[病毒样本] 35

显示全部楼层 · 发表于 2008-7-7 21:01:43

主体:
http://bbs.kafan.cn/viewthread.php?tid=283494

已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasu 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw10.exe//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw11.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw12.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.saep 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw13.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw14.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sazg 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw15.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw16.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sbwa 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw18.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sbwa 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw2.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.rxvq 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw20.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasp 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw21.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasp 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw22.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sbbb 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw23.exe
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.saep 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw24.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.rxvq 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw25.exe//PE_Patch//UPack
已刪除: 病毒 Worm.Win32.Downloader.qf 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw26.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.thz 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw27.exe
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sajy 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw28.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sajy 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw29.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.saep 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw3.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasq 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw30.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasu 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw31.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sata 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw32.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasr 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw33.exe//UPack
已刪除: 特洛伊木馬程式 Trojan-PSW.Win32.QQPass.cdw 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw34.exe//UPX
已刪除: 特洛伊木馬程式 Backdoor.Win32.Popwin.brm 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw35.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sasp 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw4.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw5.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sazg 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw6.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan.Win32.Agent.sav 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw7.exe//PE_Patch.UPX//UPX
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sazg 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw8.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sbwa 檔案: C:\Documents and Settings\kato9096\桌面\5581144\qqw9.exe//PE_Patch//UPack
已刪除: 特洛伊木馬程式 Trojan-GameThief.Win32.OnLineGames.sbwa 檔案: C:\Documents and Settings\kato9096\桌面\5581144\wqq1.exe//PE_Patch//UPack

33,不报的已上报到卡巴

[5]
20080629 http://hello.hierxw.com/down/wqq1.exe
20080629 http://hello.hierxw.com/down/qqw2.exe
20080629 http://hello.hierxw.com/down/qqw3.exe
20080629 http://hello.hierxw.com/down/qqw4.exe
20080629 http://hello.hierxw.com/down/qqw5.exe
20080629 http://hello.hierxw.com/down/qqw6.exe
20080629 http://hello.hierxw.com/down/qqw7.exe
20080629 http://hello.hierxw.com/down/qqw8.exe
20080629 http://hello.hierxw.com/down/qqw9.exe
20080629 http://hello.hierxw.com/down/qqw10.exe
20080629 http://haha.ziyuan6.com/down/qqw11.exe
20080629 http://haha.ziyuan6.com/down/qqw12.exe
20080629 http://haha.ziyuan6.com/down/qqw13.exe
20080629 http://haha.ziyuan6.com/down/qqw14.exe
20080629 http://haha.ziyuan6.com/down/qqw15.exe
20080629 http://haha.ziyuan6.com/down/qqw16.exe
20080629 http://haha.ziyuan6.com/down/qqw17.exe
20080629 http://haha.ziyuan6.com/down/qqw18.exe
20080629 http://haha.ziyuan6.com/down/qqw19.exe
20080629 http://haha.ziyuan6.com/down/qqw20.exe
20080629 http://news.ziyuan6.com/down/qqw21.exe
20080629 http://news.ziyuan6.com/down/qqw22.exe
20080629 http://news.ziyuan6.com/down/qqw23.exe
20080629 http://news.ziyuan6.com/down/qqw24.exe
20080629 http://news.ziyuan6.com/down/qqw25.exe
20080629 http://news.ziyuan6.com/down/qqw26.exe
20080629 http://news.ziyuan6.com/down/qqw27.exe
20080629 http://news.ziyuan6.com/down/qqw28.exe
20080629 http://news.ziyuan6.com/down/qqw29.exe
20080629 http://news.ziyuan6.com/down/qqw30.exe
20080629 http://news.ziyuan6.com/down/qqw31.exe
20080629 http://news.ziyuan6.com/down/qqw32.exe
20080629 http://news.ziyuan6.com/down/qqw33.exe
20080629 http://news.ziyuan6.com/down/qqw34.exe
20080629 http://news.ziyuan6.com/down/qqw35.exe

[ 本帖最后由 kato9096 于 2008-7-7 21:09 编辑 ]

显示全部楼层 · 发表于 2008-7-7 21:07:00

毒霸清空了

显示全部楼层 · 发表于 2008-7-7 21:07:49

kv 34个
avast 33个

[ 本帖最后由 dadingdading 于 2008-7-7 21:10 编辑 ]

