查看: 4576|回复: 18
收起左侧

[病毒样本] 42x

[复制链接]
Palkia
发表于 2009-8-20 23:30:51 | 显示全部楼层 |阅读模式
22.09.03.11

miss 2


卡巴有2个启发miss 7

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
woai_jolin
发表于 2009-8-20 23:35:50 | 显示全部楼层

eset miss 2

正在扫描日志
病毒库版本: 4351 (20090820)
日期: 2009-8-20  时间: 23:34:56
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\Administrator\桌面\DL
D:\Documents and Settings\Administrator\桌面\DL\081d2639e2c6509692485906c2da375d - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\0900a242f80eb7bf7f463a441f1e6066 - Win32/TrojanDownloader.Agent.OZH 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\0f25c33930004b6a98081f10ef34bb68 - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\12d8a5986e20c7ea963502f087a1b9b7 - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\13b3194902baf7d6880d731510cede1f - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\140445bfb48b815d6a69f23f5770a6fb - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\150e919309cee77f4f86fdd738ffad32 - Win32/StartPage.NJS 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\17617229ad5b9512e180354fdad508fb - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\18b925a486a13fe1cfcbf8ec56ec1dfc - Win32/TrojanClicker.Delf.NIG 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\2f4e746ea65faaf9c9e858158b83d50d - 可能是 Win32/Hupigon 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\390a6c429cc07b029e66dd26aa18fa0d - Win32/Tiny.NAH 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\3e4315dea49b152d22cbf6e1cc341f51 - Win32/Kryptik.NX 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\3e757fe3d6562f69341cbdad7351c8f2 - Win32/AutoRun.Agent.RN 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\5147afbf72236dc1edae888be934d399 - Win32/Induc.A 病毒 - 已删除 - 已隔离
D:\Documents and Settings\Administrator\桌面\DL\533ab607302c88fa16a04261d22fa207 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\5a362436d9378bec0f886879d3216558 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\601b3f2466bfa6989b9c7586b5ba54aa - Win32/AutoRun.Agent.EU 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\633dc2f737c330525430b75faecf6420 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\63776baf4ee0773e1902c737b2b7cb78 - Win32/BlackHole 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\66a6875469fba08fceb005803f02dfd9 - Win32/AutoRun.Agent.EU 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\6afeb2334df2190e2c7e0fea80241207 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\6dd7a7b2d4e177998da227bd4c6e0b48 - Win32/AntiAV.NBE 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\6fe4274d0feec9e2c856e3591d33af7f - Win32/AutoRun.Agent.RN 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\732a81a73361769d0911754af3ba3f8b - Win32/AutoRun.Agent.RN 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\7e9e7ff32b342a744d98bfccf2242028 - Win32/Exploit.MS08-067.BT 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\8353d4d2af4f930601242d94cdae74d9 - Win32/PSW.OnLineGames.NAQ 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\92b506262d65a5acc79b6551bbb89225 - Win32/Kryptik.AEN 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\a2ff5e11ccd1f4d78f224c8a2d3f2937 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\b69a251cdb4afa055ac80b95ff962a0b - Win32/KillAV.NDC 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\bb053898ae670bdec00c29cedbe03eba - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\be178be3b5f9218766a292447f1b178e - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\bf973e5b1035c8058c890fd2555a9aec - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\c5e8672b91946f553278a0b77b367c37 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\c6adfc0be573beb56ee3d8b89f305d32 - Win32/Prosti.NCZ 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\cf3ee34fe4c8dae6164ab21d941bb7b7 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\d97f4ea285959ec6f8a7c6ac15560bac - 可能是 Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\e193aecf61da2f04464e9bd897a31627 - 可能是 Win32/TrojanDownloader.Agent.OZE 特洛伊木马 的变种 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\e49b7b5016e2e640eaaa577a71bf49d9 - Win32/AutoRun.Agent.EU 蠕虫 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\e524aa598c3496148a5e84482eff01c7 - Win32/PSW.OnLineGames.NRD 特洛伊木马 - 通过删除清除 - 已隔离 [1]
D:\Documents and Settings\Administrator\桌面\DL\f0f64c9fa2da2f0bafa59c90fb1240d9 - Win32/PSW.OnLineGames.NAQ 特洛伊木马 - 通过删除清除 - 已隔离 [1]
已扫描的对象数: 42
发现的威胁数: 40
已清除对象数:40
完成时间: 23:35:07  总扫描时间: 11 秒 (00:00:11)

备注:
[1] 由于对象中仅包含病毒主体,因此已被删除。
sulong64
发表于 2009-8-20 23:42:01 | 显示全部楼层
AVG 只扫描44个文件找到32个,一点删除,44个全没了……
hj5abc
发表于 2009-8-20 23:43:33 | 显示全部楼层
jolin 2.7?

drweb miss 8.

