收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › List
返回列表 发新帖
查看: 1659|回复: 8
收起左侧

[病毒样本] List

[复制链接]
qigang
发表于 2008-8-2 21:34:48 | 显示全部楼层 |阅读模式
地址：http://www.guccia.net/prada.txt
回复

举报

woai_jolin
发表于 2008-8-2 21:36:14 | 显示全部楼层
Scan Log
Version of virus signature database: 3318 (20080801)
Date: 2008-8-2  Time: 21:35:59
Scanned disks, folders and files: G:\v\virus.rar
G:\v\virus.rar » RAR » laco11.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco10.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco1.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco12.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco13.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco14.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco15.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco16.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco17.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco18.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco19.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco2.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco20.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco21.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco22.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco23.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco24.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco25.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco27.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco28.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco29.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco3.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco30.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco31.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco32.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco33.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco34.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco35.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco4.exe - a variant of Win32/PSW.OnLineGames.NXI trojan
G:\v\virus.rar » RAR » laco5.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco6.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco7.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan
G:\v\virus.rar » RAR » laco8.exe - probably unknown NewHeur_PE virus [7]
G:\v\virus.rar » RAR » laco9.exe - is OK
G:\v\virus.rar:Zone.Identifier - is OK
Number of scanned objects: 36
Number of threats found: 34
Number of cleaned objects: 0
Time of completion: 21:36:04  Total scanning time: 5 sec (00:00:05)

Notes:
[7] Object is probably infected with an unknown virus.
回复

举报

dadingdading
发表于 2008-8-2 21:37:12 | 显示全部楼层
好多的病毒   kv  33个
回复

举报

csliss
发表于 2008-8-2 21:40:49 | 显示全部楼层
卡巴清空
回复

举报

小邪邪
发表于 2008-8-2 21:41:02 | 显示全部楼层

样本质量不太好，连mcafee都能全灭

回复

举报

尤金卡巴斯基
发表于 2008-8-2 21:42:30 | 显示全部楼层
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzi        文件　: G:\Temp\Virus\virus.rar/laco11.exe
已删除：木马程序 Trojan.Win32.Agent.sav        文件　: G:\Temp\Virus\virus.rar/laco10.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn        文件　: G:\Temp\Virus\virus.rar/laco1.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smlr        文件　: G:\Temp\Virus\virus.rar/laco12.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv        文件　: G:\Temp\Virus\virus.rar/laco13.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw        文件　: G:\Temp\Virus\virus.rar/laco14.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv        文件　: G:\Temp\Virus\virus.rar/laco15.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn        文件　: G:\Temp\Virus\virus.rar/laco16.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn        文件　: G:\Temp\Virus\virus.rar/laco17.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl        文件　: G:\Temp\Virus\virus.rar/laco18.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn        文件　: G:\Temp\Virus\virus.rar/laco19.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.xez        文件　: G:\Temp\Virus\virus.rar/laco2.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv        文件　: G:\Temp\Virus\virus.rar/laco20.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smys        文件　: G:\Temp\Virus\virus.rar/laco21.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv        文件　: G:\Temp\Virus\virus.rar/laco22.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.siyn        文件　: G:\Temp\Virus\virus.rar/laco23.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn        文件　: G:\Temp\Virus\virus.rar/laco24.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn        文件　: G:\Temp\Virus\virus.rar/laco25.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sazg        文件　: G:\Temp\Virus\virus.rar/laco26.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sjxn        文件　: G:\Temp\Virus\virus.rar/laco28.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv        文件　: G:\Temp\Virus\virus.rar/laco29.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl        文件　: G:\Temp\Virus\virus.rar/laco3.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw        文件　: G:\Temp\Virus\virus.rar/laco30.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw        文件　: G:\Temp\Virus\virus.rar/laco31.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slmh        文件　: G:\Temp\Virus\virus.rar/laco32.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl        文件　: G:\Temp\Virus\virus.rar/laco33.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw        文件　: G:\Temp\Virus\virus.rar/laco34.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shig        文件　: G:\Temp\Virus\virus.rar/laco35.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhv        文件　: G:\Temp\Virus\virus.rar/laco4.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl        文件　: G:\Temp\Virus\virus.rar/laco5.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slzl        文件　: G:\Temp\Virus\virus.rar/laco6.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn        文件　: G:\Temp\Virus\virus.rar/laco7.exe//PE_Patch//UPack
检测到：木马程序 Trojan-Dropper.Win32.Agent.usq        文件　: G:\Temp\Virus\virus.rar/laco8.exe//PE_Patch//UPack//#//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snda        文件　: G:\Temp\Virus\virus.rar/laco9.exe//PE_Patch//UPack
回复

举报

hahacomcn
发表于 2008-8-2 22:16:22 | 显示全部楼层
Begin scan in 'C:\Documents and Settings\haha\桌面\virus.rar'
C:\Documents and Settings\haha\桌面\virus.rar
    [0] Archive type: RAR
      --> laco11.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Agent.wrq.2 Trojan
      --> laco10.exe
          [DETECTION] Is the TR/PSW.Online.aklo Trojan
    --> laco1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco12.exe
          [DETECTION] Is the TR/PSW.OnLineGa.aqq Trojan
    --> laco13.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco15.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco16.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco17.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco18.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco19.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco2.exe
          [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
    --> laco20.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco21.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/PSW.OnlineGames.ZKH.25 Trojan
      --> laco22.exe
          [DETECTION] Is the TR/Spy.Agent.dhh Trojan
    --> laco23.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco24.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco25.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco26.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco28.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco29.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco30.exe
          [DETECTION] Is the TR/PSW.Online.tdz Trojan
      --> laco31.exe
          [DETECTION] Is the TR/PSW.Online.tdy Trojan
      --> laco32.exe
          [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
    --> laco33.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco34.exe
          [DETECTION] Is the TR/PSW.Online.aklp Trojan
      --> laco35.exe
          [DETECTION] Is the TR/PSW.OnLineGa.aqp Trojan
      --> laco4.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Agent.vro.3 Trojan
    --> laco5.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco6.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> laco7.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco8.exe
          [DETECTION] Is the TR/Dropper.Gen Trojan
      --> laco9.exe
        [1] Archive type: OVL
        --> Object
          [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2008年8月2日  22:15
Used time: 00:06 Minute(s)

The scan has been done completely.

      0 Scanning directories
     36 Files were scanned
     35 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes
回复

举报

冷冷
发表于 2008-8-3 01:41:19 | 显示全部楼层
汽缸回来 了
回复

举报

twtpy93123
发表于 2008-8-3 01:55:06 | 显示全部楼层
共35个文件,KIS  kill all  Dr.Web  kill all
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-6 18:52 , Processed in 0.132280 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表