下载者下载的木马数十个

显示全部楼层 · 发表于 2009-3-3 10:05:16

下载者下载的木马数十个

显示全部楼层 · 发表于 2009-3-3 10:23:07

咖啡8.7

显示全部楼层 · 发表于 2009-3-3 10:27:23

MISS 26 to VB

显示全部楼层 · 发表于 2009-3-3 10:27:37

miss 17
To McAfee

显示全部楼层 · 发表于 2009-3-3 10:37:55

2009-3-3 10:38:28 1236047908 Administrator 272 Sign of "NSIS:Cinmus [Adw]" has been found in "d:\我的文档\桌面\新建文件夹\files\a10.exe\nsis.hdr" file.
2009-3-3 10:38:33 1236047913 Administrator 272 Sign of "Win32:Cinmus-AU [Adw]" has been found in "d:\我的文档\桌面\新建文件夹\files\a10.exe\$TEMP\$TEMP\152.exe\$[34]\$R0" file.
2009-3-3 10:38:34 1236047914 Administrator 272 Sign of "Win32:BHO-VA [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\a2.exe\$[32]\80.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Delf-FZG [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\a4.exe\[UPX]\[Embedded_R#FILE]" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\a6.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\a8.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:IRCBot-DKK [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\a9.exe\[UPX]\[Embedded_I#01868]\[Embedded_I#2200]" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:JunkPoly [Cryp]" has been found in "d:\我的文档\桌面\新建文件夹\files\cj.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G10.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G11.exe\[UPX]\[Embedded_I#04060]" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G12.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G13.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Spyware-gen [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\G14.exe" file.
2009-3-3 10:38:35 1236047915 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G2.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G3.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G4.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G5.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\G6.exe\[UPX]\[Embedded_I#4060]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\G8.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\G9.exe\[UPX]\[Embedded_I#4060]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:Trojan-gen {Other}" has been found in "d:\我的文档\桌面\新建文件夹\files\ko.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M1.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M10.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M11.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M12.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M13.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M16.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M2.exe\[UPX]\[Embedded_R#0607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M3.exe\[UPX]\[Embedded_R#04058]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M4.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M6.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M7.exe" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-FFZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M8.exe\[UPX]\[Embedded_R#607c]" file.
2009-3-3 10:38:36 1236047916 Administrator 272 Sign of "Win32:OnLineGames-DBZ [Trj]" has been found in "d:\我的文档\桌面\新建文件夹\files\M9.exe" file.
2009-3-3 10:38:37 1236047917 Administrator 272 Sign of "Win32:Rootkit-gen [Rtk]" has been found in "d:\我的文档\桌面\新建文件夹\files\sk.exe\[UPX]\[Embedded_Ia#01690]\[Embedded_Ia#a490]" file.

