List

显示全部楼层 · 发表于 2008-8-7 22:45:18

地址:http://e5b2c.swhmzq.com/721/?n=08072601&id=00cd1a5f0000000000000000&t=as&i=0

[URL] 0=http://cdn.e5c6a4.com/upkk.exe 1=http://cdn.e5c6a4.com/up01.exe 2=http://cdn.e5c6a4.com/up01B.exe 3=http://cdn.e5c6a4.com/up02.exe 4=http://cdn.e5c6a4.com/up02B.exe 5=http://cdn.e5c6a4.com/up03B.exe 6=http://cdn.e5c6a4.com/up04B.exe 7=http://cdn.e5c6a4.com/up05.exe 8=http://cdn.e5c6a4.com/up06.exe 9=http://cdn.e5c6a4.com/up07.exe 10=http://cdn.e5c6a4.com/up08.exe 11=http://cdn.e5c6a4.com/up10.exe 12=http://cdn.e5c6a4.com/up11.exe 13=http://cdn.e5c6a4.com/up12.exe 14=http://cdn.e5c6a4.com/up13.exe 15=http://cdn.e5c6a4.com/up14.exe 16=http://cdn.e5c6a4.com/up15.exe 17=http://cdn.e5c6a4.com/up16.exe 18=http://cdn.e5c6a4.com/up17.exe 19=http://cdn.e5c6a4.com/up18.exe 20=http://cdn.e5c6a4.com/up19.exe 21=http://cdn.e5c6a4.com/up20.exe 22=http://cdn.e5c6a4.com/up21.exe 23=http://cdn.e5c6a4.com/up22.exe 24=http://cdn.e5c6a4.com/up23.exe 25=http://cdn.e5c6a4.com/up24.exe 26=http://cdn.e5c6a4.com/up25.exe 27=http://cdn.e5c6a4.com/up26.exe 28=http://cdn.e5c6a4.com/up27.exe 29=http://cdn.e5c6a4.com/up28.exe 30=http://cdn.e5c6a4.com/up29.exe 31=http://cdn.e5c6a4.com/tzt.exe

帮忙打包!

显示全部楼层 · 发表于 2008-8-7 22:46:40

那个up09.exe楼主漏了，但我顺便打下来了

一共33个

[ 本帖最后由 sbbdms 于 2008-8-7 22:50 编辑 ]

显示全部楼层 · 发表于 2008-8-7 22:51:36

卡巴杀29漏4

已删除：木马程序 Trojan.Win32.Agent.xwm 文件　: D:\软件\其它\v\k\new\1\33.rar/upkk.exe//NSPack
已删除：木马程序 Trojan-Downloader.Win32.Agent.wps 文件　: D:\软件\其它\v\k\new\1\33.rar/tzt.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.xqr 文件　: D:\软件\其它\v\k\new\1\33.rar/up01.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snpn 文件　: D:\软件\其它\v\k\new\1\33.rar/up01B.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snyb 文件　: D:\软件\其它\v\k\new\1\33.rar/up03B.exe//PE_Patch//UPack
已删除：木马程序 Trojan-Downloader.Win32.Zlob.sab 文件　: D:\软件\其它\v\k\new\1\33.rar/up05.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smjn 文件　: D:\软件\其它\v\k\new\1\33.rar/up06.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snvj 文件　: D:\软件\其它\v\k\new\1\33.rar/up07.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sogj 文件　: D:\软件\其它\v\k\new\1\33.rar/up08.exe//PE_Patch//UPack//#
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slcw 文件　: D:\软件\其它\v\k\new\1\33.rar/up09.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shig 文件　: D:\软件\其它\v\k\new\1\33.rar/up10.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.soir 文件　: D:\软件\其它\v\k\new\1\33.rar/up11.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snvl 文件　: D:\软件\其它\v\k\new\1\33.rar/up12.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sost 文件　: D:\软件\其它\v\k\new\1\33.rar/up13.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snpv 文件　: D:\软件\其它\v\k\new\1\33.rar/up14.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.slae 文件　: D:\软件\其它\v\k\new\1\33.rar/up15.exe
已删除：木马程序 Trojan-PSW.Win32.Agent.nr 文件　: D:\软件\其它\v\k\new\1\33.rar/up16.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.soqt 文件　: D:\软件\其它\v\k\new\1\33.rar/up17.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Agent.sav 文件　: D:\软件\其它\v\k\new\1\33.rar/up18.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sohq 文件　: D:\软件\其它\v\k\new\1\33.rar/up19.exe//#
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snpw 文件　: D:\软件\其它\v\k\new\1\33.rar/up20.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snvl 文件　: D:\软件\其它\v\k\new\1\33.rar/up21.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.soit 文件　: D:\软件\其它\v\k\new\1\33.rar/up22.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.shhw 文件　: D:\软件\其它\v\k\new\1\33.rar/up23.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sotf 文件　: D:\软件\其它\v\k\new\1\33.rar/up25.exe
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.smnv 文件　: D:\软件\其它\v\k\new\1\33.rar/up26.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.snrl 文件　: D:\软件\其它\v\k\new\1\33.rar/up27.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.sjcq 文件　: D:\软件\其它\v\k\new\1\33.rar/up28.exe//PE_Patch//UPack
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.soit 文件　: D:\软件\其它\v\k\new\1\33.rar/up29.exe//PE_Patch//UPack

