一大包机器狗

Sherry.ai

N种变种

[ 本帖最后由 935623508 于 2008-10-24 12:56 编辑 ]

Sherry.ai

。。。怎么上传啊

fzz8848

http://bbs.kafan.cn/thread-263971-1-1.html
看置顶帖

xi889

2008/10/24 13:03:10        Deleted: Trojan-GameThief.Win32.OnLineGames.pik        F:\Files\最新机器狗变种病毒样本\explorer.exe               
2008/10/24 13:03:10        Deleted: Trojan-Downloader.Win32.Delf.hpg        F:\Files\20083818242086\病毒样本\.exe               
2008/10/24 13:03:10        Deleted: Trojan-Downloader.Win32.Delf.epw        F:\Files\20083818242086\病毒样本\a.exe               
2008/10/24 13:03:10        Deleted: Trojan-GameThief.Win32.OnLineGames.sbg        F:\Files\20083818242086\病毒样本\atisrv.exe               
2008/10/24 13:03:10        Deleted: Trojan-GameThief.Win32.OnLineGames.stw        F:\Files\20083818242086\病毒样本\display3d.exe               
2008/10/24 13:03:10        Deleted: Trojan-Downloader.Win32.Delf.epw        F:\Files\20083818242086\病毒样本\fpt.exe               
2008/10/24 13:03:10        Deleted: Trojan-Downloader.Win32.Small.wwu        F:\Files\200852612022749\explorer.exe               
2008/10/24 13:03:10        Deleted: Trojan-Downloader.Win32.Agent.tyc        F:\Files\机器狗5代变种\orz.exe               
2008/10/24 13:03:12        Deleted: Worm.Win32.Downloader.au        F:\Files\winhlp32\200712411126823\userinit.exe               
2008/10/24 13:03:12        Deleted: Trojan-Downloader.Win32.Agent.rlr        F:\Files\winhlp32\winhlp32.exe
TO KL

[ 本帖最后由 xi889 于 2008-10-24 13:03 编辑 ]

Sherry.ai

发上去了

fzz8848

Begin scan in 'E:\Download\Virus\winhlp32.rar'
E:\Download\Virus\winhlp32.rar
    [0] Archive type: RAR
    --> winhlp32\200712411126823\userinit.exe
      [DETECTION] Contains recognition pattern of the WORM/Downloader.AU.19 worm
    --> winhlp32\winhlp32.exe
      [DETECTION] Is the TR/Dldr.Agent.rlr.6 Trojan
    [NOTE]      The file was deleted!
Begin scan in 'E:\Download\Virus\机器狗5代变种.rar'
E:\Download\Virus\机器狗5代变种.rar
    [0] Archive type: RAR
发表帖子    --> ﾻￆ?ﾹﾷ5ﾴﾱ￤ￖￖ\orz.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
Begin scan in 'E:\Download\Virus\最新机器狗变种病毒样本.rar'
E:\Download\Virus\最新机器狗变种病毒样本.rar
    [0] Archive type: RAR
[完成后可按 Ctrl+En    --> ￗ￮￐ￂﾻￆ?ﾹﾷﾱ￤ￖￖﾲﾡﾶﾾ￑ﾱﾾ\explorer.exe
      [DETECTION] Is the TR/Dldr.Agent.YM Trojan
    [NOTE]      The file was deleted!
Begin scan in 'E:\Download\Virus\20083818242086.rar'
E:\Download\Virus\20083818242086.rar
    [0] Archive type: RAR
    --> 20083818242086\ﾲﾡﾶﾾ￑ﾱﾾ\.exe
      [DETECTION] Is the TR/Agent.18744.A Trojan
      --> 20083818242086\ﾲﾡﾶﾾ￑ﾱﾾ\a.exe
        --> Object
          [2] Archive type: RSRC
          --> Object
            [DETECTION] Is the TR/Dldr.Delf.epw.1 Trojan
      --> 20083818242086\ﾲﾡﾶﾾ￑ﾱﾾ\AtiSrv.exe
          [DETECTION] Is the TR/PSW.OnlineGam.SEA Trojan
      --> 20083818242086\ﾲﾡﾶﾾ￑ﾱﾾ\Display3D.exe
          [DETECTION] Is the TR/PSW.OnlineGam.SEA Trojan
      --> 20083818242086\ﾲﾡﾶﾾ￑ﾱﾾ\fpt.exe
          [DETECTION] Is the TR/Dldr.Delphi.Gen Trojan
    [NOTE]      The file was deleted!
E:\Download\Virus\200852612022749.rar
    [0] Archive type: RAR
    --> 200852612022749\explorer.exe
      [DETECTION] Is the TR/Dldr.Small.wwu.3 Trojan
    [NOTE]      The file was deleted!

[ 本帖最后由 fzz8848 于 2008-10-24 18:06 编辑 ]

hzyw

2008-10-24 13:25:26        http://bbs.kafan.cn/attachment.p ... &t=1224825764//最新机器狗变种病毒样本/explorer.exe        Firefox        拒绝: Trojan-GameThief.Win32.OnLineGames.pik               
2008-10-24 13:25:26        http://bbs.kafan.cn/attachment.p ... &t=1224825764//最新机器狗变种病毒样本/explorer.exe        Firefox        已检测到: Trojan-GameThief.Win32.OnLineGames.pik

Trojan-Downloader:W32/Agent.FWK (病毒) 
C:\Documents and Settings\s\桌面\20083818242086.rar\20083818242086\病毒样本\.exe 
C:\Documents and Settings\s\桌面\20083818242086.rar\20083818242086\病毒样本\a.exe 
Trojan-GameThief.Win32.OnLineGames.sbg (病毒) 
C:\Documents and Settings\s\桌面\20083818242086.rar\20083818242086\病毒样本\AtiSrv.exe 
Trojan-GameThief.Win32.OnLineGames.stw (病毒) 
C:\Documents and Settings\s\桌面\20083818242086.rar\20083818242086\病毒样本\Display3D.exe 
Trojan-Downloader.Win32.Delf.epw (病毒) 
C:\Documents and Settings\s\桌面\20083818242086.rar\20083818242086\病毒样本\fpt.exe 
Trojan-Downloader.Win32.Small.wwu (病毒) 
C:\Documents and Settings\s\桌面\200852612022749.rar\200852612022749\explorer.exe 
Worm.Win32.Downloader.au (病毒) 
C:\Documents and Settings\s\桌面\winhlp32.rar\winhlp32\200712411126823\userinit.exe 
Trojan-Downloader.Win32.Agent.rlr (病毒) 
C:\Documents and Settings\s\桌面\winhlp32.rar\winhlp32\winhlp32.exe 
Trojan-Downloader.Win32.Agent.tyc (病毒) 
C:\Documents and Settings\s\桌面\5.rar\机器狗5代变种\orz.exe 
Trojan-GameThief.Win32.OnLineGames.pik (病毒) 
C:\Documents and Settings\s\桌面\最新机器狗变种病毒样本.rar\最新机器狗变种病毒样本\explorer.exe 

剩下一个没扫出来的就是个加密的压缩包   ，解压出来的东西砍了


定义版本:
病毒: 2008-10-24_01 
间谍软件: 2008-10-24_01 
扫描引擎: 
F-Secure AVP: 7.00.171, 2008-10-23 
F-Secure Hydra: 2.08.8110, 2008-10-24 

kkgh

瑞星09     10个