2008.11.10样本

wt2008sd

怎么没有密码啊

啊弥陀佛

木马名称:Trojan-PSW.Win32.OnLineGames.cswg
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2008[1].11.10\CE2B414D.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Spy.Win32.Agent.vik
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2008[1].11.10\CF90AEA9.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Spy.Win32.Agent.vdl
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2008[1].11.10\CF97315A.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?


木马名称:Trojan-Downloader.Win32.Small.xtg
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\2008[1].11.10\D092B304.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

kc135

密码多少？

密码：virus

[ 本帖最后由 yuanliu 于 2008-11-10 17:33 编辑 ]

2008-11-10 17:33:00        已删除: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CF97315A.exe               
2008-11-10 17:33:00        已删除: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CF90AEA9.exe               
2008-11-10 17:33:00        已删除: Trojan-Downloader.Win32.Small.aelj        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\D092B304.exe               
2008-11-10 17:33:00        已检测到: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CF97315A.exe               
2008-11-10 17:33:00        已检测到: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CF90AEA9.exe               
2008-11-10 17:33:00        已检测到: Trojan-Downloader.Win32.Small.aelj        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\D092B304.exe               
2008-11-10 17:33:00        已删除: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\C9337D63.exe               
2008-11-10 17:33:00        已删除: Trojan-GameThief.Win32.OnLineGames.thxi        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CE2B414D.exe               
2008-11-10 17:33:00        已删除: Trojan-Downloader.Win32.Delf.oyv        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CE15250C.exe               
2008-11-10 17:33:00        已检测到: Trojan-GameThief.Win32.OnLineGames.thxi        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CE2B414D.exe/PE_Patch/UPack               
2008-11-10 17:33:00        已检测到: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\C9337D63.exe/17.exe               
2008-11-10 17:32:59        已检测到: Trojan-Downloader.Win32.Delf.oyv        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CE15250C.exe               
2008-11-10 17:32:59        已删除: not-a-virus:Server-Proxy.Win32.Idccs.d        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CDAE1D54.exe               
2008-11-10 17:32:58        已检测到: not-a-virus:Server-Proxy.Win32.Idccs.d        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CDAE1D54.exe               
2008-11-10 17:32:58        已删除: Trojan.Win32.Small.ycy        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CB15D476.exe               
2008-11-10 17:32:58        已检测到: Trojan.Win32.Small.ycy        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CB15D476.exe               
2008-11-10 17:32:58        已删除: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\C5304549.exe               
2008-11-10 17:32:58        已删除: Trojan-Downloader.JS.Psyme.alp        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CAB25452.exe               
2008-11-10 17:32:51        已检测到: Trojan-Downloader.JS.Psyme.alp        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\CAB25452.exe               
2008-11-10 17:32:51        已检测到: Packed.Win32.Krap.b        C:\Documents and Settings\Owner.LENOVO-73E3485B\桌面\2008.11.10\C5304549.exe

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-10
F-Secure Hydra: 2.08.8110, 2008-11-10

scan 9 +  sandbox   1

Result: 9 malware found
Packed.Win32.Krap.b (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\C5304549.exe Action: deleted
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\C9337D63.exe\17.exe
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CF90AEA9.exe Action: deleted
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CF97315A.exe Action: deleted
Trojan-Downloader.JS.Psyme.alp (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CAB25452.exe Action: deleted
Trojan.Win32.Small.ycy (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CB15D476.exe Action: deleted
Trojan-Downloader:W32/Agent.HXE (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CE15250C.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.thxi (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CE2B414D.exe Action: deleted
Trojan-Downloader.Win32.Small.aelj (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\D092B304.exe Action: deleted



--------------------------------------------------------------------------------

Riskware found
Server-Proxy.Win32.Idccs.d (Riskware)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\CDAE1D54.exe


Packed.Win32.Krap.b (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\10g\17.exe Action: deleted

angellover

瑞星2009过了