查看: 2146|回复: 14
收起左侧

[病毒样本] 08.07 106x

[复制链接]
qianwenxiang
发表于 2008-8-7 12:39:07 | 显示全部楼层 |阅读模式
醉一生爱妍
发表于 2008-8-7 12:39:48 | 显示全部楼层
我顶你个qianwenxiang

UGuard 完成了在 C:\Documents and Settings\Administrator\桌面\106 上的扫描。
================
'SL.Trojan.Downloader.Win32.Agent.16445' 在 '209A8591' 中被检测到。
'SL.Trojan.28295' 在 '27279E10' 中被检测到。
'Binder.Generic' 在 '282E1DEE' 中被检测到。
'SL.Trojan.24783' 在 '329256C4' 中被检测到。
'Binder.Generic' 在 '33BC8C4E' 中被检测到。
'Binder.HyperDetect' 在 '344ED148' 中被检测到。
'Binder.HyperDetect' 在 '3BEEE7E2' 中被检测到。
'Binder.Generic' 在 '3DAE078A' 中被检测到。
'Binder.Generic' 在 '419B50B5' 中被检测到。
'SL.Trojan.24951' 在 '467C4B4C' 中被检测到。
'Binder.Generic' 在 '4C478021' 中被检测到。
'Binder.HyperDetect' 在 '57225CD3' 中被检测到。
'SL.Trojan.24951' 在 '573DA2B9' 中被检测到。
'Binder.HyperDetect' 在 '58474B0D' 中被检测到。
'Binder.HyperDetect' 在 '593B3CB6' 中被检测到。
'Packed.Generic.UPack' 在 '59B44784' 中被检测到。
'Binder.Generic' 在 '5AE770C6' 中被检测到。
'Binder.HyperDetect' 在 '5E9167D3' 中被检测到。
'Binder.Generic' 在 '6485FE26' 中被检测到。
'Binder.Generic' 在 '68D8FA65' 中被检测到。
'Adware.Cinmus.Gen' 在 '6C0B5BA8' 中被检测到。
'SL.Trojan.Win32.Agent.18169' 在 '6CEFEB88' 中被检测到。
'Binder.HyperDetect' 在 '719B668D' 中被检测到。
'Binder.HyperDetect' 在 '720DEBC0' 中被检测到。
'SL.Trojan.Win32.Agent.lop.588' 在 '73139BE2' 中被检测到。
'Binder.HyperDetect' 在 '7A4B28B8' 中被检测到。
'Binder.Generic' 在 '7F0FAF7A' 中被检测到。
'Binder.HyperDetect' 在 '7F297136' 中被检测到。
'Binder.HyperDetect' 在 '80343865' 中被检测到。
'SL.Trojan.24951' 在 '8086D19B' 中被检测到。
'Binder.Generic' 在 '8202FD08' 中被检测到。
'SL.Trojan.Win32.Agent.kib.6289' 在 '8207C807' 中被检测到。
