2008.10.22样本

happyboys_xp

2008年10月22日采集样本7个
如果您的杀毒软件无法查杀,请
及时上报.谢谢.
点此下载
2008.10.22.rar

aseioteur

红伞报了6个，miss一个！

yj2371

我的avast和微点都早解压后报了。不过avast报的多点。呵呵

[ 本帖最后由 yj2371 于 2008-10-22 10:52 编辑 ]

2008-10-22 10:56:50        已删除: Trojan.Win32.FraudPack.ajn        C:\Documents and Settings\Owner.LENOVO-       
2008-10-22 10:56:50        已删除: Trojan-GameThief.Win32.Magania.aeza        C:\Documents and
2008-10-22 10:56:49        已删除: Trojan-GameThief.Win32.OnLineGames.tlia        C:\Documents and        
2008-10-22 10:56:48        已删除: Trojan-Downloader.Win32.Humor.du        C:\Documents and        
2008-10-22 10:56:48        已删除: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.10.22.rar/1AA5600D.exe

kingmuro

诺顿10.1版本   21日病毒库

欠妳緈諨

使用 G DATA AntiVirus 进行病毒检测
版本 18.9.1.9
病毒特征库日期 10/21/2008
开始时间: 10/22/2008 11:33
引擎: KAV 引擎 (AVK 19.1142), AVAST 引擎 (AVB 19.71)
启发式： 开启
文件: 开启
系统区域: 关闭

检测选中目录和文件...
  S:\2008.10.22\

项目: 1AA5600D.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Packed.Win32.Krap.b (KAV 引擎), Win32:Monga [Trj] (AVAST 引擎)
项目: 1E71D43E.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Trojan-Downloader.Win32.CodecPack.bc (KAV 引擎), Win32:Trojan-gen {Other} (AVAST 引擎)
项目: 1EF453D3.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Trojan-GameThief.Win32.OnLineGames.tlia (KAV 引擎), Win32:Trojan-gen {Other} (AVAST 引擎)
项目: 2487D5FF.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Trojan-GameThief.Win32.Magania.aeza (KAV 引擎), Win32:Monga [Trj] (AVAST 引擎)
项目: 2D97759E.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Trojan.Win32.FraudPack.ajn (KAV 引擎), Win32:Trojan-gen {Other} (AVAST 引擎)
项目: 3451CC62.exe
        路径: S:\2008.10.22
        状态: 检测到病毒
        病毒: Win32:Trojan-gen {Other} (AVAST 引擎)

检测执行时间： 10/22/2008 11:33
    7 个文件被检查
    6 个感染文件被发现

icedream89

Start of the scan: 2008年10月22日  12:23

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\2008[1].10.22'
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\1AA5600D.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '493fab07.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\1E71D43E.exe
    [DETECTION] Is the TR/Dldr.CodecPack.BC Trojan
    [NOTE]      A backup was created as '4935ab0b.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\1EF453D3.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4944ab0b.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\2487D5FF.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4936aafa.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\2D97759E.exe
    [DETECTION] Is the TR/Dldr.Zlob.xaf Trojan
    [NOTE]      A backup was created as '4937ab0a.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\2008[1].10.22\3451CC62.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      A backup was created as '4933aafa.qua'  ( QUARANTINE )
    [NOTE]      The file was successfully wiped!
    [NOTE]      The file was deleted!


End of the scan: 2008年10月22日  12:23
Used time: 00:02 Minute(s)

The scan has been done completely.

      1 Scanning directories
      7 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      6 files were deleted
      0 files were repaired
      6 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      0 Warnings
      6 Notes

zdlzp

一个正常文件

hzyw

剩下2个，一个是楼上的正常文件，另一个无法在运行



[ 本帖最后由 hzyw 于 2008-10-22 13:15 编辑 ]

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\1AA5600D.exe   
MD5 Hash: 3EA65F980BE64A08F0C815FFC65AE24B   
Type: Win32 Executable Generic / Extension: .EXE   

A-squared ----- Trojan-GameThief.Win32.Magania.admu!A2    
Avast ----- Win32:Monga [Trj]    
Avg ----- PSW.OnlineGames.2.AE     
Antivir ----- TR/Crypt.XPACK.Gen    
BitDefender ----- Packer.Malware.NSAnti.1    
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
NOD32 ----- Win32/PSW.OnLineGames.NNM trojan    
Ikarus ----- Nothing   
Jiangmin ----- Packed.Krap.hz    
Kaspersky ----- Packed.Win32.Krap.b    
Kingsoft ----- Nothing   
Vba32 ----- Win32.PSW.OnLineGames.NNM    

*** 9/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\1E71D43E.exe   
MD5 Hash: DCB79553EA9CE87FA1E61CB9439CD538   
Type: Win32 Executable Generic / Extension: .EXE   

