查看: 1485|回复: 6
收起左侧

[病毒样本] 0727 49x

[复制链接]
qianwenxiang
发表于 2008-7-27 10:39:48 | 显示全部楼层 |阅读模式
昨天晚上开始抓zhelatin的。。就抓到这么些。。

其中15x由电影兄提供

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
电影结束了
发表于 2008-7-27 10:40:53 | 显示全部楼层



今天泽拉丁大叔显灵...
有些灭了的地址有用了...~
给你凑50

[ 本帖最后由 电影结束了 于 2008-7-27 10:45 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
zjsxsycj
发表于 2008-7-27 10:49:59 | 显示全部楼层
驱逐舰..............

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
hj5abc
发表于 2008-7-27 10:52:14 | 显示全部楼层
WORM/Zhelatin.zk X 49 + TR/Crypt.ULPM.Gen X 1 = 50
woai_jolin
发表于 2008-7-27 10:53:44 | 显示全部楼层
2008-7-27 10:53:25        Real-time file system protection        file        G:\v\ba].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:25        Real-time file system protection        file        G:\v\b[2].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:25        Real-time file system protection        file        G:\v\b45646516116[1].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:24        Real-time file system protection        file        G:\v\].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:24        Real-time file system protection        file        G:\v\[1].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:24        Real-time file system protection        file        G:\v\564562].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:24        Real-time file system protection        file        G:\v\56416[1].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:24        Real-time file system protection        file        G:\v\5615646162].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:23        Real-time file system protection        file        G:\v\464[2].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:23        Real-time file system protection        file        G:\v\1].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:23        Real-time file system protection        file        G:\v\12456416].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:23        Real-time file system protection        file        G:\v\12.exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\23004290904.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\22493890649.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\22383459896.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\22273033083.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\22162663748.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:22        Real-time file system protection        file        G:\v\22105441899.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:21        Real-time file system protection        file        G:\v\21595066947.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:21        Real-time file system protection        file        G:\v\21541824437.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:21        Real-time file system protection        file        G:\v\21484785065.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:21        Real-time file system protection        file        G:\v\21374344534.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:21        Real-time file system protection        file        G:\v\21153430004.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:20        Real-time file system protection        file        G:\v\21043077064.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:20        Real-time file system protection        file        G:\v\20585893178.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:20        Real-time file system protection        file        G:\v\20532778063.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:20        Real-time file system protection        file        G:\v\20422387440.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:20        Real-time file system protection        file        G:\v\20365126996.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:19        Real-time file system protection        file        G:\v\20311966942.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:19        Real-time file system protection        file        G:\v\20201622689.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:19        Real-time file system protection        file        G:\v\20091221087.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:19        Real-time file system protection        file        G:\v\2221584480.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:19        Real-time file system protection        file        G:\v\2205223559.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:18        Real-time file system protection        file        G:\v\2126372592.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:18        Real-time file system protection        file        G:\v\2121065637.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:18        Real-time file system protection        file        G:\v\2025485425.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:18        Real-time file system protection        file        G:\v\58996-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:18        Real-time file system protection        file        G:\v\55844-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:17        Real-time file system protection        file        G:\v\46639-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:17        Real-time file system protection        file        G:\v\33710-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:17        Real-time file system protection        file        G:\v\32484-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:17        Real-time file system protection        file        G:\v\31409-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:16        Real-time file system protection        file        G:\v\19230-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:16        Real-time file system protection        file        G:\v\17047-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:16        Real-time file system protection        file        G:\v\11831-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:16        Real-time file system protection        file        G:\v\10161-Backup.EXE        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:16        Real-time file system protection        file        G:\v\back[2].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:15        Real-time file system protection        file        G:\v\back[1].exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
2008-7-27 10:53:15        Real-time file system protection        file        G:\v\back.exe        a variant of Win32/Nuwar.DF worm        cleaned by deleting - quarantined        NT AUTHORITY\SYSTEM        Event occurred on a new file created by the application: C:\Program Files\WinRAR\WinRAR.exe.
woai_jolin
发表于 2008-7-27 10:54:34 | 显示全部楼层
Scan Log
Version of virus signature database: 3300 (20080725)
Date: 2008-7-27  Time: 10:54:30
Scanned disks, folders and files: G:\v\zgame.zip
G:\v\zgame.zip » ZIP » zgame.exe - Win32/TrojanDownloader.Small.IAW trojan
G:\v\zgame.zip:Zone.Identifier - is OK
Number of scanned objects: 2
Number of threats found: 1
Number of cleaned objects: 0
Time of completion: 10:54:30  Total scanning time: 0 sec (00:00:00)
醉一生爱妍
发表于 2008-7-27 12:10:20 | 显示全部楼层
小A 伟大的通灭
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-8 05:21 , Processed in 0.130698 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表