'Binder.Generic' 在 '846AB849' 中被检测到。
'Binder.Generic' 在 '8A1D2C30' 中被检测到。
'iGene.Possible.Cinmus' 在 '92559B33' 中被检测到。
'Binder.HyperDetect' 在 '95DB15A7' 中被检测到。
'Binder.HyperDetect' 在 '98504793' 中被检测到。
'Binder.Generic' 在 '9B26BC43' 中被检测到。
'SL.Trojan.26902' 在 'A13CA3CF' 中被检测到。
'Binder.HyperDetect' 在 'A55473E7' 中被检测到。
'Binder.HyperDetect' 在 'A75D3AD5' 中被检测到。
'Binder.Generic' 在 'AFB2C823' 中被检测到。
'Binder.HyperDetect' 在 'B86A1CD' 中被检测到。
'Binder.Generic' 在 'BDEA99FD' 中被检测到。
'Binder.HyperDetect' 在 'BE07681C' 中被检测到。
'Binder.HyperDetect' 在 'BE963AB1' 中被检测到。
'Binder.HyperDetect' 在 'BFE0BD4B' 中被检测到。
'Appends.Trojan.OnLineGames.Config' 在 'C4D77871' 中被检测到。
'Binder.Generic' 在 'CD3CA07C' 中被检测到。
'Binder.HyperDetect' 在 'D01C04E5' 中被检测到。
'Binder.HyperDetect' 在 'D3C06D2A' 中被检测到。
'Binder.Generic' 在 'D4C7F584' 中被检测到。
'SL.Trojan.23513' 在 'D89B78E3' 中被检测到。
'Binder.Generic' 在 'DEEDF4E4' 中被检测到。
'Binder.Generic' 在 'E2CAFDFF' 中被检测到。
'Binder.HyperDetect' 在 'E5E96873' 中被检测到。
'Binder.Generic' 在 'EB208C6C' 中被检测到。
'SL.Trojan.24951' 在 'ED557B40' 中被检测到。
'SL.Trojan.25350' 在 'F0ABD8D6' 中被检测到。
'Binder.Generic' 在 'F5B7062F' 中被检测到。
'SL.Trojan.24951' 在 'F8EC6D02' 中被检测到。
'SL.Trojan.32387' 在 'FA9238D3' 中被检测到。
'Binder.Generic' 在 'FE95DA08' 中被检测到。
'Binder.Generic' 在 '10939A34' 中被检测到。
'Binder.HyperDetect' 在 '14CDEB78' 中被检测到。
'Binder.Generic' 在 '194CAFF9' 中被检测到。
'Binder.Generic' 在 '1A2F6327' 中被检测到。
'SL.Trojan.2867' 在 '1A76C1E9' 中被检测到。
'Binder.HyperDetect' 在 '1FF6CF4' 中被检测到。
================
扫描文件数: 107
本次扫描发现了 68 个已知威胁,1 个未知威胁,请及时处理。
实际文件数: 106
扫描时间: 0-00-00 00:00:13:0172
威胁比率: 65.09%

