1x 26x病毒样本

FLogo

我还是把另外的26个病毒样本打包上报吧！不能查杀的，请上报！（kaba  all kill）

[ 本帖最后由 FLogo 于 2009-1-15 11:10 编辑 ]

FLogo

Hello,

gr.exe_ - Trojan-Downloader.Win32.Agent.bddc,
new4.exe_ - Trojan.Win32.Agent2.cp

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

new14.exe_ - Trojan-Downloader.Win32.Small.airi

This file is already detected. Please update your antivirus bases.

>
>
> 3x newvirus

Please quote all when answering.
-----------------
Regards, Davidow Dmitriy
Virus Analyst, Kaspersky Lab.

电影结束了

gr.exe
        在压缩档案里: E:\收集区\gr.zip
        Status: 已发现病毒
        病毒: Rootkit.Agent.AIWN (BD 引擎)

kingmuro

双子星

谢谢楼主哟，学习了。

乐透

红伞
[0] Archive type: ZIP
--> gr.exe
[DETECTION] Is the TR/Spy.Gen Trojan

xyao

avast!

08红伞威点

原帖由 乐透 于 2009-1-15 10:41 发表
红伞
[0] Archive type: ZIP
--> gr.exe
[DETECTION] Is the TR/Spy.Gen Trojan

Start of the scan: 2009年1月15日  16:33
Starting the file scan:
Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\new1.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f54a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new10.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '49e5f54b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new11.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48812894.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new12.exe
      [DETECTION] Is the TR/Onlinegames.bkpe Trojan
    [NOTE]      A backup was created as '49e5f54c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new13.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48812895.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new14.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f54d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new15.exe
    [DETECTION] Is the TR/Thief.Magania.B Trojan
    [NOTE]      A backup was created as '48812896.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new16.exe
      [DETECTION] Is the TR/Onlinegames.bkpg Trojan
    [NOTE]      A backup was created as '49e5f54f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new17.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '48812888.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new18.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '49e5f54e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new19.exe
      [DETECTION] Is the TR/PSW.Online.apyi Trojan
    [NOTE]      A backup was created as '48812897.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new2.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f540.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new20.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f551.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new21.exe
      [DETECTION] Is the TR/PSW.Online.apyf Trojan
    [NOTE]      A backup was created as '4881288a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new22.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f550.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new23.exe
      [DETECTION] Is the TR/Drop.Agent.Zlo.1 Trojan
    [NOTE]      A backup was created as '48812889.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new24.exe
      [DETECTION] Is the TR/PSW.Online.apyn Trojan
    [NOTE]      A backup was created as '49e5f552.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new25.exe
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      A backup was created as '49e5f553.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new26.exe
    [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
    [NOTE]      A backup was created as '4881288c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new3.exe
      [DETECTION] Is the TR/PSW.Online.apyk Trojan
    [NOTE]      A backup was created as '49e5f555.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new4.exe
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4881288e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new5.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '4881288b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new6.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f554.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new7.exe
    [DETECTION] Is the TR/Thief.Magania.B Trojan
    [NOTE]      A backup was created as '4881288d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new8.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49e5f557.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\new9.exe
      [DETECTION] Is the TR/PSW.Online.apyb Trojan
    [NOTE]      A backup was created as '48812880.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
End of the scan: 2009年1月15日  16:33
Used time: 00:13 Minute(s)
The scan has been done completely.
      1 Scanning directories
     26 Files were scanned
     26 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     26 files were deleted
      0 files were repaired
     26 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     26 Notes--------------------------------------------红伞S版(库V7.01.01.118)清空。