A-squared ----- Trojan-Proxy.Agent.BBZ!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- Downloader.Generic7.AWUC     
Antivir ----- TR/Dldr.CodecPack.BC    
BitDefender ----- Trojan.Proxy.Agent.BBZ    
ClamWin ----- Nothing   
Dr.Web ----- Trojan.DownLoad.4884    
NOD32 ----- Win32/TrojanDownloader.FakeAlert.IY trojan    
Ikarus ----- Trojan-Proxy.Agent.BBZ    
Jiangmin ----- TrojanDownloader.CodecPack.ak    
Kaspersky ----- Trojan-Downloader.Win32.Humor.du    
Kingsoft ----- Win32.TrojDownloader.CodecPack.bc.22532    
Vba32 ----- Malware-Cryptor.Win32.General.3    

*** 12/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\1EF453D3.exe   
MD5 Hash: B143ADF855AE6733A2FB4AC50A30F85C   
Type: DOS Executable Generic / Extension: .EXE   

A-squared ----- Trojan-Proxy.Win32.VB.t!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- PSW.Generic6.AEIV     
Antivir ----- TR/Dropper.Gen    
BitDefender ----- Trojan.PWS.Lmir.UMH    
ClamWin ----- Trojan.Spy-53859    
Dr.Web ----- Trojan.PWS.Wsgame.7488    
NOD32 ----- a variant of Win32/PSW.Agent.NIA trojan    
Ikarus ----- Trojan-Proxy.Win32.VB.t    
Jiangmin ----- Trojan/PSW.OnLineGames.Gen    
Kaspersky ----- Trojan-GameThief.Win32.OnLineGames.tlia    
Kingsoft ----- Win32.Troj.AgentT.aa.102400    
Vba32 ----- Trojan-GameThief.Win32.OnLineGames.tjry    

*** 13/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\23AC8CFD.exe   
MD5 Hash: F4434248B8A2917796832F1D2FDF0027   
Type: Win32 Executable Generic / Extension: .EXE   

A-squared ----- Trojan-Downloader.Win32.VB.aey!IK    
Avast ----- Nothing   
Avg ----- Nothing   
Antivir ----- Nothing   
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Trojan-Downloader.Win32.VB.aey    
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- Nothing   
Vba32 ----- Nothing   

*** 2/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\2487D5FF.exe   
MD5 Hash: 7AE366D4AB5B5A09309F042864424BEE   
Type: Win32 Executable Generic / Extension: .EXE   

A-squared ----- Trojan-GameThief.Win32.Magania.admu!A2    
Avast ----- Win32:Monga [Trj]    
Avg ----- PSW.OnlineGames.2.AE     
Antivir ----- TR/Crypt.XPACK.Gen    
BitDefender ----- Packer.Malware.NSAnti.1    
ClamWin ----- Trojan.Magania-7061    
Dr.Web ----- Trojan.Nsanti.Packed    
NOD32 ----- Win32/PSW.OnLineGames.NNM trojan    
Ikarus ----- Nothing   
Jiangmin ----- Trojan/PSW.Magania.cno    
Kaspersky ----- Trojan-GameThief.Win32.Magania.aeza    
Kingsoft ----- Nothing   
Vba32 ----- Trojan-GameThief.Win32.Magania.aeza    

*** 11/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\2D97759E.exe   
MD5 Hash: 6BFAA515B2EF1088D9974909B8073ABD   
Type: UPX compressed Win32 Executable / Extension: .EXE   

A-squared ----- Trojan-Downloader.Win32.Renos.Y!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- SHeur.CNAF     
Antivir ----- TR/Dldr.Zlob.xaf    
BitDefender ----- Trojan.FakeAlert.AIT    
ClamWin ----- Trojan.Agent-57235    
Dr.Web ----- Trojan.DownLoad.5783    
NOD32 ----- Win32/TrojanDownloader.FakeAlert.LA trojan    
Ikarus ----- Trojan-Downloader.Win32.Renos.Y    
Jiangmin ----- Trojan/FraudPack.ha    
Kaspersky ----- Trojan.Win32.FraudPack.ajn    
Kingsoft ----- Win32.Troj.FraudPack.163844    
Vba32 ----- Win32.TrojanDownloader.FakeAlert.LA    

*** 13/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\3451CC62.exe   
MD5 Hash: CA5EAEECB8A72E33997FB3F22C26FC7B   
Type: Win32 Executable Generic / Extension: .EXE   

A-squared ----- Trojan.Crypt.XPACK!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- Nothing   
Antivir ----- TR/Crypt.XPACK.Gen    
BitDefender ----- Nothing   
ClamWin ----- Broken.Executable    
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Trojan.Crypt.XPACK    
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- Nothing   
Vba32 ----- Nothing   

*** 5/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   

Task done @ 2008/10/22 三 13:25:18.30