[病毒样本] 36

显示全部楼层 · 发表于 2008-7-10 20:04:23

海外用戶
中国用戶

pw=infected

36
http://lva.lvorgucci.net/may1.exe
http://lva.lvorgucci.net/may2.exe
http://lva.lvorgucci.net/may3.exe
http://lva.lvorgucci.net/may4.exe
http://lva.lvorgucci.net/may5.exe
http://lva.lvorgucci.net/may6.exe
http://lva.lvorgucci.net/may7.exe
http://lvb.lvorgucci.net/may8.exe
http://lvb.lvorgucci.net/may9.exe
http://lvb.lvorgucci.net/may10.exe
http://lvb.lvorgucci.net/may11.exe
http://lvb.lvorgucci.net/may12.exe
http://lvb.lvorgucci.net/may13.exe
http://lvb.lvorgucci.net/may14.exe
http://lvc.lvorgucci.net/may15.exe
http://lvc.lvorgucci.net/may16.exe
http://lvc.lvorgucci.net/may17.exe
http://lvc.lvorgucci.net/may18.exe
http://lvc.lvorgucci.net/may19.exe
http://lvc.lvorgucci.net/may20.exe
http://lvc.lvorgucci.net/may21.exe
http://lvc.lvorgucci.net/may22.exe
http://lvd.lvorgucci.net/may23.exe
http://lvd.lvorgucci.net/may24.exe
http://lvd.lvorgucci.net/may25.exe
http://lvd.lvorgucci.net/may26.exe
http://lvd.lvorgucci.net/may27.exe
http://lvd.lvorgucci.net/may28.exe
http://lvd.lvorgucci.net/may29.exe
http://lvd.lvorgucci.net/may30.exe
http://lvd.lvorgucci.net/may31.exe
http://lvd.lvorgucci.net/may32.exe
http://lvd.lvorgucci.net/may33.exe
http://lvd.lvorgucci.net/may34.exe
http://lvd.lvorgucci.net/may35.exe

deleted: Trojan program Trojan.Win32.Agent.nbj       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may0.exe5
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.scuc       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may1.exe5//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Agent.sav       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may10.exe5//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-PSW.Win32.Agent.amb       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may11.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Agent.amb       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may12.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sbwa       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may13.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sazg       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may14.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rzgy       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may16.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sbwa       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may17.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may18.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sczf       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may19.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.scuc       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may2.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sajy       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may20.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may21.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxqt       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may22.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may23.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sczf       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may24.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may25.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sazg       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may26.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sazg       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may27.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.scuc       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may28.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.arun       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may29.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxvq       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may3.exe5//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Agent.sav       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may30.exe5//PE_Patch.UPX//UPX
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.rxvq       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may31.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Agent.amb       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may32.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may33.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may34.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sdkn       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may35.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.Agent.amb       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may4.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sbwa       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may5.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.saep       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may6.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.sasp       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may7.exe5//PE_Patch//UPack
deleted: Trojan program Trojan-GameThief.Win32.OnLineGames.scuc       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may8.exe5//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Delf.dek       File: C:\Documents and Settings\kato9096\®à±\8141541212411231231\may9.exe5//PE_Patch.UPX//UPX

卡巴报35个,已上报1个

[ 本帖最后由 kato9096 于 2008-7-10 20:15 编辑 ]

显示全部楼层 · 发表于 2008-7-10 20:06:36

信息 2008-07-10  03:21:04 您此次查毒清除了34个病毒
信息 2008-07-10  03:21:04 您此次查毒共查出34个病毒以及危险代码
信息 2008-07-10  03:21:04 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件71个
信息 2008-07-10  03:21:04 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

[ 本帖最后由 garyyan456 于 2008-7-10 20:11 编辑 ]

显示全部楼层 · 发表于 2008-7-10 20:10:50

下FS的那个...上面一个我们这里下载不到的...饿...

显示全部楼层 · 发表于 2008-7-10 20:12:11

猜一个...
来源于BAK.CSS....
饿...
我记得ESET区有人还中了这个毒....

显示全部楼层 · 发表于 2008-7-10 20:15:13

最近我也在找bak.css

当然了。。偶不要那种穿还原的

显示全部楼层 · 发表于 2008-7-10 20:16:51

原帖由 garyyan456 于 2008-7-10 20:15 发表
最近我也在找bak.css

当然了。。偶不要那种穿还原的

有点绝迹咯...

要么全是老的....

显示全部楼层 · 发表于 2008-7-10 20:19:17

100分，恭喜MAY15

2008-7-10 JAY20:16:47 may15.exe  Process exit C:\Documents and Settings\Owner\桌面\8141541212411231231\may15.exe
2008-7-10 JAY20:16:47 may15.exe Denied: KLPrivileges/KLSelfStart Autorun
2008-7-10 JAY20:16:47 may15.exe  Process start C:\Documents and Settings\Owner\桌面\8141541212411231231\may15.exe
2008-7-10 JAY20:16:47 may15.exe : Heur.Trojan.Generic Placed in group Untrusted
2008-7-10 JAY20:16:36 Windows Explorer  Rename C:\Documents and Settings\Owner\桌面\8141541212411231231\may15.exe
2008-7-10 JAY20:16:36 Windows Explorer  Create C:\Documents and Settings\Owner\桌面\8141541212411231231\may15.exe

显示全部楼层 · 发表于 2008-7-10 20:24:18

这是卡巴???

[ 本帖最后由 kato9096 于 2008-7-10 20:28 编辑 ]

显示全部楼层 · 发表于 2008-7-10 20:30:26

卡巴2009

显示全部楼层 · 发表于 2008-7-10 20:34:58

什么功能來的

[病毒样本] 36

回复 4楼电影结束了的帖子

回复 7楼 wangjay1980 的帖子

[病毒样本] 36

回复 4楼 电影结束了 的帖子

回复 7楼 wangjay1980 的帖子

回复 4楼电影结束了的帖子