[ 本帖最后由 spicalhook 于 2008-8-7 12:42 编辑 ]
sbbdms
发表于 2008-8-7 12:40:03 | 显示全部楼层
卡巴杀90漏16
TO KL

[ 本帖最后由 sbbdms 于 2008-8-7 12:42 编辑 ]
电影结束了
发表于 2008-8-7 12:40:52 | 显示全部楼层
wangjay1980
发表于 2008-8-7 12:47:50 | 显示全部楼层
余11个
无尽藏海
发表于 2008-8-7 13:39:28 | 显示全部楼层
Scan Log
Version of virus signature database: 3334 (20080807)
Date: 2008-8-7  Time: 13:37:44
Scanned disks, folders and files: F:\VIRUS\106
F:\VIRUS\106\253E9FFE - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\27279E10 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\282E1DEE - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\30C5CE4B - a variant of Win32/Adware.Virtumonde.NAO application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\329256C4 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\33BC8C4E - probably a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\344ED148 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\3BEEE7E2 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\3D0D8977 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\3DAE078A - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\419B50B5 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\456097AB - probably a variant of Win32/PSW.OnLineGames.NXL trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\467C4B4C - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\4C478021 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\4DEB7638 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\507CE89C - probably a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\57225CD3 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\573DA2B9 - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\58474B0D - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\593B3CB6 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\59B44784 - a variant of Win32/PSW.Legendmir.NFY trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\59CFCAE6 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\5AE770C6 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\5E53BB67 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\5E9167D3 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\6443DCE4 - Win32/Adware.Virtumonde application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\6485FE26 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\667DC6C9 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\68D8FA65 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\68F2675A - a variant of Win32/PSW.OnLineGames.NXN trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\6C0B5BA8 - probably a variant of Win32/Adware.Cinmus application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\6CEFEB88 - probably a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\700DD16E - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\707D7C50 - a variant of Win32/Rootkit.Agent.NGD trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\720DEBC0 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\73139BE2 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\7A4B28B8 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\7F0FAF7A - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\7F297136 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\80343865 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8086D19B - a variant of Win32/PSW.OnLineGames.NXL trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8190F7B6 - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8202FD08 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8207C807 - Win32/TrojanDropper.Agent.NJV trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\84171523 - Win32/PSW.OnLineGames.NMY trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\845E229C - a variant of Win32/Adware.Virtumonde.NAO application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\846AB849 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\863C02E - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8A1D2C30 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\8A65DDBE - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\901BD8B1 - probably a variant of Win32/Rootkit.Agent.NBQ trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\9276F243 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\95DB15A7 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\98504793 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\9B21E32F - Win32/PSW.OnLineGames.NXR trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\9B26BC43 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\A04D7648 - Win32/Adware.Virtumonde application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\A13CA3CF - Win32/TrojanDropper.Agent.NJV trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\A25163C1 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\A55473E7 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\A5AF82E6 - a variant of Win32/Adware.Virtumonde.NAO application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\AFB2C823 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\B86A1CD - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\BDEA99FD - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\BE07681C - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\BE963AB1 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\BFE0BD4B - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\C2D73670 - Win32/PSW.OnLineGames.NMY trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\C5F731E9 - a variant of Win32/Adware.Virtumonde.NAO application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\C7223778 - Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\CD3CA07C - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\D01C04E5 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\D3C06D2A - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\D4C7F584 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\D7C17E52 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\DEEDF4E4 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\E2CAFDFF - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\E5E96873 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\EB208C6C - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\ED557B40 - probably a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\F0ABD8D6 - probably unknown NewHeur_PE virus [7] - deleted - quarantined
F:\VIRUS\106\F5B7062F - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\FA9238D3 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\FB823B36 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\FE95DA08 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\FFB78612 - a variant of Win32/Adware.Virtumonde.NAV application - cleaned by deleting - quarantined [1]
F:\VIRUS\106\10939A34 - a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\14CDEB78 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\194CAFF9 - probably a variant of Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\1A2F6327 - Win32/PSW.OnLineGames.NOA trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\1A76C1E9 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\1C5DF588 - probably a variant of Win32/PSW.OnLineGames.NXN trojan - cleaned by deleting - quarantined [1]
F:\VIRUS\106\1FF6CF4 - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 106
Number of threats found: 93
Number of cleaned objects: 93
Time of completion: 13:38:17  Total scanning time: 33 sec (00:00:33)

Notes:
[1] Object has been deleted as it only contained the virus body.
[7] Object is probably infected with an unknown virus.
Kitman
发表于 2008-8-7 14:03:57 | 显示全部楼层
The scan has been done completely.

      1 Scanning directories
    106 Files were scanned
    101 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
    102 files were deleted
      0 files were repaired
    102 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
    102 Notes
冷冷
发表于 2008-8-7 14:19:03 | 显示全部楼层
ik  低迷


sbbdms
发表于 2008-8-7 14:21:08 | 显示全部楼层
Hello.
New malicious software was found in the attached file.
It's detection will be included in the next update. Thank you for your help.

Please quote all when answering. Do not forget to include you registration data.
-----------------
Regards, Tatarinov Ivan
Virus Analyst, Kaspersky Lab.

Ph.: +7(095) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com   http://www.viruslist.com


> Attachment: 106.rar
Palkia
发表于 2008-8-7 14:28:59 | 显示全部楼层
信息        2008-08-07  14:27:58        您此次查毒隔离了66个文件                       
信息        2008-08-07  14:27:58        您此次查毒清除了20个病毒                       
信息        2008-08-07  14:27:58        您此次查毒共查出86个病毒以及危险代码                       
信息        2008-08-07  14:27:58        您此次查毒共查了内存模块0个,磁盘引导扇区0个,文件174个                       
信息        2008-08-07  14:27:58        金山毒霸主程序查毒过程结束,查毒方式:命令行查毒
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-14 07:05 , Processed in 0.120585 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表