2008年11月14日下午收集的11个可疑样本

zjsxsycj

2008年11月14日下午收集的11个可疑样本
如果您的安全软件无法查杀,
请及时上报. 谢谢

点击下载2008年11月14日下午收集的11个可疑样本

will

  Total Command-Line Scanner Report
-------------------------------------------------------------------------
  Report for Jiangmin Command-Line Scanner :

  11.exe ----- Trojan/PSW.Magania.ctb  
  bt34.exe ----- TrojanDropper.Agent.qpn  

  Jiangmin found 2 detections in 5 files.
-------------------------------------------------------------------------
  Task done @ 2008/11/14 五 17:40:12.58

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\11.exe   
Type: Win32 EXE Yoda's Crypter / Extension: .EXE   
MD5 Hash: 96AEB2E4CD1B17983E9B300CA944ED3F   

A-squared ----- Virus.Win32.Agent.KHA!IK    
Avast ----- Win32:Magania-EG [Trj]    
Avg ----- PSW.OnlineGames.BGUL     
Antivir ----- TR/Dropper.Gen    
BitDefender ----- GenPack:Trojan.PWS.YGX    
ClamWin ----- Nothing   
Dr.Web ----- Trojan.MulDrop.17071    
Eset ----- Win32/PSW.OnLineGames.NNM trojan    
Ikarus ----- Virus.Win32.Agent.KHA    
Jiangmin ----- Trojan/PSW.Magania.ctb    
Kaspersky ----- Trojan-GameThief.Win32.Magania.bng    
Kingsoft ----- Nothing   
Vba32 ----- MalwareScope.Trojan-PSW.Game.13    

*** 11/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\bt34.exe   
Type: DOS Executable Generic / Extension: .EXE   
MD5 Hash: BFEE6BFDD881E30F40648B5F0F69052D   

A-squared ----- Trojan.Win32.Obfuscated!IK    
Avast ----- Win32:SdBot-gen44 [Trj]    
Avg ----- Dropper.Agent.KVU     
Antivir ----- TR/Drop.Agent.Zlo.2    
BitDefender ----- MemScan:Exploit.MS08-067.D    
ClamWin ----- Exploit.MS08-067    
Dr.Web ----- Nothing   
Eset ----- Win32/Exploit.MS08-067.A trojan    
Ikarus ----- Trojan.Win32.Obfuscated    
Jiangmin ----- TrojanDropper.Agent.qpn    
Kaspersky ----- Trojan-Dropper.Win32.Agent.zlo    
Kingsoft ----- Nothing   
Vba32 ----- Embedded.Exploit.Win32.IMG-WMF.ex    

*** 11/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\login.exe   
Type: Win32 Executable Borland Delphi 7 / Extension: .EXE   
MD5 Hash: FD7B9ACF3C052553AC0AD69BED632A8E   

A-squared ----- Trojan-Dropper.Delf!IK    
Avast ----- Nothing   
Avg ----- BackDoor.Hupigon.3.F     
Antivir ----- DR/Delphi.Gen    
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- Trojan.MulDrop.21362    
Eset ----- Win32/Prosti.NAU trojan    
Ikarus ----- Trojan-Dropper.Delf    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan.Win32.Delf.fxo    
Kingsoft ----- Win32.Hack.PcClient.al.136510    
Vba32 ----- Trojan.Win32.Delf.fxo    

*** 9/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\server.exe   
Type: Win32 Executable Borland Delphi 7 / Extension: .EXE   
MD5 Hash: E3660ACE68BC814A14F023F2B014A1BC   

A-squared ----- Trojan-PWS.Win32.Small.at!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- Nothing   
Antivir ----- TR/ATRAPS.Gen    
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- DLOADER.Trojan    
Eset ----- Win32/Spy.Delf.NMN trojan    
Ikarus ----- Trojan-PWS.Win32.Small.at    
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- Nothing   
Vba32 ----- Nothing   

*** 6/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\Setup.exe   
Type: Win64 Executable Generic / Extension: .EXE   
MD5 Hash: 63D417C6B21DFFFB71E24A77164192BB   

A-squared ----- Trojan-Clicker.Win32.VB.wj!IK    
Avast ----- Win32:Trojan-gen {Other}    
Avg ----- Nothing   
Antivir ----- Nothing   
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
Eset ----- Nothing   
Ikarus ----- Trojan-Clicker.Win32.VB.wj    
Jiangmin ----- Nothing   
Kaspersky ----- Trojan-Clicker.Win32.VB.cjw    
Kingsoft ----- Win32.Troj.ClickerT.lf.477669    
Vba32 ----- Nothing   

*** 5/13 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   

Task done @ 2008/11/14 五 17:41:49.44   

Palkia

已删除：木马程序 Trojan-GameThief.Win32.Magania.bng        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\11.exe
已删除：木马程序 Trojan-Dropper.Win32.Agent.zlo        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\bt34.exe//PE_Patch//UPack
已删除：木马程序 Trojan.Win32.Delf.fxo        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\login.exe//data0000
已删除：木马程序 Trojan-Clicker.Win32.VB.cjw        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\Setup.exe//ReadBook.exe
已删除：木马程序 Backdoor.ASP.Ace.eg        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\su.asp
已删除：木马程序 Backdoor.ASP.Ace.cy        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\su.aspx
已删除：木马程序 Backdoor.ASP.Ace.gf        文件: C:\Documents and Settings\Administrator\桌面\2008.11.14_1_\tou.asp