17个过卡巴的样本加一个钓鱼网站

gomu887

a-squared Anti-Malware - 版本 4.0
上次更新: 2009-1-1 21:24:04

扫描设置:

对象: C:\Documents and Settings\Administrator\桌面\45445144114.rar
扫描文件: 开
启发式扫描: 开
ADS 扫描: 开

扫描开始于:        2009-1-1 23:40:48

C:\Documents and Settings\Administrator\桌面\45445144114.rar/D07E1B94722CBBD7AD5418FF99B2D00B67A99F8B         已检测: Trojan-Downloader.Win32.Injecter!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D2A9EF5C8601A0A808D05D6BCC888256         已检测: Trojan-Dropper.Agent!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D2C8263DC2BB10AAF7849DFE6BF3A4E17E49E7FD         已检测: Trojan.Win32.Ircbrute!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D2D85B018219728F19330F80B97056C42E064250         已检测: Trojan-Dropper.Agent!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D3589824BBB963393806B653DC3B3E2CAED01007         已检测: Virus.Win32.KdCrypt!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D35FD850AF6F57522B98DBEC22317E7F30170E10         已检测: Trojan.Crypt.XPACK!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D591DF34A509868B3141437650DE6CDD06D9D94D         已检测: Trojan.Fakeav.1!IK
C:\Documents and Settings\Administrator\桌面\45445144114.rar/D85E040CD797B7D4B0EF0E0E3A22656DB30F86B2         已检测: Packer.RLPack.D!IK

已扫描

文件:         8
跟踪记录:         0
Cookies:         0
进程:         0

已发现

文件:         8
跟踪记录:         0
Cookies:         0
进程:         0
注册表键:         0

扫描结束于:        2009-1-1 23:40:48
扫描用时:        0:00:00

woai_jolin

http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539        multiple threats        deleted (after the next restart) - quarantined       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D07E1B94722CBBD7AD5418FF99B2D00B67A99F8B        Win32/TrojanDownloader.Agent.NXY trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D2A9EF5C8601A0A808D05D6BCC888256        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D2C8263DC2BB10AAF7849DFE6BF3A4E17E49E7FD        probably unknown NewHeur_PE virus        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D2D85B018219728F19330F80B97056C42E064250        probably a variant of Win32/Agent.OCX trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D3589824BBB963393806B653DC3B3E2CAED01007        a variant of Win32/TrojanDownloader.Zlob.BXN trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D35FD850AF6F57522B98DBEC22317E7F30170E10        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D591DF34A509868B3141437650DE6CDD06D9D94D        a variant of Win32/Kryptik.J trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\D85E040CD797B7D4B0EF0E0E3A22656DB30F86B2        probably a variant of Win32/Hupigon trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DAA69621DC7A63C60C8CC19CB332D25612275D31        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DB6C9B06EA797573375837048E6FD79ED319247B        a variant of Win32/Kryptik.J trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DBD28ED84D4EF730C04C43E002D4C861C57EEC02        a variant of Win32/TrojanDownloader.FakeAlert.GP trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DD1CC11C2B6B07D05309ABEB32CE5C79DAAAF6BD        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DD4F0145C3A3337F6DC89CC2667BF07CAF39D29A        Win32/VB.NRL trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DDF3B03CB5D91304103E6406C47DA7C6D089F299        probably a variant of Win32/SdBot trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DEED13E52AFCC9FD2EF326FB6B0AA4BF7FCF14BE        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DEED13E52AFCC9FD2EF326FB6B0AA4BF7FCF14BE » UPX v12_m2        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\DF1A1122C1FB9A620FF00BE876E80C0D0315F528        probably a variant of Win32/TrojanDownloader.Agent trojan        was a part of the deleted object       
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\Install.exe2        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\Install.exe2 » NSIS » Entries.bin        is OK               
http://bbs.kafan.cn/attachment.p ... 7f&t=1230824539 » RAR » 45445144114\Install.exe2 » NSIS » Strings.txt        is OK

su-tt

C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D07E1B94722CBBD7AD5418FF99B2D00B67A99F8B - Win32/TrojanDownloader.Agent.NXY 特洛伊木马
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D2C8263DC2BB10AAF7849DFE6BF3A4E17E49E7FD - 未查明的 NewHeur_PE 病毒
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D2D85B018219728F19330F80B97056C42E064250 - 可能是 Win32/Agent.OCX 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D3589824BBB963393806B653DC3B3E2CAED01007 - Win32/TrojanDownloader.Zlob.BXN 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D591DF34A509868B3141437650DE6CDD06D9D94D - Win32/Kryptik.J 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\D85E040CD797B7D4B0EF0E0E3A22656DB30F86B2 - 可能是 Win32/Hupigon 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\DB6C9B06EA797573375837048E6FD79ED319247B - Win32/Kryptik.J 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\DBD28ED84D4EF730C04C43E002D4C861C57EEC02 - Win32/TrojanDownloader.FakeAlert.GP 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\DD4F0145C3A3337F6DC89CC2667BF07CAF39D29A - Win32/VB.NRL 特洛伊木马
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\DDF3B03CB5D91304103E6406C47DA7C6D089F299 - 可能是 Win32/SdBot 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\45445144114.rar > RAR > 45445144114\DF1A1122C1FB9A620FF00BE876E80C0D0315F528 - 可能是 Win32/TrojanDownloader.Agent 特洛伊木马 的变种

915309308

权限不够。。很郁闷。。。

LKD1028312

132