查看: 5443|回复: 14
收起左侧

[病毒样本] 22

[复制链接]
sam.to
发表于 2008-9-18 21:07:07 | 显示全部楼层 |阅读模式
bb4a177ddd4540f0c0b0a9c781e9a8dd  0.exe3
91d213f0735a7b32488e658b3f86cd41  Autorun.inf3
4ef4367221228b4bf12a778b5d42452d  hfpthe.dll3
3281a3b3c7139671c3ad3d52251062df  liba.exe3
14de929cb5b90c45238d56e0bd672f28  mizoe.exe3
b684712829f981c630376ef04bf6b462  NewestPicture0012.JPEG-www.imageshack.com3
e0fd78097437e865401b8642190cfbea  Regedit.reg3
c7ddb0e2b624b2aac5cc1cf00d6621f0  RISING.exe3
f6672b481dfcf38b8655bac6429f68d6  runwin.exe3
b29f5cf262010a7b1d300deb81e33a05  sleep.exe3
0fc268ae0bf879e9e1df6e1224e4492d  SOLA.BAT3
762a1f8f4b954b707ae06dd4d1ca2993  stat[1].htm3
83ba7e22bf529858a345f483d7e94c16  svchost.e3xe
7b7f7ff59fff594c1a792da1b1938405  Tasks.xxx
dbf7f8dfef4eb7c2992b91d0b29192ef  vs.asp3
2f92ca0d5053fce2dd6f62804bd1fcf7  vv1dap32.dll3
e7d4b97adc34fedba484adae8c68838f  vv1dap32.exe3
060866ce12261828360efbae0d98c124  vv1dap32.ini3
2f92ca0d5053fce2dd6f62804bd1fcf7  vv1dap32.ocx3
b11dda9d4bb8bb2292d7721d4199ce09  vv1dap32.zip3
ee89510bffaf6478032161fa0bbbc7e4  Win32ExLoader.e3xe
45e3aa9dbe16219c79b056493f54b823  WinRAR.exe3


已刪除: 病毒 Worm.Win32.Fujack.ci        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\0.exe3//UPX
已刪除: 病毒 Worm.Win32.AutoRun.dja        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\Autorun.inf3
已刪除: 特洛伊木馬程式 Backdoor.Win32.PcClient.lhp        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\hfpthe.dll3
已刪除: 病毒 Worm.Win32.AutoRun.nmt        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\NewestPicture0012.JPEG-www.imageshack.com3
已刪除: 特洛伊木馬程式 Trojan.Win32.Disabler.i        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\RISING.exe3
已刪除: 病毒 Virus.BAT.Agent.ac        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\SOLA.BAT3
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.abqm        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\vv1dap32.dll3
已刪除: 特洛伊木馬程式 Trojan-Dropper.Win32.Agent.vlo        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\vv1dap32.exe3
已刪除: 特洛伊木馬程式 Trojan-Downloader.Win32.Agent.abqm        檔案: C:\Documents and Settings\kato9096\桌面\cccccc\liba\vv1dap32.ocx3

卡巴报9,上报13!!

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Kitman
发表于 2008-9-18 21:11:04 | 显示全部楼层
Begin scan in 'C:\Users\TOSHIBA\Downloads\liba'
C:\Users\TOSHIBA\Downloads\liba\0.exe3
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      A backup was created as '4937537f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\hfpthe.dll3
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
    [NOTE]      A backup was created as '494253b7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\liba.exe3
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      A backup was created as '493453ba.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\NewestPicture0012.JPEG-www.imageshack.com3
    [DETECTION] Contains recognition pattern of the WORM/Autorun.nmt worm
    [NOTE]      A backup was created as '494953b6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\RISING.exe3
    [DETECTION] Is the TR/Disabler.I.13 Trojan
    [NOTE]      A backup was created as '4925539a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\SOLA.BAT3
    [DETECTION] Contains recognition pattern of the BAT/Sola.A batch virus
    [NOTE]      A backup was created as '491e53a0.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\vv1dap32.exe3
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Contains recognition pattern of the RKIT/KernelBot.CH root kit
    [NOTE]      A backup was created as '490353c7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Users\TOSHIBA\Downloads\liba\Win32ExLoader.e3xe
    [DETECTION] Is the TR/Downloader.Gen Trojan
    [NOTE]      A backup was created as '494053ba.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年9月18日  21:10
Used time: 00:02 Minute(s)

The scan has been done completely.

      1 Scanning directories
     22 Files were scanned
      8 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      8 files were deleted
      0 files were repaired
      8 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     14 Files not concerned
      0 Archives were scanned
      0 Warnings
      8 Notes
无尽藏海
发表于 2008-9-18 21:12:16 | 显示全部楼层
Starting the file scan:

Begin scan in 'D:\Virus\liba'
D:\Virus\liba\0.exe3
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      The file was deleted!
D:\Virus\liba\hfpthe.dll3
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Backdoor.Gen back-door program
    [NOTE]      The file was deleted!
D:\Virus\liba\liba.exe3
    [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      The file was deleted!
D:\Virus\liba\NewestPicture0012.JPEG-www.imageshack.com3
    [DETECTION] Contains recognition pattern of the WORM/Autorun.nmt worm
    [NOTE]      The file was deleted!
D:\Virus\liba\RISING.exe3
    [DETECTION] Is the TR/Disabler.I.13 Trojan
    [NOTE]      The file was deleted!
D:\Virus\liba\vv1dap32.exe3
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Contains recognition pattern of the RKIT/KernelBot.CH root kit
    [NOTE]      The file was deleted!


