某木马下载物以及部分生成物

webweb

如上，样本区的一个母马
质量不怎么高啊  被红伞弄的还剩余1个
此战 虚拟机中的comodo被弄得无法开机启动 不过没有被破坏

kingsheet

卡巴
检测到：木马程序 Trojan-GameThief.Win32.Magania.bfgb        URL: http://bbs.kafan.cn/attachment.p ... //PE_Patch.UPX//UPX

liang_news

nod32秒杀！

272513421

卡巴直接干掉

aerbeisi

File scanned: E:\123\xx22[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx23[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx24[1].exe - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\xx25[1].exe - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\xx26[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx27[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx28[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx29[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx30[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx31[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx32[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx33[1].exe - SIGNATURE FOUND "Trojan.Rootkit"
File scanned: E:\123\704C3595.dll - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\ctfmen.exe - SIGNATURE FOUND "Trojan-GameThief.Win32.Nilage"
File scanned: E:\123\EN7hzSreCat8.dll - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\extext438437t.exe - SIGNATURE FOUND "Trojan.Win32.Qhost"
File scanned: E:\123\hhnt2pBK.dll - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\U4aTWwQnudZgwhtk.dll - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\UnsrA8Hec.dll - SIGNATURE FOUND "Generic.Onlinegames"
File scanned: E:\123\xx12[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx13[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx14[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx15[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx16[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx17[1].exe - SIGNATURE FOUND "Trojan-Downloader.Agent.pmd.2"
File scanned: E:\123\xx18[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx19[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx20[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
File scanned: E:\123\xx21[1].exe - SIGNATURE FOUND "Trojan-PWS.Win32.LdPinch"
10:06:2009 12:27:53 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 0
Files scanned: 30
Virus found: 29
----------------------------------------------------

linkak

正在扫描日志
病毒库版本: 4142 (20090609)
日期: 2009/6/10  时间: 12:31:33
已扫描的磁盘、文件夹和文件: D:\virus\123
D:\virus\123\123\704C3595.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\CJPtNyJ6HWTgWWJdUe.dll - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\ctfmen.exe - Win32/VB.NZV 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\EN7hzSreCat8.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\extext438437t.exe - Win32/TrojanDownloader.Agent.OZH 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\hhnt2pBK.dll - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\U4aTWwQnudZgwhtk.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\UnsrA8Hec.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx12[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx13[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx14[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx15[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx16[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx17[1].exe - Win32/PSW.OnLineGames.NUO 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx18[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx19[1].exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx20[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx21[1].exe - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx22[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx23[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx24[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx25[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx26[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx27[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx28[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx29[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx30[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx31[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx32[1].exe - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\virus\123\123\xx33[1].exe - 可能是 Win32/PSW.OnLineGames.NZF 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
已扫描的对象数: 30
发现的威胁数: 30
已清除对象数:30
完成时间: 12:31:36  总扫描时间: 3 秒 (00:00:03)

备注:
[1] 由于对象中仅包含病毒主体，因此已被删除。

悠柚

D:\TDDownload\123.part1.rar=]123\704C3595.dll Generic.Onlinegames.14.6F24DDFD Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\CJPtNyJ6HWTgWWJdUe.dll Generic.Onlinegames.14.980A5D3E Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\ctfmen.exe Gen:Trojan.Heur.3065153434 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\EN7hzSreCat8.dll Generic.Onlinegames.14.4D1CA8FD Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\extext438437t.exe Trojan.Downloader.Agent.ZAW Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\hhnt2pBK.dll Generic.Onlinegames.14.82311456 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\U4aTWwQnudZgwhtk.dll Generic.Onlinegames.14.3BE01101 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\UnsrA8Hec.dll Generic.Onlinegames.14.48E3A891 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx12[1].exe Generic.Onlinegames.14.45B66C66 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx13[1].exe Generic.Onlinegames.14.2857B9E3 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx14[1].exe Generic.Onlinegames.14.45CC1BE8 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx15[1].exe Generic.Onlinegames.14.4B4D07A2 Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx16[1].exe Generic.Onlinegames.14.0988D16F Move to quarantine failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx17[1].exe Trojan.Generic.1882569 Disinfect failed (archive could not be repacked)
D:\TDDownload\123.part1.rar=]123\xx18[1].exe Generic.Onlinegames.14.A2101AB4 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx19[1].exe Generic.Onlinegames.14.C4657049 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx20[1].exe Generic.Onlinegames.14.1DF2E1F8 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx21[1].exe Generic.Onlinegames.14.4876FCE2 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx22[1].exe Generic.Onlinegames.14.9615A647 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx23[1].exe Generic.Onlinegames.14.42273BD0 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx24[1].exe Generic.Onlinegames.14.EAFAA2FD Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx25[1].exe Generic.Onlinegames.14.F0F769C1 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx26[1].exe Generic.Onlinegames.14.DC45393C Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx27[1].exe Generic.Onlinegames.14.61D5EAFD Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx28[1].exe Generic.Onlinegames.14.D42D3393 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx29[1].exe Generic.Onlinegames.14.7331C584 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx30[1].exe Generic.Onlinegames.14.8CB1D663 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx31[1].exe Generic.Onlinegames.14.9ACD2805 Move to quarantine failed
D:\TDDownload\123.part1.rar=]123\xx32[1].exe Generic.Onlinegames.14.56A426A5 Move to quarantine failed

Love=卡巴+费尔

费尔全秒。

Panda 2010 miss 2

BING126

McAfee 全灭。。