某帖内没人帮忙打包，我打吧！

显示全部楼层 · 发表于 2008-8-23 21:12:40

地址：http://593ffcey.cn/dao.txt

[down]
1=http://121.11.253.244/wandao/1.exe
2=http://121.11.253.244/wandao/2.exe
3=http://121.11.253.244/wandao/3.exe
4=http://121.11.253.244/wandao/4.exe
5=http://121.11.253.244/wandao/5.exe
6=http://121.11.253.244/wandao/6.exe
7=http://121.11.253.244/wandao/7.exe
8=http://121.11.253.244/wandao/8.exe
9=http://121.11.253.244/wandao/9.exe
10=http://121.11.253.244/wandao/10.exe
11=http://121.11.253.244/wandao/11.exe
12=http://121.11.253.244/wandao/12.exe
13=http://121.11.253.244/wandao/13.exe
14=http://121.11.253.244/wandao/14.exe
15=http://121.11.253.244/wandao/15.exe
16=http://121.11.253.244/wandao/16.exe
17=http://121.11.253.244/wandao/17.exe
18=http://121.11.253.244/wandao/18.exe
19=http://121.11.253.244/wandao/19.exe
20=http://121.11.253.244/wandao/20.exe
21=http://121.11.253.244/wandao/12.exe
22=http://121.11.253.244/wandao/22.exe
23=http://121.11.253.244/wandao/23.exe
24=http://121.11.253.244/wandao/24.exe
25=http://121.11.253.244/wandao/25.exe
26=http://121.11.253.244/wandao/26.exe
27=http://121.11.253.244/wandao/27.exe
28=http://121.11.253.244/wandao/28.exe
29=http://121.11.253.244/wandao/29.exe
30=http://121.11.253.244/wandao/30.exe

显示全部楼层 · 发表于 2008-8-23 21:14:12

类型：木马程序 (事件: 27)
2008/8/23 21:13:48 已清除木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar
2008/8/23 21:13:48 已清除木马程序 Trojan.Win32.Agent.xqr G:\Temp\Virus\virus.rar/TDDOWNLOAD\1.exe//PE_Patch//UPack
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sozb G:\Temp\Virus\virus.rar/TDDOWNLOAD\11.exe//PE_Patch//UPack
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.suxe G:\Temp\Virus\virus.rar/TDDOWNLOAD\12.exe
2008/8/23 21:13:47 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\13.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.svwi G:\Temp\Virus\virus.rar/TDDOWNLOAD\14.exe//PE_Patch.UPX//UPX
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.bdmw G:\Temp\Virus\virus.rar/TDDOWNLOAD\15.exe//PE_Patch//UPack
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.soit G:\Temp\Virus\virus.rar/TDDOWNLOAD\16.exe//PE_Patch//UPack
2008/8/23 21:13:47 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\17.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.spxs G:\Temp\Virus\virus.rar/TDDOWNLOAD\2.exe//PE_Patch//UPack
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.spxs G:\Temp\Virus\virus.rar/TDDOWNLOAD\20.exe//PE_Patch//UPack
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\22.exe
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\23.exe
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\24.exe
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\25.exe
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\26.exe
2008/8/23 21:13:48 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\27.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.shie G:\Temp\Virus\virus.rar/TDDOWNLOAD\29.exe//PE_Patch.UPX//UPX
2008/8/23 21:13:48 已清除木马程序 Trojan.Win32.Multis.dp G:\Temp\Virus\virus.rar/TDDOWNLOAD\3.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sqda G:\Temp\Virus\virus.rar/TDDOWNLOAD\30.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.smnv G:\Temp\Virus\virus.rar/TDDOWNLOAD\4.exe//PE_Patch//UPack
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.subq G:\Temp\Virus\virus.rar/TDDOWNLOAD\5.exe//PE_Patch//UPack
2008/8/23 21:13:47 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\6.exe
2008/8/23 21:13:47 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\7.exe
2008/8/23 21:13:48 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.shig G:\Temp\Virus\virus.rar/TDDOWNLOAD\8.exe//PE_Patch.UPX//UPX
2008/8/23 21:13:47 已隔离木马程序 Heur.Trojan.Generic G:\Temp\Virus\virus.rar/TDDOWNLOAD\9.exe