显示全部楼层 · 发表于 2008-7-7 21:11:52

蜘蛛SOPHOS全灭

显示全部楼层 · 发表于 2008-7-7 21:54:09

avast终止下载~~~~~样本没进入电脑

显示全部楼层 · 发表于 2008-7-7 22:09:46

Begin scan in 'C:\Documents and Settings\Administrator\桌面\5581144'
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw10.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48e923f8.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw11.exe3
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '496cfed9.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw12.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '48e923fa.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw13.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496cfedb.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw14.exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnL.BJ.24576
   [NOTE]    A backup was created as '48e923fc.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw15.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496cfedd.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw16.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '48e923fe.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw17.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496cfedf.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw18.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e923f9.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw19.exe2
   [DETECTION] Is the Trojan horse TR/PSW.OnL.BJ.24576
   [NOTE]    A backup was created as '496cfeda.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw2.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e923fb.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw20.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496cfedc.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw21.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e923fd.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw22.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '4c02a633.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw23.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '4c02a635.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw24.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '4c02a637.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw25.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496c50a4.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw26.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '496c50a6.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw27.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48e923ff.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw28.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496c5758.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw29.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496c50a5.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw3.exe3
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496c50a7.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw30.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48e923f0.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw31.exe3
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '496c50a9.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw32.exe3
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '48e923f2.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw33.exe2
   [DETECTION] Is the Trojan horse TR/Spy.Gen
   [NOTE]    A backup was created as '496c50ab.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw34.exe2
   [DETECTION] Is the Trojan horse TR/ATRAPS.Gen
   [NOTE]    A backup was created as '48e923f4.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw35.exe2
   [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Popwin.brm Backdoor server programs
   [NOTE]    A backup was created as '496c50ad.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw4.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e923f6.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw5.exe2
--> Object
   [1] Archive type: RSRC
   --> Object
      [DETECTION] Is the Trojan horse TR/Agent.shf.9
   [NOTE]    A backup was created as '496c50af.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw6.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e923e8.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw7.exe2
   [DETECTION] Is the Trojan horse TR/Dropper.Gen
   [NOTE]    A backup was created as '496c50b1.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw8.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e92401.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\qqw9.exe2
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '496c575a.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\5581144\5581144\wqq1.exe3
   [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
   [NOTE]    A backup was created as '48e323fd.qua'  ( QUARANTINE )
   [NOTE]    The file was deleted!

End of the scan: 2008年7月7日  22:09
Used time: 00:08 min

The scan has been done completely.

   2 Scanning directories
   35 Files were scanned
   35 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   35 files were deleted
   0 files were repaired
   35 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   0 Archives were scanned
   0 Warnings
   35 Notes

显示全部楼层 · 发表于 2008-7-7 22:10:03

直接解压，蜘蛛全灭。

显示全部楼层 · 发表于 2008-7-7 22:33:40

扫描系统区域...
扫描所选择的目录和文件...
对象: 5581144 qqw10.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasu (KAV 引擎)
对象: 5581144 qqw11.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw12.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw13.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.saep (KAV 引擎)
对象: 5581144 qqw14.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw15.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sazg (KAV 引擎)
对象: 5581144 qqw16.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw18.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sbwa (KAV 引擎)
对象: 5581144 qqw2.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sbwa (KAV 引擎)
对象: 5581144 qqw20.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.rxvq (KAV 引擎)
对象: 5581144 qqw21.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasp (KAV 引擎)
对象: 5581144 qqw22.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasp (KAV 引擎)
对象: 5581144 qqw23.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sbbb (KAV 引擎)
对象: 5581144 qqw24.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.saep (KAV 引擎)
对象: 5581144 qqw25.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.rxvq (KAV 引擎)
对象: 5581144 qqw26.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Worm.Win32.Downloader.qf (KAV 引擎)
对象: 5581144 qqw27.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.thz (KAV 引擎)
对象: 5581144 qqw28.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sajy (KAV 引擎)
对象: 5581144 qqw29.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sajy (KAV 引擎)
对象: 5581144 qqw3.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.saep (KAV 引擎)
对象: 5581144 qqw30.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasq (KAV 引擎)
对象: 5581144 qqw31.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasu (KAV 引擎)
对象: 5581144 qqw32.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sata (KAV 引擎)
对象: 5581144 qqw33.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasr (KAV 引擎)
对象: 5581144 qqw34.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-PSW.Win32.QQPass.cdw (KAV 引擎)
对象: 5581144 qqw35.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Backdoor.Win32.Popwin.brm (KAV 引擎)
对象: 5581144 qqw4.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sasp (KAV 引擎)
对象: 5581144 qqw5.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw6.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sazg (KAV 引擎)
对象: 5581144 qqw7.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Win32.Agent.sav (KAV 引擎)
对象: 5581144 qqw8.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sazg (KAV 引擎)
对象: 5581144 qqw9.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sbwa (KAV 引擎)
对象: 5581144 wqq1.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan-GameThief.Win32.OnLineGames.sbwa (KAV 引擎)
对象: 5581144\qqw10.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 5581144\qqw11.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Generic.343855 (BD 引擎)
对象: 5581144\qqw12.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw13.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw14.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw15.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw16.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw17.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw18.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw19.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw2.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw20.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw21.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw22.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw23.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw24.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw25.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw26.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Generic.Malware.P!Pk!g.467F3B72 (BD 引擎)
对象: 5581144\qqw27.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw28.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw29.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw3.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw30.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 5581144\qqw31.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 5581144\qqw32.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 5581144\qqw33.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Dropper.RWY (BD 引擎)
对象: 5581144\qqw34.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Generic.PWStealer.8E809F07 (BD 引擎)
对象: 5581144\qqw35.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Generic.Popwin.B7E324FF (BD 引擎)
对象: 5581144\qqw4.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw5.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.ZAY (BD 引擎)
对象: 5581144\qqw6.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw7.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.Generic.343868 (BD 引擎)
对象: 5581144\qqw8.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\qqw9.exe2
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)
对象: 5581144\wqq1.exe3
在压缩档案里: F:\5581144.rar
Status: 已发现病毒
病毒: Trojan.PWS.OnlineGames.YZL (BD 引擎)

显示全部楼层 · 发表于 2008-7-7 22:34:31

您的请求来路不正确或验证字串不符，无法提交。如果您安装了某种默认屏蔽来路信息的个人防火墙软件(如 Norton Internet Security)，请设置其不要禁止来路信息后再试。

晕了...
今天我碰到了3次这个...

显示全部楼层 · 发表于 2008-7-7 23:26:12

Hello,

qqw17.exe_ - Trojan-GameThief.Win32.OnLineGames.sbzm,
qqw19.exe_ - Trojan.Win32.Agent.tme

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

[病毒样本] 35

本帖子中包含更多资源

本帖子中包含更多资源

浏览过的版块