32个,,,,,,

显示全部楼层 · 发表于 2008-10-24 22:12:01

如果您的安全软件无法查杀,请及时上报.
谢谢.

点击下载样本

显示全部楼层 · 发表于 2008-10-24 22:18:11

楼主是剑盟的cadd斑斑吧

显示全部楼层 · 发表于 2008-10-24 22:20:53

病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\server.exe Win32.TrojDownloader.Small.49152 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\new.exe Win32.TrojDownloader.Agent.118784 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa9.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa8.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa7.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa5.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa4.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa35.exe Win32.Troj.Cinmus.rt.119296 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa3.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa25.exe Win32.Troj.OnlineGames.cd.107588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa24.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa23.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa21.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa20.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa2.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa19.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa18.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:05 C:\Documents and Settings\Administrator\桌面\31.ge\aa17.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:03 C:\Documents and Settings\Administrator\桌面\31.ge\aa16.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:19:01 C:\Documents and Settings\Administrator\桌面\31.ge\aa15.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:59 C:\Documents and Settings\Administrator\桌面\31.ge\aa14.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:57 C:\Documents and Settings\Administrator\桌面\31.ge\aa12.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:55 C:\Documents and Settings\Administrator\桌面\31.ge\aa11.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:53 C:\Documents and Settings\Administrator\桌面\31.ge\aa10.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:51 C:\Documents and Settings\Administrator\桌面\31.ge\aa1.exe Win32.Troj.OnlineGamesT.vy.90588 隔离成功
病毒 2008-10-24  22:18:49 C:\Documents and Settings\Administrator\桌面\31.ge\38938.exe Win32.Troj.Agent.ks.201206 隔离成功
病毒 2008-10-24  22:18:47 C:\Documents and Settings\Administrator\桌面\31.ge\2008100901.exe Win32.TrojDownloader.Agent.26462 隔离成功

显示全部楼层 · 发表于 2008-10-24 22:21:38

卡8 28个

2008-10-24 22:18:20 扫描已被删除: Trojan-Downloader.Win32.Agent.wps F:\病毒样本\31[1].ge\new.exe
2008-10-24 22:18:20 扫描已被删除: Trojan-Spy.Win32.Pophot.gey F:\病毒样本\31[1].ge\myself.exe
2008-10-24 22:18:19 扫描已被删除: Trojan-Dropper.Win32.Agent.yjl F:\病毒样本\31[1].ge\ko.exe
2008-10-24 22:18:18 扫描已被删除: not-a-virus:AdWare.Win32.BHO.dof F:\病毒样本\31[1].ge\ad7547.exe
2008-10-24 22:18:17 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa9.exe
2008-10-24 22:18:16 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa8.exe
2008-10-24 22:18:15 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa7.exe
2008-10-24 22:18:14 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa5.exe
2008-10-24 22:18:13 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptk F:\病毒样本\31[1].ge\aa4.exe
2008-10-24 22:18:13 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa3.exe
2008-10-24 22:18:12 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptr F:\病毒样本\31[1].ge\aa29.exe
2008-10-24 22:18:12 扫描已被删除: Trojan-GameThief.Win32.WOW.cfu F:\病毒样本\31[1].ge\aa25.exe
2008-10-24 22:18:12 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa24.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptk F:\病毒样本\31[1].ge\aa23.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa21.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa20.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptk F:\病毒样本\31[1].ge\aa2.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa18.exe
2008-10-24 22:18:11 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa17.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa16.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa14.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptk F:\病毒样本\31[1].ge\aa15.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa12.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa11.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa10.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-GameThief.Win32.OnLineGames.tptl F:\病毒样本\31[1].ge\aa1.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-Downloader.Win32.Agent.ntx F:\病毒样本\31[1].ge\2008100901.exe
2008-10-24 22:18:10 扫描已被删除: Trojan-Dropper.Win32.Mudrop.lj F:\病毒样本\31[1].ge\38938.exe

显示全部楼层 · 发表于 2008-10-24 22:24:47

kaspersky miss 4
HIPS拦截剩余的3+1[无行为]

其中一个没有行为，运行后退出~

红伞miss2

没有行为的样本是ilobbyupdater117.exe

显示全部楼层 · 发表于 2008-10-24 22:30:07

2008100901.exe - Win32/TrojanDownloader.Agent.NYP 特洛伊木马
38938.exe - 可能是 Win32/Genetik 特洛伊木马的变种
aa1.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa10.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa11.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa12.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa14.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa15.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa16.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa17.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa18.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa19.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa2.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa20.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa21.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa23.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa24.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa25.exe - Win32/PSW.WOW.CFU 特洛伊木马
aa29.exe - Win32/PSW.Legendmir.NGG 特洛伊木马的变种
aa3.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa35.exe > NSIS > 19.exe - Win32/Adware.Cinmus 应用程序的变种
aa4.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa5.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa7.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa8.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
aa9.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马的变种
ad7547.exe > NSIS > cpush.dll - Win32/Adware.Cinmus 应用程序的变种
ad7547.exe > NSIS > Uninst.exe - Win32/Adware.Cinmus 应用程序
ko.exe - Win32/Rootkit.Agent.NFF 特洛伊木马的变种
myself.exe - Win32/Spy.Pophot.NAO 特洛伊木马的变种
new.exe - Win32/TrojanDownloader.Agent.OBQ 特洛伊木马的变种

