2008.10.28样本

happyboys_xp

2008年10月28日,采集样本9个
如果您的安全软件无法查杀,
请及时上报. 谢谢
点此下载
2008.10.28.rar

wangjay1980

2008-10-28 JAY23:12:28        Untreated        Trojan program        Exploit.SWF.Downloader.ey        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/742FF015.exe/Swf2Swc        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Packed.Win32.Krap.b        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/737E684C.exe        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Trojan-GameThief.Win32.Magania.afan        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/712A59A9.exe        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Trojan-Downloader.JS.ActiveX.ae        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/6FA3BD29.exe        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.thxi        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/6ED86FC9.exe/PE_Patch/UPack        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Backdoor.Win32.Hupigon.eocp        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/6A02C7C6.exe        Postponed       
2008-10-28 JAY23:12:28        Untreated        Trojan program        Trojan-Downloader.Win32.Delf.oyu        High        Exact        C:\Documents and Settings\Owner\桌面\2008.10.28.rar/606348A7.exe        Postponed

无尽藏海

Scan Stats:
  Scan Time: 5 seconds
  Scan Options:
  Scan Targets: D:\Virus\2008.10.28\2008.10.28.zip
  Counts:
   Total items scanned: 10
   - Files & Directories: 10
   - Registry Entries: 0
   - Processes & Start-up Items: 0
   - Network & Browser Items: 0
   - Other: 0
   - Trusted Files: 0
   - Skipped Files: 0

   Total security risks detected: 8
   Total items resolved: 8
   Total items that require attention: 0

Resolved Threats:
Trojan Horse
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[606348a7.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


DoctorAdwarePro
Type: Compressed
Risk: Medium (Medium Stealth, Medium Removal, Medium Performance, Medium Privacy)  
Categories: Misleading Application
Status: Fully Resolved
-----------
1 File
[680e8d55.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


W32.SillyFDC
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[6a02c7c6.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


Infostealer.Onlinegame
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[6ed86fc9.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


Trojan Horse
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[6fa3bd29.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


Suspicious.AH.87
Type: Compressed
Risk: Medium (Medium Stealth, Medium Removal, Medium Performance, Medium Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
[712a59a9.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


Trojan.Packed.NsAnti
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Virus
Status: Fully Resolved
-----------
1 File
[737e684c.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted


Bloodhound.Exploit.193
Type: Compressed
Risk: High (High Stealth, High Removal, High Performance, High Privacy)  
Categories: Heuristic Virus
Status: Fully Resolved
-----------
1 File
[742ff015.exe] inside of [d:\virus\2008.10.28\2008.10.28.zip] - Deleted

残缺的唯美

发包没密码的
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/606348A7.exe - Win32/Spy.Pachat.U trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/680E8D55.exe » NSIS » helper.dll - Win32/Adware.DoctorAdwarePro application
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/68F47334.exe - a variant of Win32/PSW.OnLineGames.NQY trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/6A02C7C6.exe - probably a variant of Win32/Hupigon trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/6ED86FC9.exe - a variant of Win32/PSW.OnLineGames.NRF trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/6FA3BD29.exe - JS/TrojanDownloader.Iframe.NBF trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/712A59A9.exe - a variant of Win32/PSW.Lineage.NGS trojan
D:\Users\ekincheng\Desktop\New Folder.zip » ZIP » New Folder/737E684C.exe - Win32/PSW.OnLineGames.NNM trojan

欠妳緈諨

用G DATA AntiVirus检测病毒
版本 18.5.8071.731
病毒特征库日期 10/28/2008
开始时间： 10/29/2008 00:00
引擎： 引擎A (AVK 19.1243), 引擎B (AVB 19.82)
启发式： 开启
档案文件： 开启
系统区域： 关闭

检测以下目录和文件：
  D:\病毒测试\临时解压\New Folder\

对象： 606348A7.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Trojan-Downloader.Win32.Delf.oyu (引擎A)
对象： 6A02C7C6.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Backdoor.Win32.Hupigon.edai (引擎A)
对象： 6ED86FC9.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Trojan-GameThief.Win32.OnLineGames.thxi (引擎A)
对象： 6FA3BD29.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Trojan-Downloader.JS.ActiveX.ae (引擎A)
对象： 712A59A9.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Trojan-GameThief.Win32.Magania.afan (引擎A)
对象： 737E684C.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Packed.Win32.Krap.b (引擎A)
对象： 742FF015.exe
        路径: D:\病毒测试\临时解压\New Folder
        状态： 检测到病毒
        病毒： Exploit.SWF.Downloader.ey (引擎A)

检测执行时间： 10/29/2008 00:03
    9个文件已检测
    7个受感染文件
    0个可疑文件被发现

欠妳緈諨

avast！清空

08红伞威点

红伞x9

Virus or unwanted program 'EXP/Flash.Gen [exploit]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\742FF015.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Dldr.ActiveX.AE.1 [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\6FA3BD29.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\712A59A9.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Crypt.XPACK.Gen [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\737E684C.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Dropper.Gen [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\6ED86FC9.exe.
Action performed: Delete file
Virus or unwanted program 'BDS/Hupigon.Gen [backdoor]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\6A02C7C6.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Spy.Gen [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\68F47334.exe.
Action performed: Delete file
Virus or unwanted program 'ADSPY/Bar.Alexa.B.2 [adware]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\680E8D55.exe.
Action performed: Delete file
Virus or unwanted program 'TR/Dldr.Delf.oyk.1 [trojan]'
detected in file 'C:\Documents and Settings\***\桌面\新建文件夹\606348A7.exe.
Action performed: Delete file

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Desktop\2008.10.28'
C:\Users\morgan\Desktop\2008.10.28\
  606348A7.exe
    [DETECTION] Is the TR/Dldr.Delf.oyk.1 Trojan
    [NOTE]      The file was deleted!
  680E8D55.exe
    [DETECTION] Contains recognition pattern of the ADSPY/Bar.Alexa.B.2 adware or spyware
    [NOTE]      The file was deleted!
  68F47334.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
  6A02C7C6.exe
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
    [NOTE]      The file was deleted!
  6ED86FC9.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
  6FA3BD29.exe
    [DETECTION] Is the TR/Dldr.ActiveX.AE.1 Trojan
    [NOTE]      The file was deleted!
  712A59A9.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
  737E684C.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
  742FF015.exe
    [0] Archive type: SWC
    --> Object
    [NOTE]      The file was deleted!


End of the scan: 2008年10月28日  11:30
Used time: 00:06 Minute(s)

The scan has been done completely.

      1 Scanning directories
      9 Files were scanned
      9 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      9 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      9 Notes