2008年11月10日晚上收集的6个可疑样本

显示全部楼层 · 发表于 2008-11-10 20:57:46

2008年11月10日晚上收集的6个可疑样本
如果您的安全软件无法查杀,
请及时上报. 谢谢

点击下载2008年11月10日晚上收集的6个可疑样本

显示全部楼层 · 发表于 2008-11-10 21:32:34

C:\Test\0811\06\6ge\2.exe: Trojan.Downloader-58907 FOUND
C:\Test\0811\06\6ge\3.exe: Trojan.Small-3632 FOUND
C:\Test\0811\06\6ge\mm.exe: Trojan.Crypted-4 FOUND
----------- SCAN SUMMARY -----------
Known viruses: 456621
Engine version: 0.93
Scanned directories: 1
Scanned files: 6
Infected files: 3

显示全部楼层 · 发表于 2008-11-10 21:37:15

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-10
F-Secure Hydra: 2.08.8110, 2008-11-10

scan 5
sandbox 1

Result: 1 malware found
W32/Packed_FSG.D (virus)
C:\DOCUMENTS AND SETTINGS\SK\桌面\VIRUSRUN\081110\6GE\QQ01.EXE Action: quarantined

Result: 5 malware found
Trojan-Downloader.Win32.Agent.aldi (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\6ge\2.exe Action: deleted
Trojan-Downloader.Win32.Agent.aiux (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\6ge\3.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.sjbk (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\6ge\m.exe Action: deleted
Backdoor.Win32.Hupigon.uh (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\6ge\mm.exe Action: deleted
Backdoor.Win32.PcClient.pym (virus)
C:\Documents and Settings\sk\桌面\virusrun\081110\6ge\Ok.exe Action: deleted

显示全部楼层 · 发表于 2008-11-10 21:38:09

使用G DATA AntiVirus检测
版本 19.0.0.54 (2008/10/14)
病毒特征库日期 2008/11/10
开始时间： 2008/11/10 21:35
引擎：引擎A (AVA 19.1534), 引擎B (AVB 19.97)
启发式：开启
档案文件：开启
系统区域：开启
检测rootkits：开启

检测系统区域...
检测以下目录和文件：
C:\Documents and Settings\Administrator\桌面\6ge\

对象： 3.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Dropped:Generic.Malware.SP!dldPk!.6B5C0E13 (引擎 A)
对象： 2.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Rootkit.Agent.AIWN (引擎 A)
对象： mm.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Backdoor.Generic.79242 (引擎 A)
对象： Ok.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Trojan.Crypt.DG (引擎 A)
对象： m.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Trojan.PWS.OnlineGames.ZFO (引擎 A)
对象： [FSG]\[Embedded#018000]
在压缩档案中： C:\Documents and Settings\Administrator\桌面\6ge\qq01.exe
状态：发现病毒
病毒： Win32:Trojan-gen {Other} (引擎 B)
对象： qq01.exe
路径: C:\Documents and Settings\Administrator\桌面\6ge
状态：病毒，文件被删除
病毒： Win32:Trojan-gen {Other} (引擎 B)

扫描完成于： 2008/11/10 21:35
6个文件已检测
6个受感染文件已发现
0个可疑文件已发现

显示全部楼层 · 发表于 2008-11-10 21:41:06

Begin scan in 'D:\Virus\6ge'
D:\Virus\6ge\2.exe
[0] Archive type: RSRC
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Dldr.Agent.aldi Trojan
--> Object
   [DETECTION] Contains recognition pattern of the RKIT/Agent.ejj root kit
[NOTE]    The file was deleted!
D:\Virus\6ge\3.exe
[0] Archive type: OVL
--> Object
   [DETECTION] Contains recognition pattern of the RKIT/Agent.AIUG root kit
[NOTE]    The file was deleted!
D:\Virus\6ge\m.exe
[DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
[NOTE]    The file was deleted!
D:\Virus\6ge\mm.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Hupigon.Gen back-door program
[NOTE]    The file was deleted!
D:\Virus\6ge\Ok.exe
[DETECTION] Contains recognition pattern of the DR/PcClient.Gen dropper
[NOTE]    The file was deleted!
D:\Virus\6ge\qq01.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Clicke.NEQ.20480 Trojan
      --> Object
      [DETECTION] Is the TR/Agent.bnt.20480 Trojan
[NOTE]    The file was deleted!

End of the scan: 2008年11月10日  21:40
Used time: 00:07 Minute(s)

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   8 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   6 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -2 Files not concerned
   0 Archives were scanned
   0 Warnings
   6 Notes

显示全部楼层 · 发表于 2008-11-10 21:49:46

显示全部楼层 · 发表于 2008-11-10 22:48:17

上报2个到卡巴

显示全部楼层 · 发表于 2008-11-11 02:10:01

新入一个

2008/11/11 2:08:40 已清除木马程序 Backdoor.Win32.Hupigon.uh G:\Temp\Virus\6ge.rar/mm.exe
2008/11/11 2:08:40 已清除木马程序 Trojan-Downloader.Win32.Agent.aiux G:\Temp\Virus\6ge.rar/3.exe
2008/11/11 2:08:40 已清除木马程序 Trojan-Downloader.Win32.Agent.aldi G:\Temp\Virus\6ge.rar/2.exe
2008/11/11 2:08:40 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sdai G:\Temp\Virus\6ge.rar/m.exe//data0002//FSG
2008/11/11 2:08:40 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.sjbk G:\Temp\Virus\6ge.rar/m.exe//data0000//UPack
2008/11/11 2:08:40 已清除木马程序 Backdoor.Win32.PcClient.qbt G:\Temp\Virus\6ge.rar/Ok.exe

[病毒样本] 2008年11月10日晚上收集的6个可疑样本

本帖子中包含更多资源