一列表

显示全部楼层 · 发表于 2009-1-9 23:09:37

http://vvv.cccvvvbbb.cn/number/list.txt

http://baid5u.com/s.exehttp://bai2du.com/sw.exehttp://bai32du.com/se.exehttp://bai63du.com/sr.exehttp://ba2212idu.com/ts.exehttp://bai65du.com/sy.exehttp://58.53.128.32/xiaoma/5.exehttp://121.10.112.154-------------/xiaoma/6.exehttp://58.53.128.32/xiaoma/7.exehttp://58.53.128.32/xiaoma/8.exehttp://58.53.128.32/xiaoma/9.exehttp://58.53.128.32/xiaoma/10.exehttp://58.53.128.32/xiaoma/11.exehttp://58.53.128.32/xiaoma/12.exehttp://58.53.128.32/xiaoma/13.exehttp://58.53.128.32/xiaoma/14.exehttp://58.53.128.32/xiaoma/15.exehttp://58.53.128.32/xiaoma/16.exehttp://58.53.128.32/xiaoma/17.exehttp://121.10.112.154/xiaoma/18.exehttp://121.10.112.154-----------------/xiaoma/19.exehttp://121.10.112.154/xiaoma/20.exehttp://121.10.112.154/xiaoma/21.exehttp://121.10.112.154/xiaoma/22.exehttp://121.10.112.154/xiaoma/23.exehttp://121.10.112.154/xiaoma/24.exehttp://121.10.112.154/xiaoma/25.exehttp://121.10.112.154/xiaoma/26.exehttp://121.10.112.154/xiaoma/27.exehttp://121.10.112.154/xiaoma/28.exehttp://121.10.112.154/xiaoma/29.exehttp://121.10.112.154/xiaoma/30.exehttp://ni.hdnd35q.cn/ll/ll/12.txthttp://ni.hdnd3qq.cn/ll/ll/13.exehttp://ni.hdnd3qq.cn/ll/ll/14.exehttp://ni.hdnd3qq.cn/ll/ll/15.exehttp://ni.hdnd3qq.cn/ll/ll/16.exehttp://ni.hdnd3qq.cn/ll/ll/17.exehttp://58.53.128.32/bin/AppCom5.dllhttp://58.53.128.32/bin/AppCom6.dllhttp://58.53.128.32/bin/AppCom7.dllhttp://58.53.128.32/bin/AppCom8.dllhttp://58.53.128.32/bin/AppCom9.dllhttp://58.53.128.32/bin/50.exehttp://58.53.128.32/bin/AppCom51.dllhttp://58.53.128.32/bin/AppCom52.dll

显示全部楼层 · 发表于 2009-1-9 23:34:44

有几个下不了

2009/1/9 23:31:17 已清除广告软件 not-a-virus:AdWare.Win32.AdMedia.ed G:\Temp\Virus\vir.rar/vir\AppCom7.dll
2009/1/9 23:31:17 已清除木马程序 Trojan-PSW.Win32.QQPass.fbs G:\Temp\Virus\vir.rar/vir\AppCom8.dll
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.ufmu G:\Temp\Virus\vir.rar/vir\12.exe//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.ufmu G:\Temp\Virus\vir.rar/vir\11.exe//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.ufmu G:\Temp\Virus\vir.rar/vir\10.exe//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.Magania.gen G:\Temp\Virus\vir.rar/vir\8.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.Magania.gen G:\Temp\Virus\vir.rar/vir\25.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.Magania.gen G:\Temp\Virus\vir.rar/vir\22.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.Magania.gen G:\Temp\Virus\vir.rar/vir\18.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除木马程序 Trojan-GameThief.Win32.Agent.w G:\Temp\Virus\vir.rar/vir\23.exe
2009/1/9 23:31:17 已清除木马程序 Trojan-Downloader.Win32.Small.dfl G:\Temp\Virus\vir.rar/vir\21.exe//PE_Patch
2009/1/9 23:31:17 已清除木马程序 Trojan-Banker.Win32.Agent.gh G:\Temp\Virus\vir.rar/vir\9.exe
2009/1/9 23:31:17 已清除木马程序 Backdoor.Win32.Vipdataend.fv G:\Temp\Virus\vir.rar/vir\50.exe//UPack
2009/1/9 23:31:17 已清除木马程序 Backdoor.Win32.Dolan.b G:\Temp\Virus\vir.rar/vir\AppCom5.dll
2009/1/9 23:31:17 已清除木马程序 Backdoor.Win32.Agent.aaua G:\Temp\Virus\vir.rar/vir\AppCom51.dll
2009/1/9 23:31:17 已清除病毒 Worm.Win32.Downloader.yq G:\Temp\Virus\vir.rar/vir\29.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除病毒 Worm.Win32.Downloader.yq G:\Temp\Virus\vir.rar/vir\28.exe//PE_Patch//UPack
2009/1/9 23:31:17 已清除病毒 Worm.Win32.AutoRun.wwp G:\Temp\Virus\vir.rar
2009/1/9 23:31:17 已清除病毒 Worm.Win32.AutoRun.wwp G:\Temp\Virus\vir.rar/vir\AppCom9.dll//#

