[病毒样本] 26x

显示全部楼层 · 发表于 2009-2-23 20:27:12

下载列表

显示全部楼层 · 发表于 2009-2-23 20:38:03

F:\virus.rar » RAR » 18.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 10.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 23.exe - Win32/Agent.NVR trojan
F:\virus.rar » RAR » 11.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 12.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 13.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 14.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 19.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 15.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 16.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 20.exe - a variant of Win32/PSW.OnLineGames.NUO trojan
F:\virus.rar » RAR » 25.exe » NSIS » dzreg.txt - Win32/Adware.Agent.NLF application
F:\virus.rar » RAR » 25.exe » NSIS » imapi.txt - Win32/Adware.Agent.NLF application
F:\virus.rar » RAR » 25.exe » NSIS » install.exe - Win32/Adware.Agent.NLF application
F:\virus.rar » RAR » 4.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 5.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 6.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 7.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 8.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 17.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 22.exe - a variant of Win32/PSW.Delf.NMX trojan
F:\virus.rar » RAR » 24.exe - probably a variant of Win32/Genetik trojan
F:\virus.rar » RAR » 9.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 21.exe - probably a variant of Win32/PSW.OnLineGames.NSU trojan
F:\virus.rar » RAR » 3.exe - a variant of Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 2.exe - Win32/PSW.OnLineGames.NTM trojan
F:\virus.rar » RAR » 0.exe - Win32/TrojanDropper.Agent.NVD trojan
F:\virus.rar » RAR » 1.exe - probably a variant of Win32/PSW.WOW.DZI trojan
Number of scanned objects: 31
Number of threats found: 28

显示全部楼层 · 发表于 2009-2-23 20:53:32

好像很老的一个下载者，记得一个QQ中奖和一起来音乐。
24.exe微点无反应，其他全部查杀。

显示全部楼层 · 发表于 2009-2-23 20:53:38

MISS 14 to VB

显示全部楼层 · 发表于 2009-2-23 21:22:38

4 to rs

显示全部楼层 · 发表于 2009-2-23 22:01:57

2009/2/23 21:59:02 已清除木马程序 Trojan.Win32.Runner.ck G:\Temp\Virus\virus.rar/0.exe
2009/2/23 21:59:02 已清除木马程序 Trojan-PSW.Win32.QQPass.gdf G:\Temp\Virus\virus.rar/22.exe
2009/2/23 21:59:02 已清除木马程序 Trojan-GameThief.Win32.WOW.fok G:\Temp\Virus\virus.rar
2009/2/23 21:59:02 已清除木马程序 Trojan-GameThief.Win32.WOW.fok G:\Temp\Virus\virus.rar/1.exe
2009/2/23 21:59:02 已清除木马程序 Trojan-GameThief.Win32.WOW.flo G:\Temp\Virus\virus.rar/20.exe
2009/2/23 21:59:02 已清除木马程序 Packed.Win32.Klone.ar G:\Temp\Virus\virus.rar/23.exe
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abv G:\Temp\Virus\virus.rar/8.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abq G:\Temp\Virus\virus.rar/5.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abj G:\Temp\Virus\virus.rar/7.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abj G:\Temp\Virus\virus.rar/6.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abj G:\Temp\Virus\virus.rar/4.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.abj G:\Temp\Virus\virus.rar/10.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/3.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/9.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/19.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/13.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/12.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aaz G:\Temp\Virus\virus.rar/18.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\virus.rar/2.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\virus.rar/16.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\virus.rar/15.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\virus.rar/14.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\virus.rar/11.exe//PE_Patch.UPX//UPX
2009/2/23 21:59:02 已清除病毒 Worm.Win32.Downloader.aao G:\Temp\Virus\virus.rar/17.exe//PE_Patch.UPX//UPX

Miss 3,To KL

显示全部楼层 · 发表于 2009-2-23 22:08:08

[Scanning : C:\Test]

C:\Test\virus.rar<RAR>:14.exe<UPX>:14.exe <- Worm.Aay : No action
C:\Test\virus.rar<RAR>:17.exe<UPX>:17.exe<DLLRES>:res0.exe <- Trojan.Gamethief.Onlinegames.KKx : No action
C:\Test\virus.rar<RAR>:0.exe <- Trojan.Runner.Cg : No action

Scanned objects : 69

Infected objects : 3

显示全部楼层 · 发表于 2009-2-23 22:10:30

to lab

[ 本帖最后由 allinwonderi 于 2009-2-23 22:12 编辑 ]

显示全部楼层 · 发表于 2009-2-23 22:13:58

KIS8.0 Kill

2009-2-23 22:13:00 http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX Internet Explorer 拒绝: Worm.Win32.Downloader.aaz
2009-2-23 22:13:00 http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX Internet Explorer 检测到威胁: Worm.Win32.Downloader.aaz

显示全部楼层 · 发表于 2009-2-23 22:35:08

Hello,

24.exe_ - Backdoor.Win32.Agent.aebs,
25.exe_ - Trojan.Win32.StartPage.djg

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] 26x

本帖子中包含更多资源

ArcaVir 2009

Norman Virus Control

本帖子中包含更多资源