NOD MISS 2 上报

ilobbyupdater117.exe没有行为的话及不上报了

[ 本帖最后由 lingbo110120 于 2008-10-24 22:31 编辑 ]

显示全部楼层 · 发表于 2008-10-24 23:42:06

伞上报2个。

显示全部楼层 · 发表于 2008-10-24 23:55:11

使用 G DATA AntiVirus 进行病毒检测
版本 18.9.1.9
病毒特征库日期 10/24/2008
开始时间: 10/24/2008 23:53
引擎: KAV 引擎 (AVK 19.1197), AVAST 引擎 (AVB 19.76)
启发式：开启
文件: 开启
系统区域: 关闭

检测选中目录和文件...
S:\31.ge\

项目: aa23.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptk (KAV 引擎)
项目: aa24.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa25.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.WOW.cfu (KAV 引擎)
项目: aa3.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa4.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptk (KAV 引擎)
项目: aa5.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa7.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa8.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa9.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa29.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptr (KAV 引擎)
项目: data0002
检查档案: S:\31.ge\ad7547.exe
状态: 检测到病毒
病毒: not-a-virus:AdWare.Win32.BHO.dof (KAV 引擎)
项目: ad7547.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Win32:Trojan-gen {Other} (AVAST 引擎)
项目: 38938.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-Dropper.Win32.Mudrop.lj (KAV 引擎), Win32:Agent-ZGV [Trj] (AVAST 引擎)
项目: 2008100901.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-Downloader.Win32.Agent.ntx (KAV 引擎), Win32:Trojan-gen {Other} (AVAST 引擎)
项目: myself.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-Spy.Win32.Pophot.gey (KAV 引擎), Win32:Agent-SIM [Trj] (AVAST 引擎)
项目: new.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-Downloader.Win32.Agent.wps (KAV 引擎), Win32:Trojan-gen {Other} (AVAST 引擎)
项目: server.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Win32:Delf-IZG [Trj] (AVAST 引擎)
项目: ko.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-Dropper.Win32.Agent.yjl (KAV 引擎), Win32:KillAV-JG [Trj] (AVAST 引擎)
项目: aa1.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa10.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa11.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa12.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa14.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa15.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptk (KAV 引擎)
项目: aa16.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa17.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa18.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa2.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptk (KAV 引擎)
项目: aa20.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)
项目: aa21.exe
路径: S:\31.ge
状态: 检测到病毒
病毒: Trojan-GameThief.Win32.OnLineGames.tptl (KAV 引擎)

检测执行时间： 10/24/2008 23:53
32 个文件被检查
29 个感染文件被发现
0 个可疑文件被发现

显示全部楼层 · 发表于 2008-10-25 00:12:42

Infections found: 30
Infected objects removed or healed: 30
Total object scanned: 33

Infections
File; Infection; Result
C:\Documents and Settings\Limited User\Desktop\31.ge\2008100901.exe; Trojan horse Downloader.Agent.AGFE; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\38938.exe; Trojan horse Generic10.AIQL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa1.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa10.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa11.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa12.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa14.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa15.exe; Trojan horse PSW.OnlineGames.BELL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa16.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa17.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa18.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa19.exe; Trojan horse PSW.OnlineGames.BELL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa2.exe; Trojan horse PSW.OnlineGames.BELL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa20.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa21.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa23.exe; Trojan horse PSW.OnlineGames.BELL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa24.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa25.exe; Trojan horse PSW.Generic6.ALYN; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa29.exe; Trojan horse PSW.Ldpinch.11.BQ; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa3.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa35.exe; Trojan horse Rootkit-Agent.B; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa4.exe; Trojan horse PSW.OnlineGames.BELL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa5.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa7.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa8.exe; Trojan horse PSW.OnlineGames.BELT; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\aa9.exe; Trojan horse Agent.AHHO; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\ad7547.exe; Trojan horse Puper.H; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\ko.exe; Trojan horse BackDoor.Generic10.TDW; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\myself.exe; Trojan horse PSW.Generic6.AMRL; Moved to Virus Vault
C:\Documents and Settings\Limited User\Desktop\31.ge\new.exe; Virus found PSW.OnlineGames; Moved to Virus Vault

显示全部楼层 · 发表于 2008-10-25 05:49:53

费尔杀30个，剩下2个主动防御报

[病毒样本] 32个,,,,,,

27

本帖子中包含更多资源