剩14个，To KL

[ 本帖最后由尤金卡巴斯基于 2009-1-9 23:44 编辑 ]

显示全部楼层 · 发表于 2009-1-9 23:42:03

C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\10.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\11.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\12.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\18.exe - probably a variant of Win32/Genetik trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\21.exe - Win32/Agent.OBH trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\22.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\23.exe - a variant of Win32/PSW.OnLineGames.NRI trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\25.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\26.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\27.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\28.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\29.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\50.exe - Win32/PSW.QQRob.NAQ trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\8.exe - probably a variant of Win32/Genetik trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\9.exe - a variant of Win32/PSW.OnLineGames.NRV trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\AppCom5.dll - Win32/TrojanClicker.VB.NFF trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\AppCom51.dll - a variant of Win32/Agent.DKR trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\AppCom6.dll - a variant of Win32/Agent.OCX trojan
C:\Users\ekincheng\Desktop\vir.rar » RAR » vir\AppCom7.dll » NSIS » 76.exe » NSIS » 龏

显示全部楼层 · 发表于 2009-1-9 23:45:02

TO KL 是什么意思?

显示全部楼层 · 发表于 2009-1-9 23:45:37

Begin scan in 'D:\vir.rar'
D:\vir.rar
D:\vir.rar
[0] Archive type: RAR
--> vir\18.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> vir\21.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
--> vir\22.exe
   [DETECTION] Is the TR/Thief.Magania.B Trojan
   --> vir\23.exe
      --> Object
      [2] Archive type: RSRC
      --> Object
         [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
   --> vir\25.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
   --> vir\28.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
   --> vir\29.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
--> vir\50.exe
   [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
--> vir\8.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
   --> vir\9.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
--> vir\AppCom5.dll
   [DETECTION] Contains a recognition pattern of the (harmful) BDS/Dolan.B back-door program
--> vir\AppCom7.dll
   [DETECTION] Contains recognition pattern of the ADSPY/AdMedia.ED.185 adware or spyware
   --> vir\AppCom8.dll
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    A backup was created as '49d970d1.qua'  ( QUARANTINE )
[NOTE]    The file was deleted!
AVIRA miss 12
TO AVIRA

显示全部楼层 · 发表于 2009-1-9 23:46:08

上报卡巴斯基实验室

[ 本帖最后由尤金卡巴斯基于 2009-1-9 23:47 编辑 ]

显示全部楼层 · 发表于 2009-1-10 00:02:23

收集一下网址....

显示全部楼层 · 发表于 2009-1-10 04:05:48

Hello,

13.exe_ - Trojan-Downloader.HTML.IFrame.wz,
20.exe_ - Trojan-Downloader.HTML.IFrame.xa,
26.exe_, 27.exe_ - Worm.Win32.Downloader.yv,
AppCom6.dll - Trojan.Win32.StartPage.dfo,
s.exe_ - Trojan-Downloader.HTML.IFrame.xb,
se.exe_ - Trojan-Downloader.HTML.IFrame.xc,
sr.exe_ - Trojan-Downloader.HTML.IFrame.xd,
sy.exe_ - Trojan-Downloader.HTML.IFrame.xf,
ts.exe_ - Trojan-Downloader.HTML.IFrame.xe

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Ostroverkhov Vladimir
Virus Analyst, Kaspersky Lab.

Ph.: +7(495) 797-8700
E-mail: newvirus@kaspersky.com
http://www.kaspersky.com http://www.viruslist.com

显示全部楼层 · 发表于 2009-1-10 19:39:51

01.10更新：
不报的都已TO KL

显示全部楼层 · 发表于 2009-1-10 21:53:41

File ID  Filename Size (Byte) Result
25229180  文件x5.rar 1000 Byte OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25229181  1.exe  351 Byte  UNDER ANALYSIS
25229182  ts.exe  102 Byte  UNDER ANALYSIS
-------------------------------------------------------------------to 红伞。

[病毒样本] 一列表

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 9楼 sbbdms 的帖子