查看: 2779|回复: 18
收起左侧

[病毒样本] 30

[复制链接]
mox
发表于 2008-11-12 14:02:22 | 显示全部楼层 |阅读模式

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
fzz8848
头像被屏蔽
发表于 2008-11-12 14:07:43 | 显示全部楼层



[ 本帖最后由 fzz8848 于 2008-11-15 14:56 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
fzz8848
头像被屏蔽
发表于 2008-11-12 14:16:23 | 显示全部楼层
红伞全灭
The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
     30 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     30 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      0 Warnings
     30 Notes

[ 本帖最后由 fzz8848 于 2008-11-12 16:49 编辑 ]
aerbeisi
发表于 2008-11-12 16:25:48 | 显示全部楼层

NOD32 29个

sam.to
发表于 2008-11-12 16:32:09 | 显示全部楼层
12/11/2008 16:31:15        已偵測: Trojan-PSW.Win32.Agent.lbu        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\666.exe/PE_Patch/UPack               
12/11/2008 16:31:15        已刪除: Trojan-PSW.Win32.Agent.lbu        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\666.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.tses        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_cb.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.tses        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_cb.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.tset        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_dj.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.tset        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_dj.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.tsev        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jh.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.tsev        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jh.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.trhp        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jxsj.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.trhp        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jxsj.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.trsv        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jxsj_unpacked.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.trsv        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jxsj_unpacked.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.trwt        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jz.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.trwt        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_jz.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.trhq        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_my.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.trhq        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_my.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.trwu        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_ptyj.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.trwu        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_ptyj.exe               
12/11/2008 16:31:15        已偵測: Trojan-GameThief.Win32.OnLineGames.tsha        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_wd.exe               
12/11/2008 16:31:15        已刪除: Trojan-GameThief.Win32.OnLineGames.tsha        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\b_wd.exe               
12/11/2008 16:31:16        已偵測: Trojan.Win32.Agent.amtx        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\dnf.exe/PE_Patch/UPack               
12/11/2008 16:31:16        已刪除: Trojan.Win32.Agent.amtx        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\dnf.exe
12/11/2008 16:31:16        已偵測: Trojan-Downloader.Win32.Delf.ogy        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\downer2.exe               
12/11/2008 16:31:16        已刪除: Trojan-Downloader.Win32.Delf.ogy        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\downer2.exe               
12/11/2008 16:31:16        已偵測: Trojan-Downloader.Win32.Delf.ogy        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\downer[1].exe/downer[1]               
12/11/2008 16:31:16        未處理: Trojan-Downloader.Win32.Delf.ogy        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\downer[1].exe/downer[1]        不支援寫入       
12/11/2008 16:31:16        已偵測: Trojan-GameThief.Win32.OnLineGames.tsaz        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\jxqy.exe               
12/11/2008 16:31:17        已刪除: Trojan-GameThief.Win32.OnLineGames.tsaz        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\jxqy.exe               
12/11/2008 16:31:18        已偵測: Trojan.Win32.Agent.amun        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\mh.exe/PE_Patch/UPack/data0000               
12/11/2008 16:31:18        已刪除: Trojan.Win32.Agent.amun        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\mh.exe               
12/11/2008 16:31:20        已偵測: Trojan.Win32.Agent.amtx        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\qqhx.exe/PE_Patch/UPack               
12/11/2008 16:31:20        已刪除: Trojan.Win32.Agent.amtx        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\qqhx.exe               
12/11/2008 16:31:23        已偵測: Trojan-GameThief.Win32.Magania.gen        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\qqxx.exe/PE_Patch/UPack               
12/11/2008 16:31:23        已刪除: Trojan-GameThief.Win32.Magania.gen        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\qqxx.exe               
12/11/2008 16:31:23        已偵測: Trojan-GameThief.Win32.OnLineGames.tshq        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\sk02.exe               
12/11/2008 16:31:23        已刪除: Trojan-GameThief.Win32.OnLineGames.tshq        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\sk02.exe               
12/11/2008 16:31:24        已偵測: Trojan-GameThief.Win32.OnLineGames.trfg        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\xwowg_2.exe/PE_Patch/UPack               
12/11/2008 16:31:24        已刪除: Trojan-GameThief.Win32.OnLineGames.trfg        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\xwowg_2.exe               
12/11/2008 16:31:24        已偵測: Trojan-Downloader.Win32.Banload.xuk        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\zarpw.exe               
12/11/2008 16:31:24        已刪除: Trojan-Downloader.Win32.Banload.xuk        C:\Documents and Settings\kato9096\桌面\FGH.rar/FGH\zarpw.exe


上报11个到卡巴
will
发表于 2008-11-12 16:33:21 | 显示全部楼层

  Total Command-Line Scanner Report
-------------------------------------------------------------------------
  Report for Jiangmin Command-Line Scanner :

