番茄每日精选 20080610

lanvin

从今天开始  不出意外的话，每天我都会发10个左右的样本，样本都会分属于不同的病毒组别，不会出现一个变种一大堆样本的情况，而且均为可运行样本，无僵尸，敬请各位品尝。

PS：欢迎光临PC安全实验室   http://www.pcsl.info/cn/index.php

PlayWill

支持下··
KIS09

[ 本帖最后由 fanghao1234 于 2008-6-10 03:43 编辑 ]

嘁。不稀罕~

好消息！趋势2008只剩一个！

附上剩余样本截图！

[ 本帖最后由 abeyl 于 2008-6-10 03:48 编辑 ]

eav 剩下第8个

正在扫描日志
病毒库版本: 3169 (20080609)
日期: 2008-6-10  时间: 4:44:50
已扫描的磁盘、文件夹和文件: C:\Documents and Settings\sky\桌面\20080610.zip
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_01.exe - Win32/Poison 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_02.exe - Win32/TrojanDropper.ErPack 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_03.exe - 可能是 Win32/Genetik 特洛伊木马 的变种
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_04.exe - Win32/PSW.OnLineGames.NWB 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_05.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_06.exe - Win32/Poison.NAE 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_07.exe - Win32/Small.NBN 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_09.exe - Win32/Poison.NAD 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_10.exe - Win32/PSW.Agent.NHI 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_11.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_12.exe - Win32/KillAV.NBO 特洛伊木马
C:\Documents and Settings\sky\桌面\20080610.zip > ZIP > 20080610/20080610_13.exe - Win32/Poison 特洛伊木马 的变种
已扫描的对象数: 13
发现的威胁数: 12
已清除对象数:0
完成时间: 4:44:56  总扫描时间: 6 秒 (00:00:06)

备注:
[7] 对象可能感染了未知病毒。

全灭

Starting the file scan:

Begin scan in 'E:\20080610'
E:\20080610\20080610_01.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Poison.CPD Backdoor server programs
      [NOTE]      The file was deleted!
E:\20080610\20080610_02.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
E:\20080610\20080610_03.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
E:\20080610\20080610_04.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Proxy.Xorpix.FC
      [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
      [NOTE]      The file was deleted!
E:\20080610\20080610_05.exe
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
E:\20080610\20080610_06.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Poison.CPD Backdoor server programs
      [NOTE]      The file was deleted!
E:\20080610\20080610_07.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.C.2
      [NOTE]      The file was deleted!
E:\20080610\20080610_08.exe
      [DETECTION] Is the Trojan horse TR/Xispy.E.8
      [NOTE]      The file was deleted!
E:\20080610\20080610_09.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.YZD
      [NOTE]      The file was deleted!
E:\20080610\20080610_10.exe
      [DETECTION] Contains detection pattern of the worm WORM/Socks.AU.127
      [NOTE]      The file was deleted!
E:\20080610\20080610_11.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.crk
      [NOTE]      The file was deleted!
E:\20080610\20080610_12.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Backdoor.Gen Backdoor server programs
      [NOTE]      The file was deleted!
E:\20080610\20080610_13.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Poison.CPD Backdoor server programs
      [NOTE]      The file was deleted!


End of the scan: 2008年6月10日  06:30
Used time: 00:05 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
     14 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     13 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      0 Archives were scanned
      0 Warnings
     13 Notes

zjsxsycj

驱逐舰......

挪威的冬天

辛苦咯

信息        2008-06-10  08:20:04        您此次查毒清除了11个病毒                       
信息        2008-06-10  08:20:04        您此次查毒共查出11个病毒以及危险代码                       
信息        2008-06-10  08:20:04        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件17个                       
信息        2008-06-10  08:20:04        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_13.exe        Win32.Hack.Poison.pg.5844        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_12.exe        Win32.TrojDownloader.Small.36864        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_11.exe        Win32.Troj.Small.cr.7680        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_10.exe        Worm.Socks.au.57344        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_08.exe        Win32.Troj.Soul.q.45568        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_07.exe        Worm.Agent.y.17920        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_06.exe        Win32.Hack.Poison.7168        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_04.exe        Win32.Troj.OnlineGameT.ba.9796        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_03.exe        Win32.Troj.OnlineGamesT.ny.102456        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_02.exe        Win32.Hack.BaiXue.aa.33792        清除成功       
病毒        2008-06-10  08:20:04        D:\Desktop\20080610.zip\20080610\20080610_01.exe        Win32.Hack.Poison.pg.5844        清除成功

sbbdms

Kaspersky miss two
TO KL

已删除：木马程序 Backdoor.Win32.Poison.dan 文件　: D:\软件\其它\v\k\20080610.zip/20080610/20080610_01.exe
已删除：木马程序 Backdoor.Win32.Small.ebp 文件　: D:\软件\其它\v\k\20080610.zip/20080610/20080610_05.exe

[ 本帖最后由 sbbdms 于 2008-6-19 15:25 编辑 ]

凝逸反毒

[凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸反毒.扫描病毒引擎3.4-日志]       20080609_122723
----------

扫描目录:z:\999\20080610\20080610|
文件总数:13
报告 | virus [1193>20080513_ny0831.axx] | z:\999\20080610\20080610\20080610_03.exe
报告 | virus [1442>20080520_ny0836.axx] | z:\999\20080610\20080610\20080610_04.exe
报告 | virus [484>20080503_ny0829.axx] | z:\999\20080610\20080610\20080610_06.exe
报告 | virus [927>20080503_ny0829.axx] | z:\999\20080610\20080610\20080610_08.exe
报告 | virus [160>20080503_ny0829.axx] | z:\999\20080610\20080610\20080610_11.exe
报告 | virus [837>20080603_ny0841.axx] | z:\999\20080610\20080610\20080610_12.exe

凝逸反毒 杀 6个

欠妳緈諨

AVK全灭
Virus check with AntiVirusKit
Version 17.0.6282
Virus signatures of 09.06.2008
Start time: 10.06.2008 08:42
Engine(s): Engine A (AVK 18.4069), Engine B (AVKB 18.299)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 20080610_01.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Win32:Poison-DE [Trj] (Engine B)
Object: 20080610_02.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Backdoor.Win32.Delf.ais (Engine A)
Object: 20080610_03.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.adtk (Engine A)
Object: 20080610_04.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Trojan-PSW.Win32.OnLineGames.aiqt (Engine A)
Object: 20080610_05.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Win32:Trojan-gen {Other} (Engine B)
Object: 20080610_06.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Backdoor.Win32.Poison.ats (Engine A)
Object: 20080610_07.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Worm.Win32.Agent.y (Engine A)
Object: 20080610_08.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Trojan.Win32.Soul.q (Engine A)
Object: 20080610_09.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Backdoor.Win32.Poison.pg (Engine A)
Object: 20080610_10.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Worm.Win32.Socks.au (Engine A)
Object: 20080610_11.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Small.crk (Engine A)
Object: 20080610_12.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Trojan-Downloader.Win32.Small.vsf (Engine A)
Object: 20080610_13.exe
        Path: D:\virus\20080610
        Status: Virus detected
        Virus: Backdoor.Win32.Poison.cpb (Engine A)
Analysis complete: 10.06.2008 08:42
    13 files checked
    13 infected files detected
    0 suspected files detected