犇牛最新地址 外加4x 【kaba miss 3x heur 1x】

幸福的猪猪

RT犇牛的更新下载点为：

hxxp://www.tywjj.com/new/new1.exe
.
.
hxxp://www.tywjj.com/new/new31.exe

hxxp://www1.tywjj.com/new/new16.exe
.
.
hxxp://www1.tywjj.com/new/new28.exe


hxxp://d.wixww.com/gr.exe

样本已全部打包上报！【kaba kill all】


另外4x是从某外挂论坛找到的！
p.s.   windows.rar是5.rar 的生成物！

[ 本帖最后由 幸福的猪猪 于 2009-3-3 07:37 编辑 ]

fortinet_kyle

FortiClient
new29.vxe - W32/Agent.BISQ!tr.dldr
new4.vxe - W32/Small.BUB!tr
new23.vxe - W32/Agent.ADXR!tr
new18.vxe - W32/Dloader.AAY!worm
new18(1).vxe - SPY/Magania
new7.vxe - W32/Agent.ADT!tr.dldr
new9.vxe - SPY/Magania
new5.vxe - Spy/Dloader
3.vxe
new16(1).vxe - Spy/ONLINEG
5.vxe
new23(1).vxe - W32/Agent.ADXR!tr
new20(1).vxe
gr.vxe - W32/Agent.BHMM!tr.dldr
new22.vxe - W32/Agent.BLMY!tr
new19.vxe - W32/Dloader.AAO!worm
new14.vxe - W32/OnLineGames.AS!tr.pws
new19(1).vxe - W32/Agent.ADT!tr.dldr
new28(1).vxe - W32/Agent.ADT!tr.dldr
new17(1).vxe - SPY/Magania
new13.vxe - Spy/Dloader
new10.vxe - Spy/Dloader
new30.vxe - W32/QQGame!tr.pws
new27.vxe - W32/QQGame!tr.pws
new25.vxe - PossibleThreat
new21.vxe - W32/PWS.AM!tr
new26.vxe - W32/OnlineGames.FHJ!tr.pws
new24(1).vxe - W32/Dloader.AAT!worm
new11.vxe - SPY/Magania
new28.vxe - W32/Agent.AHZZ!tr
new16.vxe - Spy/ONLINEG
new6.vxe - SPY/Magania
new15.vxe - W32/OnlineGames.WOW!tr.pws
new8.vxe - Spy/ONLINEG
new1.vxe - Spy/Gamania
new12.vxe - W32/Dloader.AAT!worm
new31.vxe - W32/QQPass.GFD!tr.pws
new2.vxe - Spy/Dloader
new21(1).vxe - PossibleThreat
new25(1).vxe - W32/Agent.ADT!tr.dldr
new26(1).vxe - W32/OnLineGames.AS!tr.pws
new20.vxe - Spy/OnLineGames
new27(1).vxe - W32/OnLineGames.AS!tr.pws
new22(1).vxe - SPY/Magania
new17.vxe - W32/Dloader.ABG!worm
heur.vxe
new24.vxe - PossibleThreat
new3.vxe - W32/OnLineGames.AS!tr.pws


上报~~

[ 本帖最后由 fortinet_kyle 于 2009-3-3 08:10 编辑 ]

嘉和

ZAV R9 只發現6個威脅......
new4.exe
new28.exe
new23.exe
new23(1).exe
new20.exe
new20(1).exe

ledled

MISS 25 to VB

sam.to

样本已全部打包上报！【kaba kill all】<-------------kill了沒有???

幸福的猪猪

犇牛病毒样本，kaba全部清除！（犇牛病毒样本全部打包就是方便论坛网友下载，要是遇到不能病毒源地址失效的时候，可以从附件下载）就是另外加的4x，过3个 启发1个 已发到kaba那边查杀！

[ 本帖最后由 幸福的猪猪 于 2009-3-3 08:55 编辑 ]

sam.to

这就是killed

kingmuro

咖啡8.7i共查出45个

leonfg

eset 报47 剩4个
C:\Documents and Settings\GUNDAM\桌面\5\5.exe - a variant of Win32/Advare.VrBrothers potentially unwanted application - action selection postponed until scan completion
C:\Documents and Settings\GUNDAM\桌面\1\heur.exe - a variant of Win32/Injector.I trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\gr.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new1.exe - Win32/PSW.OnLineGames.NSU trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new10.exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new11.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new12.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new13.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new14.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new15.exe - Win32/PSW.OnLineGames.NSU trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new16(1).exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new16.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new17(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new17.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new18(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new18.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new19(1).exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new19.exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new2.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new20(1).exe - a variant of Win32/PSW.Legendmir.NGG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new20.exe - a variant of Win32/PSW.Legendmir.NGG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new21(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new21.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new22(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new22.exe - Win32/Rootkit.Agent.NIU trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new23(1).exe - Win32/TrojanDownloader.Agent.OOB trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new23.exe - Win32/TrojanDownloader.Agent.OOB trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new24(1).exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new24.exe - Win32/PSW.OnLineGames.NTZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new25(1).exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new25.exe - Win32/PSW.OnLineGames.NTZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new26(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new26.exe - Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new27(1).exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new27.exe - Win32/PSW.Delf.NLZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new28(1).exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new28.exe - Win32/PSW.Delf.NMX trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new29.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new3.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new30.exe - probably a variant of Win32/PSW.Delf.NLZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new31.exe - a variant of Win32/PSW.Delf.NMX trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new4.exe - a variant of Win32/TrojanDownloader.Agent.OQW trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new5.exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new6.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new7.exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new8.exe - a variant of Win32/PSW.OnLineGames.NTM trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\TDDOWNLOAD\new9.exe - Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\5\5.exe - a variant of Win32/Advare.VrBrothers potentially unwanted application - deleted - quarantined

magic659117852

http://www.52pojie.cn/thread-19787-1-1.html

这有分析~