G:\DL\081d2639e2c6509692485906c2da375d packed by UPX
>G:\DL\081d2639e2c6509692485906c2da375d infected with Trojan.PWS.Wsgame.12116
G:\DL\0900a242f80eb7bf7f463a441f1e6066 infected with Trojan.DownLoad.39311
G:\DL\0f25c33930004b6a98081f10ef34bb68 packed by UPX
>G:\DL\0f25c33930004b6a98081f10ef34bb68 infected with Trojan.PWS.Wsgame.12325
G:\DL\12d8a5986e20c7ea963502f087a1b9b7 packed by UPX
>G:\DL\12d8a5986e20c7ea963502f087a1b9b7 infected with Trojan.PWS.Wsgame.12654
G:\DL\13b3194902baf7d6880d731510cede1f packed by UPX
>G:\DL\13b3194902baf7d6880d731510cede1f infected with Trojan.PWS.Wsgame.12116
G:\DL\140445bfb48b815d6a69f23f5770a6fb packed by UPX
>G:\DL\140445bfb48b815d6a69f23f5770a6fb infected with Trojan.PWS.Wsgame.12325
G:\DL\150e919309cee77f4f86fdd738ffad32 packed by RLPACK
>G:\DL\150e919309cee77f4f86fdd738ffad32 infected with Trojan.PWS.Qqpass.2787
G:\DL\17617229ad5b9512e180354fdad508fb infected with Trojan.PWS.Wsgame.12326
G:\DL\2f4e746ea65faaf9c9e858158b83d50d infected with BackDoor.Beizhu.2768
G:\DL\390a6c429cc07b029e66dd26aa18fa0d infected with Trojan.QQterm
G:\DL\3e4315dea49b152d22cbf6e1cc341f51 infected with BackDoor.Pigeon.21851
G:\DL\5147afbf72236dc1edae888be934d399 infected with BackDoor.Pigeon.24224
G:\DL\533ab607302c88fa16a04261d22fa207 packed by UPX
>G:\DL\533ab607302c88fa16a04261d22fa207 infected with Trojan.PWS.Wsgame.12116
G:\DL\5a362436d9378bec0f886879d3216558 packed by UPX
>G:\DL\5a362436d9378bec0f886879d3216558 infected with Trojan.PWS.Wsgame.12116
G:\DL\601b3f2466bfa6989b9c7586b5ba54aa infected with Trojan.NtRootKit.2386
G:\DL\633dc2f737c330525430b75faecf6420 packed by UPX
>G:\DL\633dc2f737c330525430b75faecf6420 infected with Trojan.PWS.Wsgame.12116
G:\DL\63776baf4ee0773e1902c737b2b7cb78 infected with BackDoor.Indy
G:\DL\6afeb2334df2190e2c7e0fea80241207 packed by UPX
>G:\DL\6afeb2334df2190e2c7e0fea80241207 infected with Trojan.PWS.Wsgame.12116
G:\DL\6dd7a7b2d4e177998da227bd4c6e0b48 infected with Trojan.Siggen.3021
G:\DL\732a81a73361769d0911754af3ba3f8b - probably infected with MULDROP.Trojan
G:\DL\7e9e7ff32b342a744d98bfccf2242028 infected with Trojan.DownLoad.32174
G:\DL\92b506262d65a5acc79b6551bbb89225 infected with Trojan.DownLoad.42343
G:\DL\a2ff5e11ccd1f4d78f224c8a2d3f2937 packed by UPX
>G:\DL\a2ff5e11ccd1f4d78f224c8a2d3f2937 infected with Trojan.PWS.Wsgame.12116
G:\DL\b69a251cdb4afa055ac80b95ff962a0b packed by UPX
>G:\DL\b69a251cdb4afa055ac80b95ff962a0b infected with Trojan.AVKill.746
G:\DL\bb053898ae670bdec00c29cedbe03eba packed by UPX
>G:\DL\bb053898ae670bdec00c29cedbe03eba infected with Trojan.PWS.Wsgame.12116
G:\DL\be178be3b5f9218766a292447f1b178e packed by UPX
>G:\DL\be178be3b5f9218766a292447f1b178e infected with Trojan.PWS.Wsgame.12325
G:\DL\bf973e5b1035c8058c890fd2555a9aec packed by UPX
>G:\DL\bf973e5b1035c8058c890fd2555a9aec infected with Trojan.PWS.Wsgame.12353
G:\DL\c5e8672b91946f553278a0b77b367c37 infected with Trojan.PWS.Wsgame.12056
G:\DL\c6adfc0be573beb56ee3d8b89f305d32 packed by PESTUB
>G:\DL\c6adfc0be573beb56ee3d8b89f305d32 infected with Trojan.WinSpy.origin
G:\DL\cf3ee34fe4c8dae6164ab21d941bb7b7 packed by UPX
>G:\DL\cf3ee34fe4c8dae6164ab21d941bb7b7 infected with Trojan.PWS.Wsgame.12116
G:\DL\d97f4ea285959ec6f8a7c6ac15560bac packed by UPX
>G:\DL\d97f4ea285959ec6f8a7c6ac15560bac infected with Trojan.PWS.Wsgame.12116
G:\DL\e49b7b5016e2e640eaaa577a71bf49d9 packed by BINARYRES
>G:\DL\e49b7b5016e2e640eaaa577a71bf49d9 infected with Trojan.AVKill.origin
G:\DL\e524aa598c3496148a5e84482eff01c7 packed by UPX
>G:\DL\e524aa598c3496148a5e84482eff01c7 infected with Trojan.PWS.Wsgame.12116
G:\DL\f0f64c9fa2da2f0bafa59c90fb1240d9 packed by UPX
>G:\DL\f0f64c9fa2da2f0bafa59c90fb1240d9 packed by BINARYRES
>>G:\DL\f0f64c9fa2da2f0bafa59c90fb1240d9 packed by UPX
>>>G:\DL\f0f64c9fa2da2f0bafa59c90fb1240d9 infected with Trojan.PWS.Wsgame.origin


