楼主: Sherry.ai
收起左侧

[病毒样本] Adware Virus DownLoader(释放并下载大量病毒-第290次更新)

  [复制链接]
悠柚
发表于 2009-6-27 08:59:36 | 显示全部楼层
Virus: Dropped:Application.Generic.67266, Gen:Trojan.Heur.PT.20B04F5F5F, Trojan.Adclicker.HG (Engine A), Win32:Agent-ACQC [Trj], Win32:Trojan-gen {Other} (2x), Win32:Agent-ADMW [Rtk] (2x), Win32:Adware-gen [Adw] (5x) (Engine B)

Virus found while downloading Web content.

Address: bbs.kafan.cn
Sherry.ai
 楼主| 发表于 2009-6-28 08:22:13 | 显示全部楼层
Update
Sherry.ai
 楼主| 发表于 2009-6-28 17:15:10 | 显示全部楼层
Update
kingmuro
头像被屏蔽
发表于 2009-6-28 17:24:10 | 显示全部楼层

KAV6.0

卡巴扫描28日102,103

已检测:木马程序 Trojan.Win32.BHO.uym        文件:D:\My Documents\桌面\test\dzh_2009v5(103).rar/43412F5680410EA58EA3089A92A6EF41.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX//stream//data0001
已检测:木马程序 Rootkit.Win32.Agent.ltw        文件:D:\My Documents\桌面\test\dzh_2009v5(103).rar/43412F5680410EA58EA3089A92A6EF41.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX//stream//data0002//PE_Patch.UPX//UPX
已检测:木马程序 Trojan-Dropper.Win32.Agent.auqq        文件:D:\My Documents\桌面\test\dzh_2009v5(103).rar/43412F5680410EA58EA3089A92A6EF41.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX//stream//data0004
已检测:木马程序 Trojan-Downloader.Win32.Agent.cgsa        文件:D:\My Documents\桌面\test\dzh_2009v5(103).rar/43412F5680410EA58EA3089A92A6EF41.exe//PE_Patch.Upolyx//PE_Patch.UPX//UPX//stream//data0006
已检测:木马程序 Trojan.Win32.BHO.uym        文件:D:\My Documents\桌面\test\dzh_2009v5(102).rar/394E87A92235B8EF0C81D0006EBB5A96.exe//stream//data0001
已检测:木马程序 Rootkit.Win32.Agent.ltw        文件:D:\My Documents\桌面\test\dzh_2009v5(102).rar/394E87A92235B8EF0C81D0006EBB5A96.exe//stream//data0002//PE_Patch.UPX//UPX
已检测:木马程序 Trojan-Dropper.Win32.Agent.auqq        文件:D:\My Documents\桌面\test\dzh_2009v5(102).rar/394E87A92235B8EF0C81D0006EBB5A96.exe//stream//data0004
已检测:木马程序 Trojan-Downloader.Win32.Agent.cgsa        文件:D:\My Documents\桌面\test\dzh_2009v5(102).rar/394E87A92235B8EF0C81D0006EBB5A96.exe//stream//data0006
已检测:木马程序 Trojan-Downloader.Win32.Agent.cgsa        文件:D:\My Documents\桌面\test\dzh_2009v5(102).rar/394E87A92235B8EF0C81D0006EBB5A96.exe//stream
kingmuro
头像被屏蔽
发表于 2009-6-28 17:25:34 | 显示全部楼层