显示全部楼层 · 发表于 2009-3-3 12:55:53

eset清空

显示全部楼层 · 发表于 2009-3-3 19:15:44

miss to rs

显示全部楼层 · 发表于 2009-3-3 23:45:59

2009/3/3 23:45:08 已清除广告软件 not-a-virus:AdWare.Win32.BHO.ftx G:\Temp\Virus\files.rar/files\files\a2.exe//data0003
2009/3/3 23:45:08 已清除广告软件 not-a-virus:AdWare.Win32.Agent.kyn G:\Temp\Virus\files.rar/files\files\G13.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除广告软件 not-a-virus:AdWare.Win32.Agent.kyn G:\Temp\Virus\files.rar/files\files\G12.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除广告软件 not-a-virus:AdWare.Win32.AdMedia.ed G:\Temp\Virus\files.rar/files\files\a10.exe
2009/3/3 23:45:08 已清除木马程序 Trojan.Win32.Qhost.lgk G:\Temp\Virus\files.rar/files\files\a9.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan.Win32.BHO.nbg G:\Temp\Virus\files.rar/files\files\G5.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan.Win32.Agent.btbn G:\Temp\Virus\files.rar/files\files\ko.exe//PE_Patch//UPack
2009/3/3 23:45:08 已清除木马程序 Trojan.Win32.Agent.btaa G:\Temp\Virus\files.rar/files\files\G9.exe
2009/3/3 23:45:08 已清除木马程序 Trojan.Win32.Agent.bsfx G:\Temp\Virus\files.rar/files\files\G6.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-Spy.Win32.Small.caq G:\Temp\Virus\files.rar/files\files\G14.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-PSW.Win32.QQPass.ggh G:\Temp\Virus\files.rar/files\files\G10.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-PSW.Win32.QQPass.ggd G:\Temp\Virus\files.rar/files\files\G4.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-PSW.Win32.QQPass.ggd G:\Temp\Virus\files.rar/files\files\G3.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.bkwq G:\Temp\Virus\files.rar/files\files\G8.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.bkwh G:\Temp\Virus\files.rar/files\files\G11.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-GameThief.Win32.OnLineGames.bkus G:\Temp\Virus\files.rar/files\files\G2.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-Dropper.Win32.Agent.aicc G:\Temp\Virus\files.rar/files\files\sk.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-Dropper.Win32.Agent.aiad G:\Temp\Virus\files.rar/files\files\a4.exe//UPX
2009/3/3 23:45:08 已清除木马程序 Trojan-Downloader.Win32.Small.ailr G:\Temp\Virus\files.rar/files\files\a6.exe//PE_Patch//UPack
2009/3/3 23:45:08 已清除木马程序 Backdoor.Win32.Small.hnj G:\Temp\Virus\files.rar/files\files\cj.exe
2009/3/3 23:45:08 已清除木马程序 Backdoor.Win32.Agent.fjs G:\Temp\Virus\files.rar/files\files\a8.exe//PE_Patch//UPack
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M9.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M7.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M6.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M4.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M2.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M13.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M12.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M11.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aca G:\Temp\Virus\files.rar/files\files\M1.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aby G:\Temp\Virus\files.rar/files\files\M8.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\files.rar/files\files\M3.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\files.rar/files\files\M16.exe//PE_Patch.UPX//UPX
2009/3/3 23:45:08 已清除病毒 Worm.Win32.Downloader.aay G:\Temp\Virus\files.rar/files\files\M10.exe//PE_Patch.UPX//UPX

Miss1,To KL

显示全部楼层 · 发表于 2009-3-3 23:54:28

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\files'
C:\Documents and Settings\Administrator\桌面\files\files\a1.exe
   [DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a10.exe
[DETECTION] Contains recognition pattern of the ADSPY/AdMedia.ED.313 adware or spyware
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a2.exe
[0] Archive type: NSIS
--> ProgramFilesDir/80.exe
   [DETECTION] Contains recognition pattern of the ADSPY/Cin.FBT.53248 adware or spyware
[DETECTION] Is the TR/Obfuscated.KU.246 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a4.exe
[DETECTION] Is the TR/ATRAPS.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a6.exe
   [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a8.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.28501 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.36725 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.30712 program
      --> Object
      [DETECTION] Contains recognition pattern of the SPR/Hacktool.92719 program
      --> Object
         [DETECTION] Is the TR/Drop.Spy.Pca.A.2 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\a9.exe
   [DETECTION] Is the TR/Dropper.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\cj.exe
[DETECTION] Contains a recognition pattern of the (harmful) BDS/Small.hnj back-door program
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G10.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.49152.9 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G11.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.OnlineGames.bkwh.4 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G12.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.53248.81 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G13.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.49152.15 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G14.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.BHO.AU.1 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G2.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.53248.51 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G3.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.45056.21 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G4.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.BHO.AX Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G5.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/BHO.nbr Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G6.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Agent.abpp Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G8.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/PSW.53248.80 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\G9.exe
   --> Object
      [1] Archive type: RSRC
      --> Object
      [DETECTION] Is the TR/Spy.Agent.abqv.1 Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\ko.exe
   [DETECTION] Is the TR/Downloader.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M1.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M10.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M11.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M12.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M13.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M16.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M2.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M3.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M4.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M6.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M7.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M8.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\M9.exe
[DETECTION] Is the TR/Spy.Gen Trojan
[NOTE]    The file was deleted!
C:\Documents and Settings\Administrator\桌面\files\files\sk.exe
   [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
[NOTE]    The file was deleted!

End of the scan: 星期二 2009年3月3日  23:53
Used time: 00:24 Minute(s)

The scan has been done completely.

   2 Scanning directories
   40 Files were scanned
   40 viruses and/or unwanted programs were found
   0 Files were classified as suspicious:
   35 files were deleted
   0 files were repaired
   0 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   0 Files not concerned
   2 Archives were scanned
   0 Warnings

显示全部楼层 · 发表于 2009-3-4 00:04:31

Hello,

a1.exe_ - Trojan-PSW.Win32.QQPass.giw

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.

Regards, Andrey Ladikov
Virus Analyst, Kaspersky Lab.

10/1, 1st Volokolamsky Proezd, Moscow, 123060, Russia
Tel./Fax: + 7 (495) 797 8700
http://www.kaspersky.com http://www.viruslist.com

[病毒样本] 下载者下载的木马数十个

本帖子中包含更多资源

本帖子中包含更多资源