[病毒样本] 23X

显示全部楼层 · 发表于 2009-2-13 12:46:29

From a Virus list biao.txt
23X

显示全部楼层 · 发表于 2009-2-13 12:47:51

NOD清空
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\10[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\11[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\12[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\13[1].exe - Win32/PSW.OnLineGames.NUI 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\14[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\15[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\16[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\17[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\18[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\19[1].exe - Win32/PSW.WOW.DZI 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\1[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\20[1].exe - 可能是 Win32/PSW.WOW.DZI 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\21[1].exe - Win32/PSW.OnLineGames.NTP 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\22[1].exe - Win32/PSW.WOW.DZI 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\23[1].exe - Win32/PSW.Legendmir.NGG 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\2[1].exe - Win32/PSW.OnLineGames.NRV 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\3[1].exe - Win32/PSW.OnLineGames.NVJ 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\4[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\5[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马的变种 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\6[1].exe - Win32/PSW.OnLineGames.OEP 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\7[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\8[1].exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 - 是已删除对象的一部分
C:\Documents and Settings\Administrator\桌面\23X.rar > RAR > 23X\9[1].exe - Win32/TrojanDropper.Agent.NPO 特洛伊木马 - 是已删除对象的一部分

显示全部楼层 · 发表于 2009-2-13 12:48:51

avast killed 22，missed 1

2009-2-13 12:47:49 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\10[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\11[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\12[1].exe\[UPX]\[Embedded_R#607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\13[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\14[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\15[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\16[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\17[1].exe\[UPX]\[Embedded_R#607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\18[1].exe\[UPX]\[Embedded_R#607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\19[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\1[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\21[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\22[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\23[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\2[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\3[1].exe" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\4[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\5[1].exe\[UPX]\[Embedded_R#607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\6[1].exe\[UPX]\[Embedded_I#4060]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\7[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:52 Administrator 964 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\8[1].exe\[UPX]\[Embedded_R#0607c]" file.
2009-2-13 12:47:53 Administrator 964 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\23X\23X\9[1].exe" file.

显示全部楼层 · 发表于 2009-2-13 12:50:56

瑞星23个

但文件夹里还有个楼上的那个样本，不知怎么回事~

上报吧

[ 本帖最后由江湖的fans 于 2009-2-13 12:53 编辑 ]

显示全部楼层 · 发表于 2009-2-13 12:52:34

AVIRA KILL ALL

显示全部楼层 · 发表于 2009-2-13 13:02:13

好多启发

显示全部楼层 · 发表于 2009-2-13 13:10:34

9 MISS to VB

显示全部楼层 · 发表于 2009-2-13 13:17:56

DR.WEB MISS 4個
TO

显示全部楼层 · 发表于 2009-2-13 13:55:02

卡巴下次更新就可以查20[1].exe

显示全部楼层 · 发表于 2009-2-13 14:40:10

[病毒样本] 23X

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

回复 1楼 935623508 的帖子

本帖子中包含更多资源

浏览过的版块