31个可疑样本

chima287

由于论坛限制了附文件大少，我只好把文件从别的论坛先下载，关门杀毒软件，解压文件，然后合并,我第一次用分割软件，不知道为什么，要全都解压才能查出有31个可疑样本，如果直接查杀只找到23个可疑样本，说找不到下一个压缩文件卷标

请大家教教我！谢谢

[ 本帖最后由 chima287 于 2009-3-2 14:34 编辑 ]

ledled

MISS 16 to VB

kingmuro

红心王子

2009-3-2        15:01:42        1235977302        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new27.exe\[UPX]" file.  
2009-3-2        15:01:45        1235977305        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new27.exe\[Embedded_I#2204]" file.  
2009-3-2        15:01:48        1235977308        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new28.exe\[UPX]" file.  
2009-3-2        15:01:48        1235977308        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new28.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:48        1235977308        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new29.exe\[UPX]" file.  
2009-3-2        15:01:48        1235977308        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new29.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:Delf-FZG [Trj]" has been found in "d:\我的文档\桌面\vir\new30.exe\[UPX]\[Embedded_R#FILE]" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\vir\new31.exe" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\vir\new1.exe" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new2.exe\[UPX]\[Embedded_R#607c]" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new3.exe\[UPX]" file.  
2009-3-2        15:01:52        1235977312        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new3.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\vir\new4.exe\[FSG]\[Embedded_I#01108]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new5.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new6.exe\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new6.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new7.exe\[UPX]\[Embedded_R#607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new8.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new9.exe\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new9.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new10.exe\[UPX]\[Embedded_R#607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new11.exe\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new11.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new12.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new13.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new14.exe\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new14.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\vir\new15.exe" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new16.exe\[UPX]\[Embedded_R#607c]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new17.exe\[UPX]" file.  
2009-3-2        15:01:53        1235977313        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new17.exe\[Embedded_I#2204]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new18.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\vir\new19.exe" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new21.exe\[UPX]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new21.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new22.exe\[UPX]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new22.exe\[Embedded_I#2204]\[UPX]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\vir\new23.exe\[FSG]\[Embedded_I#0d000]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\vir\new24.exe\[UPX]\[Embedded_R#0607c]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\vir\new25.exe" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new26.exe\[UPX]" file.  
2009-3-2        15:01:54        1235977314        Administrator        2268        Sign of "Win32:Agent-ACMH [Drp]" has been found in "d:\我的文档\桌面\vir\new26.exe\[Embedded_I#2204]\[UPX]" file.

Palkia

miss to rs

mikzh

C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new1.exe - Win32/PSW.OnLineGames.NSU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new10.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new11.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new12.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new13.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new14.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new15.exe - Win32/PSW.OnLineGames.NSU 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new16.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new17.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new18.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new19.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new2.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new20.exe - Win32/PSW.Legendmir.NGG 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new21.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new22.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new23.exe - Win32/TrojanDownloader.Agent.OOB 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new24.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new25.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new26.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new27.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new28.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new29.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new3.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new30.exe - 可能是 Win32/PSW.Delf.NLZ 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new31.exe - Win32/PSW.Delf.NMX 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new4.exe - Win32/TrojanDownloader.Agent.OQW 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new5.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new6.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new7.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new8.exe - Win32/PSW.OnLineGames.NTM 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\样本下载\0302\31\new9.exe - Win32/PSW.OnLineGames.NRD 特洛伊木马

尤金卡巴斯基

2009/3/2 22:47:06        已删除        木马程序 Trojan.Win32.Small.bub        G:\Temp\Virus\31\new4.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan.Win32.Small.bub        G:\Temp\Virus\31\new4.exe//FSG               
2009/3/2 22:47:06        已删除        木马程序 Trojan-PSW.Win32.QQPass.ghy        G:\Temp\Virus\31\new30.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-PSW.Win32.QQPass.ghy        G:\Temp\Virus\31\new30.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        木马程序 Trojan-PSW.Win32.QQPass.gfd        G:\Temp\Virus\31\new31.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.WOW.frl        G:\Temp\Virus\31\new1.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.WOW.fjo        G:\Temp\Virus\31\new15.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.WOW.fjo        G:\Temp\Virus\31\new15.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvs        G:\Temp\Virus\31\new11.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvr        G:\Temp\Virus\31\new17.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvq        G:\Temp\Virus\31\new22.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvp        G:\Temp\Virus\31\new27.exe               
2009/3/2 22:47:07        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvn        G:\Temp\Virus\31\new6.exe               
2009/3/2 22:47:07        已删除        木马程序 Trojan-GameThief.Win32.Magania.avvn        G:\Temp\Virus\31\new6.exe//PE_Patch.UPX//UPX//data0000//PE_Patch.UPX//UPX               
2009/3/2 22:47:07        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqv        G:\Temp\Virus\31\new9.exe               
2009/3/2 22:47:07        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqv        G:\Temp\Virus\31\new9.exe//PE_Patch.UPX//UPX//data0000               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqu        G:\Temp\Virus\31\new28.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqu        G:\Temp\Virus\31\new28.exe//PE_Patch.UPX//UPX//data0000               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqt        G:\Temp\Virus\31\new14.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-GameThief.Win32.Magania.avqt        G:\Temp\Virus\31\new14.exe//PE_Patch.UPX//UPX//data0000               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Dropper.Win32.Agent.ahgk        G:\Temp\Virus\31\new21.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Dropper.Win32.Agent.ahgk        G:\Temp\Virus\31\new21.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Dropper.Win32.Agent.adxr        G:\Temp\Virus\31\new23.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Dropper.Win32.Agent.adxr        G:\Temp\Virus\31\new23.exe//FSG               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Downloader.Win32.Agent.bisq        G:\Temp\Virus\31\new3.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Downloader.Win32.Agent.bisq        G:\Temp\Virus\31\new3.exe//PE_Patch.UPX//UPX//data0000//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Downloader.Win32.Agent.bisq        G:\Temp\Virus\31\new29.exe               
2009/3/2 22:47:06        已删除        木马程序 Trojan-Downloader.Win32.Agent.bisq        G:\Temp\Virus\31\new29.exe//PE_Patch.UPX//UPX//data0000//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aca        G:\Temp\Virus\31\new25.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aca        G:\Temp\Virus\31\new25.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aca        G:\Temp\Virus\31\new19.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aca        G:\Temp\Virus\31\new19.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new8.exe               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new8.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new5.exe               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new5.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new18.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new18.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new10.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aby        G:\Temp\Virus\31\new10.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new2.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new2.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new16.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new16.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new13.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aaz        G:\Temp\Virus\31\new13.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aay        G:\Temp\Virus\31\new7.exe               
2009/3/2 22:47:07        已删除        病毒 Worm.Win32.Downloader.aay        G:\Temp\Virus\31\new7.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aat        G:\Temp\Virus\31\new24.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aat        G:\Temp\Virus\31\new24.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aat        G:\Temp\Virus\31\new12.exe               
2009/3/2 22:47:06        已删除        病毒 Worm.Win32.Downloader.aat        G:\Temp\Virus\31\new12.exe//PE_Patch.UPX//UPX               
2009/3/2 22:47:06        已隔离        病毒 HEUR:Trojan.Win32.Generic        G:\Temp\Virus\31\new26.exe               
2009/3/2 22:47:06        已隔离        病毒 HEUR:Trojan.Win32.Generic        G:\Temp\Virus\31\new26.exe//PE_Patch.UPX//UPX//data0000               

Signature Miss 2,To KL

碧水寒潭