  666.exe ----- Trojan/PSW.Agent.gqb  
  b_cb.exe ----- Trojan/Hijacker.cv  
  b_dj.exe ----- TrojanSpy.OnLineGames.kau  
  b_jh.exe ----- TrojanSpy.OnLineGames.kal  
  b_jxsj.exe ----- TrojanSpy.OnLineGames.jcg  
  b_jxsj_unpacked.exe ----- TrojanSpy.OnLineGames.jcg  
  b_jz.exe ----- TrojanSpy.Agent.hau  
  b_my.exe ----- Trojan/Hijacker.da  
  b_ptyj.exe ----- TrojanSpy.OnLineGames.kaf  
  b_wd.exe ----- TrojanDropper.Agent.qis  
  cqsj.exe ----- TrojanSpy.OnLineGames.euu  
  dh2.exe ----- TrojanSpy.OnLineGames.euu  
  dh3.exe ----- TrojanSpy.OnLineGames.euu  
  dnf.exe ----- TrojanSpy.OnLineGames.euu  
  jxqy.exe ----- Trojan/Hijacker.di  
  kd.exe ----- TrojanSpy.OnLineGames.euu  
  mh.exe ----- TrojanSpy.OnLineGames.euu  
  qqhx.exe ----- TrojanSpy.OnLineGames.euu  
  qqxx.exe ----- TrojanSpy.Magania.fdp  
  tl.exe ----- TrojanSpy.OnLineGames.euu  
  wl.exe ----- TrojanSpy.OnLineGames.euu  
  wmgj.exe ----- TrojanSpy.OnLineGames.euu  
  yy.exe ----- TrojanSpy.OnLineGames.euu  

  Jiangmin found 23 detections in 30 files.
-------------------------------------------------------------------------
  Task done @ 2008/11/12 三 16:33:04.09
feihongtian 该用户已被删除
发表于 2008-11-12 16:43:20 | 显示全部楼层
Scan      20
sanbox   10

砍光

Scanning Engines:
F-Secure AVP: 7.00.171, 2008-11-12
F-Secure Hydra: 2.08.8110, 2008-11-12

Result: 20 malware found
Trojan-PSW.Win32.Agent.lbu (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\666.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.tses (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_cb.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.tset (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_dj.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.tsev (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_jh.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trhp (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_jxsj.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trsv (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_jxsj_unpacked.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trwt (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_jz.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trhq (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_my.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trwu (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_ptyj.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.tsha (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\b_wd.exe Action: deleted
Trojan.Win32.Agent.amtx (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\dnf.exe Action: deleted
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\qqhx.exe Action: deleted
Trojan-Downloader.Win32.Delf.ogy (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\downer2.exe Action: deleted
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\downer[1].exe\downer[1]
Trojan-GameThief.Win32.OnLineGames.tsaz (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\jxqy.exe Action: deleted
Trojan.Win32.Agent.amtz (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\mh.exe Action: deleted
Trojan-GameThief.Win32.Magania.gen (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\qqxx.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.tshq (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\sk02.exe Action: deleted
Trojan-GameThief.Win32.OnLineGames.trfg (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\xwowg_2.exe Action: deleted
Trojan-Downloader.Win32.Banload.xuk (virus)
C:\Documents and Settings\sk\桌面\virusrun\081112\FGH\zarpw.exe Action: deleted

[ 本帖最后由 feihongtian 于 2008-11-12 16:53 编辑 ]
纽约的麻雀
发表于 2008-11-12 16:48:41 | 显示全部楼层
End of the scan: 2008年11月12日  16:48
Used time: 00:05 Minute(s)

The scan has been done completely.

      0 Scanning directories
     32 Files were scanned
     30 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      2 Archives were scanned
      0 Warnings
      1 Notes
ollydbg 该用户已被删除
发表于 2008-11-12 17:11:15 | 显示全部楼层
拿来测试杀软不错。
wangjay1980
发表于 2008-11-12 21:22:59 | 显示全部楼层
2008-11-12 JAY21:22:21        Untreated        Trojan program        Trojan-Downloader.Win32.Banload.xuk        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\zarpw.exe        Postponed       
2008-11-12 JAY21:22:21        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\yy.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:21        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trfg        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\xwowg_2.exe/PE_Patch/UPack        Postponed       
2008-11-12 JAY21:22:21        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\wmgj.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:21        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\wl.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\tl.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan-GameThief.Win32.Magania.gen        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\qqxx.exe/PE_Patch/UPack        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan.Win32.Agent.amtx        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\qqhx.exe/PE_Patch/UPack        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan.Win32.Agent.amun        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\mh.exe/PE_Patch/UPack/data0000        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\kd.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tsaz        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\jxqy.exe        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan-Downloader.Win32.Delf.ogy        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\downer[1].exe/downer[1]        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan-Downloader.Win32.Delf.ogy        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\downer2.exe        Postponed       
2008-11-12 JAY21:22:20        Untreated        Trojan program        Trojan.Win32.Agent.amtx        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\dnf.exe/PE_Patch/UPack        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\dh3.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\dh2.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Heur.Trojan.Generic        High        Partial        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\cqsj.exe/PE_Patch/UPack/data0000/UPack        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tsha        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_wd.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tshl        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_qqsg.exe/#        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trwu        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_ptyj.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trhq        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_my.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trwt        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_jz.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trsv        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_jxsj_unpacked.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.trhp        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_jxsj.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tsev        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_jh.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tset        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_dj.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-GameThief.Win32.OnLineGames.tses        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\b_cb.exe        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Trojan-PSW.Win32.Agent.lbu        High        Exact        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\666.exe/PE_Patch/UPack        Postponed       
2008-11-12 JAY21:22:19        Untreated        Trojan program        Heur.Trojan.Generic        High        Probably        C:\Documents and Settings\Owner\桌面\FGH.rar/FGH\3.exe/NSPack        Postponed
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-7-16 00:19 , Processed in 0.129459 second(s), 17 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表