drweb 6.28

43412F5680410EA58EA3089A92A6EF41.exe/data002/data003\data001;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002/data003;Trojan.NtRootKit.origin;;
data003;D:\My Documents\桌面\test\v;Container contains infected objects;;
43412F5680410EA58EA3089A92A6EF41.exe/data002/data004\data002;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002/data004;Probably DLOADER.Trojan;;
data004;D:\My Documents\桌面\test\v;Container contains infected objects;;
43412F5680410EA58EA3089A92A6EF41.exe/data002\data005;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002;Probably MULDROP.Trojan;;
43412F5680410EA58EA3089A92A6EF41.exe/data002\data007;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002;Trojan.DownLoader.origin;;
43412F5680410EA58EA3089A92A6EF41.exe/data002/data008\data007;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002/data008;Trojan.DownLoader.origin;;
43412F5680410EA58EA3089A92A6EF41.exe/data002/data008\data009;D:\My Documents\桌面\test\v\43412F5680410EA58EA3089A92A6EF41.exe/data002/data008;Trojan.DownLoader.origin;;
data008;D:\My Documents\桌面\test\v;Archive contains infected objects;;
data002;D:\My Documents\桌面\test\v;Archive contains infected objects;;
43412F5680410EA58EA3089A92A6EF41.exe;D:\My Documents\桌面\test\v;Container contains infected objects;;
394E87A92235B8EF0C81D0006EBB5A96.exe/data003\data001;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe/data003;Trojan.NtRootKit.origin;;
data003;D:\My Documents\桌面\test\v;Container contains infected objects;;
394E87A92235B8EF0C81D0006EBB5A96.exe/data004\data002;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe/data004;Probably DLOADER.Trojan;;
data004;D:\My Documents\桌面\test\v;Container contains infected objects;;
394E87A92235B8EF0C81D0006EBB5A96.exe\data005;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe;Probably MULDROP.Trojan;;
394E87A92235B8EF0C81D0006EBB5A96.exe\data007;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe;Trojan.DownLoader.origin;;
394E87A92235B8EF0C81D0006EBB5A96.exe/data008\data007;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe/data008;Trojan.DownLoader.origin;;
394E87A92235B8EF0C81D0006EBB5A96.exe/data008\data009;D:\My Documents\桌面\test\v\394E87A92235B8EF0C81D0006EBB5A96.exe/data008;Trojan.DownLoader.origin;;
data008;D:\My Documents\桌面\test\v;Archive contains infected objects;;
394E87A92235B8EF0C81D0006EBB5A96.exe;D:\My Documents\桌面\test\v;Archive contains infected objects;;
Sherry.ai
 楼主| 发表于 2009-6-29 09:37:43 | 显示全部楼层
Update
悠柚
发表于 2009-6-29 09:48:48 | 显示全部楼层
D:\TDDownload\dzh_2009v5(104).rar/syster.exe         已检测: Backdoor.Win32.Farfly!IK
D:\TDDownload\dzh_2009v5(104).rar/small669.exe         已检测: Trojan.Win32.AgentBypass!IK
D:\TDDownload\dzh_2009v5(104).rar/lqbzse.exe         已检测: Virus.Win32.Agent!IK
D:\TDDownload\dzh_2009v5(104).rar/svehost.exe         已检测: Trojan-Downloader.Win32.Small!IK
fatezero
发表于 2009-6-29 09:58:49 | 显示全部楼层
病毒 Rootkit.Win32.Agent.ltw        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0002//PE_Patch.UPX//UPX               
木马程序 Trojan-Downloader.Win32.Agent.cgsa        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0006               
木马程序 Trojan-Downloader.Win32.Agent.cgye        E:\download\dzh_2009v5(104).rar               
木马程序 Trojan-Downloader.Win32.Agent.cgye        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0008               
木马程序 Trojan-Dropper.Win32.Agent.auqq        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0004               
木马程序 Trojan-Spy.Win32.Agent.awjb        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0007//data0009               
木马程序 Trojan.Win32.Agent.cnpw        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0007//data0008               
木马程序 Trojan.Win32.BHO.uzz        E:\download\dzh_2009v5(104).rar/DDED25A6240D7E0CD45DAE92BA30BCCB.exe//UPX//stream//data0001
Sherry.ai
 楼主| 发表于 2009-6-30 09:09:25 | 显示全部楼层
Update
眼镜王蛇
头像被屏蔽
发表于 2009-6-30 09:11:32 | 显示全部楼层
过江民~~~~
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-19 08:20 , Processed in 0.093536 second(s), 14 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表