收藏本站 |切换到宽版 | 更换论坛皮肤
 找回密码  忘记邮箱  QQ快速登录  快速登录  快速注册

卡饭»论坛 › 安全区 › 病毒样本 分享&分析区 › 邮箱里找出来的07年4月的病毒，还有漏的
返回列表 发新帖
查看: 1822|回复: 8
收起左侧

[病毒样本] 邮箱里找出来的07年4月的病毒，还有漏的

[复制链接]
ccfish
发表于 2008-11-8 17:01:32 | 显示全部楼层 |阅读模式
N久前的病毒　其中一个竟然过了微点．．．．好像是f11.exe不过由于是实机，没敢进一步试．．．．

是邮箱里找出来的，07年4月的病毒
2008-11-08 16:22:08 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\DRIVERS\NPF.SYS D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:22:08 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\SYSTEMT.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:22:08 C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WPCAP.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:56 C:\WINDOWS\SYSTEM32\SYSTEMT.EXE C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F11.EXE
时间 处理结果 木马名称 木马进程名 木马文件创建者
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.amin C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\ZTSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.WOW.nbz C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WOSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.aiem C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WMSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.afnu C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WLSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.aicq C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\WGSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.gqb C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\QQSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.aihg C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\MYSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.gqk C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\FYSO0.DLL D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.cjk C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F9.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.cir C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F8.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.chp C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F7.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.civ C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F6.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:09 处理成功 Trojan-PSW.Win32.OnLineGames.cip C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F5.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:06 处理成功 Trojan-PSW.Win32.GamePass.aih C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F4.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:03 处理成功 Trojan-PSW.Win32.OnLineGames.clt C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F3.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:21:01 处理成功 Trojan-PSW.Win32.WOW.aph C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F1.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:20:58 处理成功 Trojan-PSW.Win32.OnLineGames.cio C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F10.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:20:54 处理成功 Trojan-PSW.Win32.OnLineGames.cjd C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\F2.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE
2008-11-08 16:20:40 处理成功 Backdoor.Win32.Agent.dcr C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\病毒ESET\ESET\1EXPLORE.EXE D:\PROGRAM FILES\WINRAR\WINRAR.EXE

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

jack518
发表于 2008-11-8 17:29:07 | 显示全部楼层
小红伞飘过

[ 本帖最后由 jack518 于 2008-11-8 17:31 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

ccfish
 楼主| 发表于 2008-11-8 17:34:13 | 显示全部楼层
我汗，我加密了你也直接扫？

太强悍了～　雷死人不偿命
回复

举报

fzz8848
头像被屏蔽
发表于 2008-11-8 17:34:46 | 显示全部楼层

回复 2楼 jack518 的帖子

全灭
Begin scan in 'E:\Download\Virus\病毒f11'
E:\Download\Virus\病毒f11\病毒system_tempTemp.rar
    [0] Archive type: RAR
    --> f2.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f10.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f11.exe
      [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
      --> f11.exe
        [1] Archive type: RAR SFX (self extracting)
        --> wpcap.dll
          [DETECTION] Is the TR/Crypt.NSPM.AD Trojan
        --> systemt.exe
          [DETECTION] Is the TR/Crypt.NSPI.Gen Trojan
    --> f1.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f3.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f4.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f5.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f6.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f7.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f8.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> f9.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> fyso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> jtso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> mhso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> myso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> qqso0.dll
      [DETECTION] Is the TR/PSW.Onlineg.ox.6 Trojan
    --> wgso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wlso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wmso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> woso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> ztso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    [NOTE]      The file was deleted!
E:\Download\Virus\病毒f11\病毒user_temp.rar
    [0] Archive type: RAR
    --> wmso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wgso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wlso.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wlso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wmso.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> wgso.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> woso.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> woso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> ztso.exe
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    --> ztso0.dll
      [DETECTION] Is the TR/Crypt.ULPM.Gen Trojan
    [NOTE]      The file was deleted!
E:\Download\Virus\病毒f11\病毒Eset.rar
    [0] Archive type: RAR
    --> Eset\1explore.exe
      [DETECTION] Is the TR/Crypt.NSAnti.Gen Trojan
    [NOTE]      The file was deleted!

[ 本帖最后由 fzz8848 于 2008-11-8 17:37 编辑 ]
回复

举报

syfwxmh
发表于 2008-11-8 17:39:49 | 显示全部楼层
kaspersky kill all
回复

举报

zwl2828
发表于 2008-11-8 17:40:44 | 显示全部楼层
C:\Users\Wesley\Downloads\病毒f11\病毒Eset.rar » RAR » Eset\1explore.exe - Win32/Pacex.Gen virus
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f2.exe - Win32/PSW.Agent.NEB trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f10.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f11.exe » RAR » systemt.exe - probably a variant of Win32/Agent trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f11.exe » RAR » Packet.dll - archive damaged - the file could not be extracted.
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f1.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f3.exe - Win32/PSW.Agent.NEA trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f4.exe - Win32/PSW.Agent.NEB trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f5.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f6.exe - Win32/PSW.Agent.NEB trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f7.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f8.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » f9.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » fyso0.dll - probably a variant of Win32/PSW.OnLineGames trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » jtso0.dll - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » mhso0.dll - Win32/PSW.Agent.NFK trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » myso0.dll - probably a variant of Win32/PSW.OnLineGames trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » qqso0.dll - probably a variant of Win32/PSW.OnLineGames trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » wgso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » wlso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » wmso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » woso0.dll - Win32/PSW.Agent.NFI trojan
C:\Users\Wesley\Downloads\病毒f11\病毒system_tempTemp.rar » RAR » ztso0.dll - probably a variant of Win32/Genetik trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wmso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wgso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wlso.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wlso0.dll - a variant of Win32/PSW.OnLineGames.NDV trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wmso.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » wgso.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » woso.exe - Win32/PSW.Agent.NDZ trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » woso0.dll - Win32/PSW.Agent.NFI trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » ztso.exe - Win32/PSW.Agent.NEB trojan
C:\Users\Wesley\Downloads\病毒f11\病毒user_temp.rar » RAR » ztso0.dll - probably a variant of Win32/Genetik trojan
回复

举报

jack518
发表于 2008-11-8 17:41:18 | 显示全部楼层
原帖由 ccfish 于 2008-11-8 17:34 发表
我汗，我加密了你也直接扫？

太强悍了～　雷死人不偿命
你不说,谁晓得

[ 本帖最后由 jack518 于 2008-11-8 17:42 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看，没有帐号？快速注册

x
回复

举报

daojian
发表于 2008-11-8 21:46:56 | 显示全部楼层
avast  全歼！
回复

举报

kingmuro
头像被屏蔽
发表于 2008-11-8 22:13:04 | 显示全部楼层
老病毒过杀软很正常，不稀奇！
回复

举报

返回列表 发新帖
高级模式
B Color Image Link Quote Code Smilies
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-19 08:08 , Processed in 0.133484 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究，不得将上述内容用于商业或者其他非法用途，否则产生的一切后果自负，本站信息来自网络，版权争议问题与本站无关，您必须在下载后的24小时之内从您的电脑中彻底删除上述信息，如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表