冷冷这个大漏勺从今天list挖出的downlist

显示全部楼层 · 发表于 2008-8-1 22:49:06

2008.8.1
KIS8.0中文正式版

显示全部楼层 · 发表于 2008-8-1 22:53:22

这些我怎么会漏掉

显示全部楼层 · 发表于 2008-8-2 00:33:16

2008-8-2 0:31:39 1217608299 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo10.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:39 1217608299 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo11.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:39 1217608299 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo12.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:39 1217608299 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo13.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo14.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo15.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo16.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo17.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo18.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo19.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo2.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo20.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo21.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo22.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-AALW [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo23.exe" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo24.exe" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-AALW [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo25.exe" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo3.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo4.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo5.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo6.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:Agent-ZRP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo7.exe\[UPX]\[Embedded#4060]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo8.exe\[Upack]\[Embedded#4080]" file.
2008-8-2 0:31:40 1217608300 Nerazzurri 3416 Sign of "Win32:OnLineGames-DQP [Trj]" has been found in "C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar\aoo9.exe\[Upack]\[Embedded#4080]" file.

显示全部楼层 · 发表于 2008-8-2 00:33:51

Begin scan in 'C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar'
C:\Documents and Settings\Nerazzurri\桌面\新建文件夹.rar
[0] Archive type: RAR
--> aoo1.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo10.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo11.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> aoo12.exe
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/Agent.28672.104 Trojan
--> aoo13.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo14.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> aoo15.exe
      [DETECTION] Is the TR/Spy.Agent.dhh Trojan
--> aoo16.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo17.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo18.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo19.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo2.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo20.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> aoo21.exe
      [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
--> aoo23.exe
   [DETECTION] Is the TR/Agent.nbj Trojan
--> aoo24.exe
   [DETECTION] Is the TR/Dldr.Agent.vgu.2 Trojan
--> aoo25.exe
   [DETECTION] Is the TR/Agent.NBJ.1 Trojan
--> aoo3.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo4.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo5.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> aoo6.exe
      [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
   --> aoo7.exe
      [DETECTION] Is the TR/PSW.Online.bin Trojan
--> aoo8.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
--> aoo9.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-2 02:48:21

已删除：木马程序 Trojan-PSW.Win32.OnLineGames.ahro 文件　: G:\Temp\Virus\新建文件夹.rar/aoo1.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo10.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo11.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.sav 文件　: G:\Temp\Virus\新建文件夹.rar/aoo12.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv 文件　: G:\Temp\Virus\新建文件夹.rar/aoo13.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo14.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv 文件　: G:\Temp\Virus\新建文件夹.rar/aoo15.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo16.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo17.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn 文件　: G:\Temp\Virus\新建文件夹.rar/aoo18.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo19.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn 文件　: G:\Temp\Virus\新建文件夹.rar/aoo2.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn 文件　: G:\Temp\Virus\新建文件夹.rar/aoo20.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slma 文件　: G:\Temp\Virus\新建文件夹.rar/aoo21.exe
已删除：木马程序 Trojan.Win32.Agent.wom 文件　: G:\Temp\Virus\新建文件夹.rar/aoo22.exe
已删除：木马程序 Trojan.Win32.Agent.nbj 文件　: G:\Temp\Virus\新建文件夹.rar/aoo23.exe
已删除：木马程序 Trojan-Downloader.Win32.Agent.vgu 文件　: G:\Temp\Virus\新建文件夹.rar/aoo24.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.nbj 文件　: G:\Temp\Virus\新建文件夹.rar/aoo25.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo3.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo4.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv 文件　: G:\Temp\Virus\新建文件夹.rar/aoo5.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.udd 文件　: G:\Temp\Virus\新建文件夹.rar/aoo6.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smhz 文件　: G:\Temp\Virus\新建文件夹.rar/aoo7.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl 文件　: G:\Temp\Virus\新建文件夹.rar/aoo8.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn 文件　: G:\Temp\Virus\新建文件夹.rar/aoo9.exe//PE_Patch//UPack

显示全部楼层 · 发表于 2008-8-2 10:16:07

质量不好
Symantec全灭

显示全部楼层 · 发表于 2008-8-2 11:29:52

原帖由 gankeyu 于 2008-8-1 18:56 发表
我来打包

解压出26个文件,全部干掉了

显示全部楼层 · 发表于 2008-8-2 22:55:40

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： RootKit.Win32.Undef.jc
病毒： Trojan.PSW.Win32.GameOL.oek
病毒： Trojan.PSW.Win32.GameOL.ott
病毒： Trojan.PSW.Win32.GameOL.owf
病毒： Trojan.PSW.Win32.GameOL.ovi
病毒： Trojan.Win32.Undef.gzb
病毒： Trojan.DL.Win32.Undef.afr
病毒： Trojan.PSW.Win32.GameOL.osq
病毒： Trojan.PSW.Win32.GameOL.ozn

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

[病毒样本] 冷冷这个大漏勺从今天list挖出的downlist

本帖子中包含更多资源

25

25

53/11

[病毒样本] 冷冷这个大漏勺 从今天list挖出的downlist

本帖子中包含更多资源

25

25

53/11

[病毒样本] 冷冷这个大漏勺从今天list挖出的downlist