[ 本帖最后由 hj5abc 于 2009-8-20 23:46 编辑 ]
hj5abc
发表于 2009-8-20 23:44:53 | 显示全部楼层
原帖由 sulong64 于 2009-8-20 23:42 发表
AVG 只扫描44个文件找到32个,一点删除,44个全没了……

有隐藏文件
sulong64
发表于 2009-8-20 23:46:39 | 显示全部楼层

回复 5楼 hj5abc 的帖子

连压缩包一起清除了……

不过NOD32扫描时很多都是 打开时出错

不知道是啥原因
The EQs
发表于 2009-8-20 23:46:42 | 显示全部楼层
其实只有41个。。。。另外一个是干净的
sam.to
发表于 2009-8-20 23:46:50 | 显示全部楼层
to kl,ll
cggnt
发表于 2009-8-20 23:52:41 | 显示全部楼层
d:\我的文档\桌面\DL[1].part1.rar > RAR > 081d2639e2c6509692485906c2da375d - Win32/PSW.OnLineGames.NRD 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 0900a242f80eb7bf7f463a441f1e6066 - Win32/TrojanDownloader.Agent.OZH 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 0f25c33930004b6a98081f10ef34bb68 - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
d:\我的文档\桌面\DL[1].part1.rar > RAR > 12d8a5986e20c7ea963502f087a1b9b7 - Win32/PSW.OnLineGames.NRD 特洛伊木马 的变种
d:\我的文档\桌面\DL[1].part1.rar > RAR > 13b3194902baf7d6880d731510cede1f - Win32/PSW.OnLineGames.NRD 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 140445bfb48b815d6a69f23f5770a6fb - Win32/PSW.OnLineGames.NRD 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 150e919309cee77f4f86fdd738ffad32 - Win32/StartPage.NJS 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 17617229ad5b9512e180354fdad508fb - Win32/PSW.OnLineGames.NRD 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 18b925a486a13fe1cfcbf8ec56ec1dfc - Win32/TrojanClicker.Delf.NIG 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 2f4e746ea65faaf9c9e858158b83d50d - 可能是 Win32/Hupigon 特洛伊木马 的变种
d:\我的文档\桌面\DL[1].part1.rar > RAR > 390a6c429cc07b029e66dd26aa18fa0d - Win32/Tiny.NAH 特洛伊木马
d:\我的文档\桌面\DL[1].part1.rar > RAR > 3e4315dea49b152d22cbf6e1cc341f51 - Win32/Kryptik.NX 特洛伊木马 的变种
d:\我的文档\桌面\DL[1].part1.rar > RAR > 3e757fe3d6562f69341cbdad7351c8f2 - Win32/AutoRun.Agent.RN 蠕虫
d:\我的文档\桌面\DL[1].part1.rar > RAR > 5147afbf72236dc1edae888be934d399 - 找不到下一个压缩文件的卷标
Palkia
 楼主| 发表于 2009-8-20 23:55:54 | 显示全部楼层
RS20090820235147203723
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-21 23:28 , Processed in 0.085862 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表