查看: 3681|回复: 16
收起左侧

[病毒样本] 8x

[复制链接]
幸福的猪猪
发表于 2009-6-21 09:48:31 | 显示全部楼层 |阅读模式
某病毒运行之后的生成物

kaba miss,to kill

Hello,


aEUzzDyN4fVnJ.dll - Trojan-GameThief.Win32.Magania.bhza,

ed78ab9.dll - Trojan-GameThief.Win32.Magania.bhzb,

nMGKbjzrcYBeMU4E.fon - Trojan-GameThief.Win32.Magania.bhzc,

QVsqUWphY6xa.fon - Trojan-GameThief.Win32.Magania.bhzd,

sg9m[1].exe,
SGCQexe.exe - Trojan-GameThief.Win32.OnLineGames.bmgl,

SGCQdll.dat - Trojan-Downloader.Win32.VB.omu,

wFKHmQM7z.dll - Trojan-GameThief.Win32.Magania.bhze

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.



这次kaba回信的速度好快……

avira kill all.

[ 本帖最后由 幸福的猪猪 于 2009-6-21 09:56 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
Palkia
发表于 2009-6-21 09:52:51 | 显示全部楼层

8

F:\DL\TDDownload\aEUzzDyN4fVnJ.dll        TrojanPSW.GameOnline.dol.fcdr.dll        木马        还未处理
F:\DL\TDDownload\ed78ab9.dll        TrojanPSW.OnlineGame.yzq.vhfh.dll        木马        还未处理
F:\DL\TDDownload\nMGKbjzrcYBeMU4E.fon        TrojanPSW.OnlineGame.ywd.noxy.dll        木马        还未处理
F:\DL\TDDownload\QVsqUWphY6xa.fon        Trojan.Magania.gen.dll        木马        还未处理
F:\DL\TDDownload\sg9m[1].exe        Trojan.Cap961913.vjvh        木马        还未处理
F:\DL\TDDownload\SGCQdll.dat        TrojanPSW.GameOnline.dpn.gtku.dll        木马        还未处理
F:\DL\TDDownload\SGCQexe.exe        Trojan.Cap961913.vjvh        木马        还未处理
F:\DL\TDDownload\wFKHmQM7z.dll        TrojanPSW.GameOnline.dpm.gflc.dll        木马        还未处理
schumi小粉
发表于 2009-6-21 09:54:35 | 显示全部楼层
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDownload.zip > ZIP > TDDownload/aEUzzDyN4fVnJ.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDownload.zip > ZIP > TDDownload/ed78ab9.dll - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDownload.zip > ZIP > TDDownload/nMGKbjzrcYBeMU4E.fon - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDownload.zip > ZIP > TDDownload/QVsqUWphY6xa.fon - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\新建文件夹\TDDownload.zip > ZIP > TDDownload/wFKHmQM7z.dll - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
kalynn84
发表于 2009-6-21 10:27:36 | 显示全部楼层
2009-6-21 10:26:04        Ivan        2756        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\aEUzzDyN4fVnJ.dll\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\ed78ab9.dll\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\nMGKbjzrcYBeMU4E.fon\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\QVsqUWphY6xa.fon\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:OnLineGames-FKW [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\sg9m[1].exe\[UPX]\[Embedded_I#4064]\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:OnLineGames-FKW [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\SGCQdll.dat\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:OnLineGames-FKW [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\SGCQexe.exe\[UPX]\[Embedded_I#4064]\[UPX]" file.  
2009-6-21 10:26:08        Ivan        2756        Sign of "Win32:Agent-ACMH [Drp]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\wFKHmQM7z.dll\[UPX]" file.
Nerazzurri
发表于 2009-6-21 10:35:15 | 显示全部楼层

a-squared Free - Version 4.5

C:\Documents and Settings\acer\Desktop\TDDownload.zip/aEUzzDyN4fVnJ.dll         detected: Generic.Onlinegames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/ed78ab9.dll         detected: Generic.Onlinegames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/nMGKbjzrcYBeMU4E.fon         detected: Generic.Onlinegames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/QVsqUWphY6xa.fon         detected: Generic.Onlinegames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/sg9m[1].exe         detected: Trojan-GameThief.Win32.OnLineGames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/SGCQdll.dat         detected: Trojan-GameThief.Win32.WOW!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/SGCQexe.exe         detected: Trojan-GameThief.Win32.OnLineGames!IK
C:\Documents and Settings\acer\Desktop\TDDownload.zip/wFKHmQM7z.dll         detected: Generic.Onlinegames!IK
xieyun
发表于 2009-6-21 10:35:40 | 显示全部楼层
C:\Users\ZMH\Desktop\TDDownload.zip/aEUzzDyN4fVnJ.dll         已检测: Generic.Onlinegames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/ed78ab9.dll         已检测: Generic.Onlinegames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/nMGKbjzrcYBeMU4E.fon         已检测: Generic.Onlinegames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/QVsqUWphY6xa.fon         已检测: Generic.Onlinegames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/sg9m[1].exe         已检测: Trojan-GameThief.Win32.OnLineGames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/SGCQdll.dat         已检测: Trojan-GameThief.Win32.WOW!IK
C:\Users\ZMH\Desktop\TDDownload.zip/SGCQexe.exe         已检测: Trojan-GameThief.Win32.OnLineGames!IK
C:\Users\ZMH\Desktop\TDDownload.zip/wFKHmQM7z.dll         已检测: Generic.Onlinegames!IK
微星杀毒
发表于 2009-6-21 11:48:18 | 显示全部楼层
luxiao200888
发表于 2009-6-21 11:52:28 | 显示全部楼层
MSE miss 3
sam.to
发表于 2009-6-21 11:53:15 | 显示全部楼层
楼主有沒有看到我给你的pm?
NobleT
发表于 2009-6-21 12:11:19 | 显示全部楼层
norman 6
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-11-17 05:38 , Processed in 0.123843 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表