39个

promised

http://38vp.cn//cong.txt

1. sky313.cn/down10/update.exe
   
2. sky313.cn/down10/cc1.exe
   
3. sky313.cn/down10/cc2.exe
   
4. sky313.cn/down10/cc3.exe
   
5. sky313.cn/down10/cc4.exe
   
6. sky313.cn/down10/cc5.exe
   
7. sky313.cn/down10/cc6.exe
   
8. sky313.cn/down10/cc7.exe
   
9. sky313.cn/down10/cc8.exe
   
10. sky313.cn/down10/cc9.exe
    
11. sky313.cn/down10/cc10.exe
    
12. sky313.cn/down10/cc11.exe
    
13. sky313.cn/down10/cc12.exe
    
14. sky313.cn/down10/cc13.exe
    
15. sky313.cn/down10/cc14.exe
    
16. sky313.cn/down10/cc15.exe
    
17. sky313.cn/down10/cc16.exe
    
18. sky313.cn/down10/cc17.exe
    
19. sky313.cn/down10/cc18.exe
    
20. sky313.cn/down10/cc19.exe
    
21. sky313.cn/down10/cc20.exe
    
22. sky313.cn/down10/cc21.exe
    
23. sky313.cn/down10/cc22.exe
    
24. sky313.cn/down10/cc23.exe
    
25. sky313.cn/down10/cc24.exe
    
26. sky313.cn/down10/cc25.exe
    
27. sky313.cn/down10/cc26.exe
    
28. sky313.cn/down10/cc27.exe
    
29. 61.53.235.92/hyrj411402/dotnetfx/list/cc30.exe
    
30. sky313.cn/down10/a.exe
    
31. sky313.cn/down10/up.css
    
32. 
    
33. 
    

复制代码

promised

C:\ABC\样本\cc16.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\cc17.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\cc19.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\cc2.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\cc20.exe - 特征码 'Trojan-Downloader.Win32.Zlob.and' 被发现
C:\ABC\样本\cc21.exe - 特征码 'Virus.Win32.Virut.q' 被发现
C:\ABC\样本\cc23.exe - 可疑代码段 被发现 (Level: 75)
C:\ABC\样本\cc5.exe - 特征码 'Trojan-Dropper.Win32.Agent.ane' 被发现
C:\ABC\样本\cc6.exe - 特征码 'Virus.Win32.OnLineGames.DOC' 被发现
C:\ABC\样本\cc8.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.arbb' 被发现
C:\ABC\样本\cc9.exe - 特征码 'Trojan-PWS.Win32.OnLineGames.asdt' 被发现
C:\ABC\样本\cdwqfs.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\ddserh.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\fstlbsys.sys
C:\ABC\样本\fxzxbime.sys
C:\ABC\样本\fzmsbwin.sys
C:\ABC\样本\MMHADPQG1097.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\MMSADZFB1074.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\MMWLVAHB1039.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\MMWLVAHB1042.dll - 特征码 'Trojan-PWS.Win32.Small.br' 被发现
C:\ABC\样本\mtewdh.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\rfdswc.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\sgdewg.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\up.css
C:\ABC\样本\update.exe - 特征码 'Trojan-Downloader.Win32.Agent.anh' 被发现
C:\ABC\样本\vscript32.dll - 特征码 'Trojan.Crypt.AV' 被发现
C:\ABC\样本\wrqszl.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\wyhesm.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\wyrsdj.dll - 特征码 'Trojan.Win32.Tilcun.B' 被发现
C:\ABC\样本\zptlcsys.dll - 特征码 'BehavesLike.Trojan.ShellHook' 被发现
C:\ABC\样本\zxmsdwin.dll - 特征码 'Trojan-Spy.Win32.Delf.uv' 被发现
C:\ABC\样本\zyzxjime.dll - 特征码 'Virus.Win32.OnLineGames.BGD' 被发现

        39 文件被扫描
          (0 压缩档 0 文件)
        34 特征码被侦测
        1 可疑代码段被发现
        耗时: 0:00.750

欠妳緈諨

好久不见P版了

22680506

hj5abc

许久没见到lz了.

35.

aerbeisi

边缘vip

费尔36/39

欠妳緈諨

AVK
KAV+AVAST   35

KAV+BD     36

testhawk

Hello,

cc11.exe_, ddserh.dll - Trojan-GameThief.Win32.OnLineGames.rzdm,
cdwqfs.dll - Trojan-GameThief.Win32.OnLineGames.rzdn,
MMWLVAHB1042.dll - Trojan-GameThief.Win32.OnLineGames.rzdo,
wrqszl.dll - Trojan-GameThief.Win32.OnLineGames.rzdq,
wyhesm.dll - Trojan-GameThief.Win32.OnLineGames.rzdr

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

fstlbsys.sys, fxzxbime.sys, fzmsbwin.sys

No malicious code were found in these files.

Please quote all when answering.

--
Best regards, Evgeny Aseev
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[ 本帖最后由 testhawk 于 2008-6-29 16:36 编辑 ]

sam.to

deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxys        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/zyzxjime.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.asgb        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc1.exe
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.ryyv        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc2.exe//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxp        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc5.exe//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.asgd        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc6.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.arbb        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc8.exe//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.asdt        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc9.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.asfo        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc10.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.arun        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc12.exe//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxz        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc14.exe//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxj        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc15.exe//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.ryyv        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc16.exe//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxwr        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc17.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.arun        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc19.exe//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxwr        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc20.exe//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Agent.qzn        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc21.exe//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxx        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/cc23.exe//PE_Patch//UPack
deleted: Trojan program Trojan-Downloader.Win32.Small.xii        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/up.css
deleted: Trojan program Trojan.Win32.Obfuscated.ecx        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/update.exe
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.aqik        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/MMHADPQG1097.dll//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.asgd        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/MMSADZFB1074.dll//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.aqxy        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/MMWLVAHB1039.dll//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxy        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/mtewdh.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.ryne        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/rfdswc.dll
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.arun        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/sgdewg.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.asgb        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/vscript32.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.ryxl        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/wyrsdj.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxm        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/zptlcsys.dll
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxxv        File: C:\Documents and Settings\kato9096\®à­±\ý©¥».rar/zxmsdwin.dll

只有29 上报