End of the scan: 2008年9月18日  21:11
Used time: 00:06 Minute(s)

The scan has been done completely.

      1 Scanning directories
     22 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     16 Files not concerned
      0 Archives were scanned
      0 Warnings
      6 Notes
wangjay1980
发表于 2008-9-18 21:18:20 | 显示全部楼层
有些没问题

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
sam.to
 楼主| 发表于 2008-9-18 21:22:40 | 显示全部楼层
1 Scanning directories
     22 Files were scanned
      8 viruses and/or unwanted programs were found

1 Scanning directories
     22 Files were scanned
      6 viruses and/or unwanted programs were found


不同??
Palkia
发表于 2008-9-18 21:28:28 | 显示全部楼层
病毒        2008-09-18  21:27:51        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\vv1dap32.ocx3中        Win32.TrojDownloader.Agent.196608        处理成功(操作:删除)       
病毒        2008-09-18  21:27:51        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\vv1dap32.exe3中        Win32.Binder.Agent.vo.901120        处理成功(操作:删除)       
病毒        2008-09-18  21:27:51        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\vv1dap32.dll3中        Win32.TrojDownloader.Agent.196608        处理成功(操作:删除)       
病毒        2008-09-18  21:27:51        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\0.exe3中        Worm.vking.cb.307200        处理成功(操作:删除)       
病毒        2008-09-18  21:27:51        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\RISING.exe3中        Win32.Troj.Disabler.i.57344        处理成功(操作:删除)       
病毒        2008-09-18  21:27:50        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\hfpthe.dll3中        Win32.Hack.PcClient.al.95880        处理成功(操作:删除)       
病毒        2008-09-18  21:27:50        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\Autorun.inf3中        BAT.AutoRun.ai.512        处理成功(操作:删除)       
病毒        2008-09-18  21:27:50        病毒在文件C:\Documents and Settings\Administrator\桌面\liba\SOLA.BAT3中        JS.Agent.al.11815        处理成功(操作:删除)
kkgh
发表于 2008-9-18 21:32:52 | 显示全部楼层
费尔11个
无尽藏海
发表于 2008-9-18 22:10:50 | 显示全部楼层
3817987          Autorun.inf3          475 Byte          CLEAN
25132501          mizoe.exe3          706.5 KB          CLEAN
25137303          Regedit.reg3          135 Byte          CLEAN
1103469          runwin.exe3          38.02 KB          CLEAN
3817990          sleep.exe3          1 KB          CLEAN
3817991          SOLA.BAT3          11.54 KB          MALWARE
25137304          stat[1].htm3          1.95 KB          CLEAN
3817992          Tasks.xxx          318 Byte          CLEAN
25137305          vs.asp3          77.82 KB          CLEAN
25137307          vv1dap32.ocx3          192 KB          MALWARE
25137309          vv1dap32.ini3          7.87 KB          CLEAN
25137310          Win32ExLoader.e3xe          68 KB          MALWARE
25111022          WinRAR.exe3          459.5 KB          DAMAGED FILE (UNKNOWN)
4212752          svchost.e3xe          460 KB          KNOWN CLEAN
4470751          vv1dap32.zip3          72 KB          KNOWN CLEAN
v_ww
头像被屏蔽
发表于 2008-9-18 22:42:27 | 显示全部楼层
ess3.0报7个
kingmuro
头像被屏蔽
发表于 2008-9-18 23:49:56 | 显示全部楼层
北京江民新科技术有限公司

        扫描引擎 11.00.800
        病毒库日期 2008-09-18
        更新日期 2008-09-18

扫描目标 D:\My Documents\桌面\liba.rar

开始时间 2008-09-18 23:49:06

在 D:\My Documents\桌面\liba.rar->SOLA.BAT3 中发现 Trojan/BAT.Agent.b 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->hfpthe.dll3 中发现 Backdoor/PcClient.idg 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->NewestPicture0012.JPEG-www.imageshack.com3 中发现 TrojanDropper.Delf.csp 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->RISING.exe3 中发现 Trojan/Agent.ito 病毒, 已清除
在 D:\My Documents\桌面\liba.rar->0.exe3 中发现 Backdoor/Huigezi.rxs 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->vv1dap32.dll3 中发现 TrojanDownloader.Agent.aohy 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->vv1dap32.exe3 中发现 TrojanDropper.Agent.oss 病毒, 已删除
在 D:\My Documents\桌面\liba.rar->vv1dap32.ocx3 中发现 TrojanDownloader.Agent.aohy 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :24                                  病毒体 :8         
                   删除 :7                                     解毒 :1
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-21 12:40 , Processed in 0.080437 second(s), 1 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表