TO KL

显示全部楼层 · 发表于 2008-8-7 22:52:32

Scan Log
Version of virus signature database: 3336 (20080807)
Date: 2008-8-7 Time: 22:52:42
Scanned disks, folders and files: G:\v\33
G:\v\33\tzt.exe - a variant of Win32/TrojanDownloader.Agent.OBQ trojan - cleaned by deleting - quarantined [1]
G:\v\33\up01.exe - is OK
G:\v\33\up01B.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up02.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up02B.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up03B.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up04B.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up05.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\33\up06.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up07.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up08.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up09.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up10.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up11.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up12.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up13.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up14.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up15.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up16.exe - Win32/TrojanDownloader.Agent.OBF trojan - cleaned by deleting - quarantined [1]
G:\v\33\up17.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up18.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up19.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up20.exe - is OK
G:\v\33\up21.exe - a variant of Win32/PSW.OnLineGames.NQM trojan - cleaned by deleting - quarantined [1]
G:\v\33\up22.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up23.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up24.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up25.exe - a variant of Win32/PSW.OnLineGames.NXI trojan - cleaned by deleting - quarantined [1]
G:\v\33\up26.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\up27.exe - a variant of Win32/PSW.QQPass.NCZ trojan - cleaned by deleting - quarantined [1]
G:\v\33\up28.exe - a variant of Win32/PSW.Agent.NHQ trojan - cleaned by deleting - quarantined [1]
G:\v\33\up29.exe - probably a variant of Win32/PSW.OnLineGames.NML trojan - cleaned by deleting - quarantined [1]
G:\v\33\upkk.exe - a variant of Win32/Agent.NOS trojan - cleaned by deleting - quarantined [1]
Number of scanned objects: 33
Number of threats found: 31
Number of cleaned objects: 31
Time of completion: 22:52:49 Total scanning time: 7 sec (00:00:07)

Notes:
[1] Object has been deleted as it only contained the virus body.

显示全部楼层 · 发表于 2008-8-7 22:54:22

NIS2008

扫描统计:
扫描时间: 10秒
扫描选项:
扫描目标: F:\VIRUS\33.rar
计数:
扫描的项目总数: 34
- 文件和目录: 34
- 注册表项: 0
- 进程和启动项: 0
- 网络和浏览器项目: 0
- 其他: 0

