2008年11月21日晚上收集的40个可疑样本

ksdc0274119

金山杀34

挪威的冬天

金山毒霸可信认证技术查询结果如下

51.exe     -----------     分析中
aa1.exe     -----------     病毒
aa10.exe     -----------     分析中
aa11.exe     -----------     可疑的
aa12.exe     -----------     分析中
aa14.exe     -----------     病毒
aa15.exe     -----------     分析中
aa16.exe     -----------     分析中
aa17.exe     -----------     分析中
aa18.exe     -----------     分析中
aa19.exe     -----------     分析中
aa2.exe     -----------     分析中
aa20.exe     -----------     分析中
aa21.exe     -----------     病毒
aa22.exe     -----------     病毒
aa23.exe     -----------     病毒
aa24.exe     -----------     分析中
aa25.exe     -----------     分析中
aa26.exe     -----------     病毒
aa27.exe     -----------     可疑的
aa28.exe     -----------     可疑的
aa29.exe     -----------     分析中
aa3.exe     -----------     未知
aa30.exe     -----------     分析中
aa33.exe     -----------     病毒
aa34.exe     -----------     分析中
aa5.exe     -----------     病毒
aa6.exe     -----------     分析中
aa7.exe     -----------     未知
aa8.exe     -----------     分析中
Access.htm     -----------     未知
Bfyy.htm     -----------     未知
Cx.htm     -----------     未知
Index.htm     -----------     未知
keixj.exe     -----------     安全(*)
Ms06014.htm     -----------     未知
online.exe     -----------     可疑的
Real11.htm     -----------     未知
services.exe     -----------     未知
清雨剑0.exe     -----------     安全(*)

尤金卡巴斯基

入库3个
2008/11/22 15:38:46        已删除        木马程序 Trojan-GameThief.Win32.WOW.cuw        G:\Temp\Virus\2008.11.21_2_.rar/09.exe               
2008/11/22 15:37:30        已杀毒        木马程序 Trojan-Downloader.HTML.Agent.lz        G:\Temp\Virus\2008.11.20_2_.rar/office.htm               
2008/11/22 15:37:15        已杀毒        木马程序 Trojan.Win32.Pakes.lus        G:\Temp\Virus\2008.11.15_2_.rar/2008.11.15_2_\风云传奇.exe//ASPack

luxiao200888

Scan Log
Version of virus signature database: 3632 (20081121)
Date: 2008-11-22  Time: 17:22:16
Scanned disks, folders and files: C:\Documents and Settings\Owner\桌面\新建文件夹
C:\Documents and Settings\Owner\桌面\新建文件夹\aa1.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa10.exe - a variant of Win32/PSW.OnLineGames.NRW trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa11.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa12.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa14.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa15.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa16.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa17.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa18.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa19.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa2.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa20.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa21.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa22.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa23.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa24.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa25.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa26.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa27.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa28.exe - a variant of Win32/PSW.OnLineGames.NRW trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa29.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa3.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa30.exe - a variant of Win32/PSW.Legendmir.NGG trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa33.exe - Win32/PSW.WOW.CRA trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa34.exe » NSIS » 11.exe - a variant of Win32/Adware.Cinmus application
C:\Documents and Settings\Owner\桌面\新建文件夹\aa5.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa6.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa7.exe - a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa8.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\Access.htm - JS/Exploit.CVE-2008-2463 trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\Bfyy.htm - JS/TrojanDownloader.Agent.NIP trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\Cx.htm - JS/TrojanDownloader.Agent.NIQ trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\Ms06014.htm - VBS/TrojanDownloader.Psyme.NFA trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\Real11.htm - JS/TrojanDownloader.Agent.NIS trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\services.exe - Win32/TrojanDownloader.Agent.OMQ trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\Owner\桌面\新建文件夹\aa34.exe » NSIS » 11.exe - a variant of Win32/Adware.Cinmus application - was a part of the deleted object
Number of scanned objects: 50
Number of threats found: 35
Number of cleaned objects: 35
Time of completion: 17:22:26  Total scanning time: 10 sec (00:00:10)

Notes:
[1] Object has been deleted as it only contained the virus body.

xxjdk

卡巴跑的我机子卡吃卡吃的!累的要死!

laolaoliu

EAV4一个没扫出来，真无语。

Ceker

截图说明一切！