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p11.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p12.exe,查到病毒: W32/OnLineGames.ALIX!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p13.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p14.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p15.exe,查到病毒: W32/Nilage.CSM!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p16.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p17.exe,查到病毒: W32/Inject.CNE!tr, 操作: 删除/隔离
G:\v\新建文件夹\p18.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p19.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p2.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p20.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p21.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p22.exe,查到病毒: W32/OnLineGames.AMAL!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p23.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p24.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p25.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p26.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p27.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p28.exe,查到病毒: Spy/Dorf, 操作: 删除/隔离
G:\v\新建文件夹\p29.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p3.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p30.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p4.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p5.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p6.exe,查到病毒: W32/OnlineGames!tr, 操作: 删除/隔离
G:\v\新建文件夹\p7.exe,查到病毒: W32/Dropper.CRS!tr.pws, 操作: 删除/隔离
G:\v\新建文件夹\p8.exe,查到病毒: Suspicious, 操作: <无>
G:\v\新建文件夹\p9.exe,查到病毒: Suspicious, 操作: <无>
扫描结束于2008年6月7日 23:25:03
总共扫描了30个文件, 其中感染病毒文件为30个. 总共扫描了9个引导区, 感染的引导区为0个.

[病毒样本] 木马群

22

ArcaVir2008

F-Prot 4.4.4

浏览过的版块