显示全部楼层 · 发表于 2008-8-23 21:24:09

ess kill all

显示全部楼层 · 发表于 2008-8-23 21:26:17

McAfee 全灭。。

显示全部楼层 · 发表于 2008-8-23 21:41:23

Avira

D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\1.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Contains recognition pattern of the RKIT/OnLineGames.D root kit
      --> Object
      [DETECTION] Is the TR/PSW.OnlineGames.ZMC.1 Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\11.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\12.exe
   [DETECTION] Is the TR/PSW.Online.tdz Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\13.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\14.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\15.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\16.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\17.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\2.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\20.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\22.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\23.exe
   [DETECTION] Is the TR/Agent.xzu Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\24.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\25.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\26.exe
   [DETECTION] Is the TR/PSW.Online.aklp Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\27.exe
   [DETECTION] Is the TR/Agent.xzu Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\29.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\3.exe
   [DETECTION] Is the TR/PSW.Online.Osh.2 Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\30.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.OnlineGames.ZKH.161 Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\4.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\5.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\6.exe
   [DETECTION] Is the TR/PSW.OnL.BJ.24576 Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\7.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\8.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Agent.dhi.16 Trojan
[NOTE]    The file was deleted!
D:\22222222222222\1111111111111111\111111111111111\virus\TDDOWNLOAD\9.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-8-23 21:49:26

****************** Sophos Anti-Virus 日志记录 - 2008-8-23 13:48:41 **************

...
20080823 134647 扫描 '单击右键扫描' 已启动。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\3.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\4.exe' 中检测到病毒/间谍软件'Mal/Generic-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\1.exe' 中检测到病毒/间谍软件'Mal/Generic-A'。清除不可用。
20080823 134651 已确认文件 "D:\Program Files\virus.rar\TDDOWNLOAD\2.exe" 为可疑文件（类型 'Sus/ComPack-K'）。
请向 Sophos 寄送一份样本。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\8.exe\FILE:0000' 中检测到病毒/间谍软件'Mal/Generic-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\8.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\5.exe' 中检测到病毒/间谍软件'Mal/Dorf-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\7.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\9.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 已确认文件 "D:\Program Files\virus.rar\TDDOWNLOAD\11.exe" 为可疑文件（类型 'Sus/ComPack-K'）。
请向 Sophos 寄送一份样本。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\12.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\13.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 已确认文件 "D:\Program Files\virus.rar\TDDOWNLOAD\15.exe" 为可疑文件（类型 'Sus/ComPack-K'）。
请向 Sophos 寄送一份样本。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\14.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\17.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\16.exe' 中检测到病毒/间谍软件'Mal/Generic-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\6.exe\FILE:0000' 中检测到病毒/间谍软件'Mal/WOWPWS-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\6.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\22.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 已确认文件 "D:\Program Files\virus.rar\TDDOWNLOAD\20.exe" 为可疑文件（类型 'Sus/ComPack-K'）。
请向 Sophos 寄送一份样本。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\26.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\25.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\30.exe\FILE:0000' 中检测到病毒/间谍软件'Mal/Generic-A'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\30.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\27.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\24.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\29.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 在 'D:\Program Files\virus.rar\TDDOWNLOAD\23.exe' 中检测到病毒/间谍软件'Mal/Dropper-O'。清除不可用。
20080823 134651 感染病毒的文件"D:\Program Files\virus.rar"已删除。
...
(34 个项目)

显示全部楼层 · 发表于 2008-8-23 22:02:43

qigang是个好同志
rising miss 5

显示全部楼层 · 发表于 2008-8-23 22:09:59

释放文件安装钩子

显示全部楼层 · 发表于 2008-8-23 22:27:11

KV2009

显示全部楼层 · 发表于 2008-8-24 00:00:44

驱逐舰剩三个

[病毒样本] 某帖内没人帮忙打包，我打吧！

浏览过的版块