2008年11月8日早上收集的34个可疑样本

显示全部楼层 · 发表于 2008-11-8 07:05:09

2008年11月8日早上收集的34个可疑样本
如果您的安全软件无法查杀,
请及时上报. 谢谢
其中驱逐舰发现18个.....其余已上报
点击下载2008年11月8日早上收集的34个可疑样本

显示全部楼层 · 发表于 2008-11-8 07:12:54

卡巴31个

显示全部楼层 · 发表于 2008-11-8 08:09:45

C:\Documents and Settings\Administrator\桌面\virus\a1.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a10.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a12.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a13.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a14.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a16.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a17.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a18.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a19.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a2.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a20.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a21.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a22.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a23.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a24.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a25.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a29.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a3.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a30.exe - 可能是 Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a31.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a32.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a33.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a34.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a4.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a5.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a6.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a7.exe - Win32/PSW.OnLineGames.NXI 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a8.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\a9.exe - Win32/PSW.OnLineGames.NRF 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\aaa.exe - 可能是 Win32/PSW.Delf.NLZ 特洛伊木马的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\cj.exe > NSIS > 33.exe - Win32/Adware.Cinmus 应用程序的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\virus\ma.exe - Win32/AutoRun.ADC 蠕虫的变种 - 通过删除清除 - 已隔离
C:\Documents and Settings\Administrator\桌面\virus\vip.exe - Win32/TrojanDropper.Agent.NJN 特洛伊木马 - 通过删除清除 - 已隔离

显示全部楼层 · 发表于 2008-11-8 08:24:48

诺````一个也没杀出

显示全部楼层 · 发表于 2008-11-8 08:35:30

有密码的包。。。请解压。。

显示全部楼层 · 发表于 2008-11-8 08:36:30

伞剩1个
Begin scan in 'D:\下载\virus'
D:\下载\virus\a1.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.S Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a10.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a12.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    The detection was classified as suspicious.
[NOTE]    The file was moved to '4946de85.qua'!
D:\下载\virus\a13.exe
[DETECTION] Is the TR/PSW.O.tqly.16765 Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a14.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a16.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a17.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a18.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a19.exe
   [DETECTION] Is the TR/PSW.Online.bin Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a2.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a20.exe
[DETECTION] Is the TR/PSW.O.tqly.16765 Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a21.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a22.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a23.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a24.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
      --> Object
      [DETECTION] Is the TR/Agent.alwp Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a25.exe
[DETECTION] Is the TR/PSW.O.tqly.16765 Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a29.exe
   [DETECTION] Is the TR/PSW.Online.tdy Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a3.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a30.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a31.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a32.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a33.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a34.exe
   [DETECTION] Is the TR/PSW.OnLin.aklo.2 Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a4.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a5.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a6.exe
   [DETECTION] Is the TR/PSW.Online.tdy Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a7.exe
[DETECTION] Is the TR/Hijacker.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a8.exe
[DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\a9.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.MultiFirst.T Trojan
[NOTE]    The file was deleted!
D:\下载\virus\aaa.exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    The file was deleted!
D:\下载\virus\cj.exe
[0] Archive type: NSIS
--> ProgramFilesDir/33.exe
   [DETECTION] Contains HEUR/Malware suspicious code
[NOTE]    The file was deleted!
D:\下载\virus\ma.exe
   [DETECTION] Is the TR/Drop.Cattivo.A Trojan
[NOTE]    The file was deleted!
D:\下载\virus\vip.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.28501 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.36725 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.30712 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.92719 program
      --> Object
         [DETECTION] Is the TR/Drop.Spy.Pca.A.2 Trojan
[NOTE]    The file was deleted!

显示全部楼层 · 发表于 2008-11-8 08:53:54

诺顿10.1杀之

显示全部楼层 · 发表于 2008-11-8 09:21:56

Filename Result
YiqilaiLyrics1.4.0.exe CLEAN

显示全部楼层 · 发表于 2008-11-8 09:37:32

> 欢迎您使用山寨反流行病毒软件
> 流行病毒特征数: 17184

> 当前最新版本为 20081105-1
> 您现在使用的是最新版本！！！

> 山寨反流行病毒软件4.0隆重发布！更强的查杀能力！全球唯一一款驱动级的流行病毒查杀工具。同时3.1以下版本停止更新服务。

> 正在扫描指定目录病毒 2008年11月8日9时37分3秒

> 发现病毒!! a12.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a12.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a13.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a13.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a14.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a14.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a16.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a16.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a18.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a18.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a20.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a20.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a21.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a21.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a24.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a24.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a25.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a25.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a5.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a5.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a6.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a6.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a7.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a7.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! a8.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\a8.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! ma.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\ma.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

> 发现病毒!! vip.exe
> 清除成功 C:\Documents and Settings\Administrator\桌面\34ge_virus\vip.exe
> 被清除的病毒在回收站中有备份误杀时可方便恢复

显示全部楼层 · 发表于 2008-11-8 10:31:21

F-Secure IS 2009
scan result 31/34

sandbox

W32/Malware (virus)
C:\DOCUMENTS AND SETTINGS\SK\桌面\VIRUSRUN\081108\34GE\A2.EXE Action: deleted

[病毒样本] 2008年11月8日早上收集的34个可疑样本

本帖子中包含更多资源

33

回复 4楼 kissangle1991 的帖子

本帖子中包含更多资源