检测到的安全风险总数: 33
已解决的项目总数: 0
需要注意的项目总数: 33

显示全部楼层 · 发表于 2008-8-7 22:54:38

Begin scan in 'C:\Users\TOSHIBA\Downloads\33'
C:\Users\TOSHIBA\Downloads\33\tzt.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Dldr.Small.xxg Trojan
      --> Object
      [DETECTION] Is the TR/Dldr.Small.xxh.1 Trojan
[DETECTION] This file has been compressed using unusual runtime compression (PCK/UPACK). Please verify the origin of this file.
[NOTE]    A backup was created as '490f0cdd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up01.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Contains recognition pattern of the RKIT/OnLineGames.D root kit
[NOTE]    A backup was created as '48cb0cd3.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up01B.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a436bb4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up02.exe
[DETECTION] Is the TR/Onlinegames.ANOE Trojan
[NOTE]    A backup was created as '48cb0cd4.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up02B.exe
   [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
[NOTE]    A backup was created as '4a436bb5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up03B.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cb0cd6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up04B.exe
   [DETECTION] Is the TR/PSW.Online.bin Trojan
[NOTE]    A backup was created as '4a436bb7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up05.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cb0cd8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up06.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a436bb9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up07.exe
[DETECTION] Is the TR/Onlinegames.ANOC Trojan
[NOTE]    A backup was created as '4a52333d.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up08.exe
[DETECTION] Is the TR/Onlinegames.ANOC Trojan
[NOTE]    A backup was created as '48cb0cda.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up09.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cb0cd5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up10.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Agent.dhi.13 Trojan
[NOTE]    A backup was created as '48cc0cd5.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up11.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Agent.dpw.2 Trojan
[NOTE]    A backup was created as '4a446bb6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up12.exe
[DETECTION] Is the TR/Onlinegames.ANOD Trojan
[NOTE]    A backup was created as '48cc0cd7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up13.exe
[DETECTION] Is the TR/Onlinegames.ANOD Trojan
[NOTE]    A backup was created as '4a446bb8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up14.exe
[DETECTION] Is the TR/Onlinegames.ANOD Trojan
[NOTE]    A backup was created as '48cc0cd9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up15.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a446bba.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up16.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cc0cd6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up17.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a446bb7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up18.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Gendal.28672.8 Trojan
[NOTE]    A backup was created as '48cc0cd8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up19.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a446bb9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up20.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cd0cd6.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up21.exe
[DETECTION] Is the TR/Onlinegames.ANOD Trojan
[NOTE]    A backup was created as '4a5cbc0f.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up22.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a456bb7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up23.exe
   [DETECTION] Is the TR/PSW.Online.aklp Trojan
[NOTE]    A backup was created as '48cd0cd7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up24.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a456bb8.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up25.exe
   [DETECTION] Is the TR/PSW.OnLineGa.aqp Trojan
[NOTE]    A backup was created as '48cd0cd9.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up26.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a456bba.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up27.exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '48cd0cdb.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up28.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '4a456bbc.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\up29.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    A backup was created as '48cd0cdd.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
C:\Users\TOSHIBA\Downloads\33\upkk.exe
[DETECTION] Is the TR/Agent.jyc Trojan
[NOTE]    A backup was created as '49060cd7.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!

End of the scan: 2008年8月7日  22:53
Used time: 00:07 Minute(s)

The scan has been done completely.

   1 Scanning directories
   33 Files were scanned
   35 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   33 files were deleted
   0 files were repaired
   33 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -2 Files not concerned
   0 Archives were scanned
   0 Warnings
   33 Notes

显示全部楼层 · 发表于 2008-8-7 22:56:12

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.Win32.Undef.khn
病毒： Trojan.DL.Win32.Game.a
病毒： Trojan.PSW.Win32.Mapdimp.n
病毒： Trojan.PSW.Win32.Mapdimp.o
病毒： Trojan.PSW.Win32.GameOL.pcy
病毒： Trojan.DL.Win32.Undef.adp
病毒： Trojan.PSW.Win32.GameOL.paq
病毒： Trojan.Win32.Undef.kgr
病毒： Trojan.PSW.Win32.GameOL.owf
病毒： Trojan.PSW.Win32.GameOL.oum
病毒： Trojan.Win32.Undef.kfg
病毒： Trojan.Win32.Undef.kfm
病毒： Trojan.PSW.Win32.GameOL.oek
病毒： Trojan.Win32.Undef.keu
病毒： Trojan.PSW.Win32.GameOL.ott
病毒： Trojan.PSW.Win32.GameOL.pal
病毒： Worm.Win32.PaBug.ih
病毒： Trojan.PSW.Win32.LMir.bsi

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.56.32

显示全部楼层 · 发表于 2008-8-7 22:58:17

也有这样的地址见识了

显示全部楼层 · 发表于 2008-8-7 23:05:34

原帖由冷冷于 2008-8-7 22:58 发表
也有这样的地址见识了

TFE上这样的地址有很多。。~

显示全部楼层 · 发表于 2008-8-7 23:22:43

信息 2008-08-07  23:21:39 您此次查毒清除了31个病毒
信息 2008-08-07  23:21:39 您此次查毒共查出31个病毒以及危险代码
信息 2008-08-07  23:21:39 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件66个
信息 2008-08-07  23:21:39 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒

[病毒样本] List

评分

回复 2楼 sbbdms 的帖子

80/24