来一点样本

taoyuan237

BIN文件应该是的把，没分析。
大家自己看着办

kingmuro

发现日期        病毒名称        文件名       
2009-10-16 21:24        Trojan.Win32.Generic.11EC5FD5        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\ST.TXT       
2009-10-16 21:24        Backdoor.Win32.Meb.a        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\SO.BIN       
2009-10-16 21:24        AdWare.Win32.Mnless.awi        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\MS.BIN       
2009-10-16 21:24        Backdoor.Win32.Meb.b        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\ME2.TXT       
2009-10-16 21:24        Trojan.Win32.Nodef.xiy        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\BOX.TXT       
2009-10-16 21:24        Worm.Win32.Undef.gu        D:\MY DOCUMENTS\桌面\TEST\VIRUS2\BOT.TXT>>upx_c

Soma Cruz

PCTIS miss 10

as4524

卡巴启发了一个
2009-10-16 21:34:58        已删除: HEUR:Trojan.Win32.Generic        WinRAR 压缩文件管理器                C:\Sandbox\Administrator\DefaultBox\drive\C\Downloads\virus2\w.bin

[ 本帖最后由 as4524 于 2009-10-16 21:38 编辑 ]

benq80282

AVG Free 9.0 偵測到!
virus1.rar:\st.txt";"特洛伊木馬 BackDoor.Agent.ACMI.dropper";"已移至病毒隔離區"
virus1.rar:\mydll.jpg";"特洛伊木馬 PSW.Banker5.ZAA";"已移至病毒隔離區"
virus1.rar:\maill.exe";"特洛伊木馬 PSW.Generic7.AERB";"已移至病毒隔離區"
virus1.rar:\box.txt";"特洛伊木馬 BackDoor.Generic11.AYUM";"已移至病毒隔離區"
virus1.rar:\bot.txt";"特洛伊木馬 Agent_r.MM";"已移至病毒隔離區"
virus1.rar:\abb.txt";"特洛伊木馬 Generic14.CCEM";"已移至病毒隔離區"
virus1.rar";"特洛伊木馬 Generic14.CCEM";"已移至病毒隔離區"
virus2.rar:\zzxx(1).exe";"特洛伊木馬 Clicker.ACJF";"已移至病毒隔離區"
virus2.rar";"特洛伊木馬 Clicker.ACJF";"已移至病毒隔離區"

尤金卡巴斯基

2009/10/16 22:31:59        已清除        木马程序 Trojan-Dropper.Win32.VB.afbw        G:\Temp\Virus\virus2 - 复制.rar/zzxx(1).exe               
2009/10/16 22:32:03        已清除        木马程序 Trojan-Dropper.Win32.Rooter.e        G:\Temp\Virus\virus1 - 复制.rar/st.txt               
2009/10/16 22:32:03        已清除        木马程序 Trojan-GameThief.Win32.WOW.ucx        G:\Temp\Virus\virus1 - 复制.rar/maill.exe               
2009/10/16 22:32:03        已清除        木马程序 Backdoor.Win32.Hostil.a        G:\Temp\Virus\virus1 - 复制.rar/box.txt               
2009/10/16 22:32:03        已清除        木马程序 Backdoor.Win32.Wintu.bu        G:\Temp\Virus\virus1 - 复制.rar/bot.txt               
2009/10/16 22:32:03        已清除        木马程序 Trojan.Win32.Inject.akjn        G:\Temp\Virus\virus1 - 复制.rar/abb.txt               
2009/10/16 22:31:58        已隔离        病毒 HEUR:Trojan.Win32.Generic        G:\Temp\Virus\virus2 - 复制.rar/w.bin               

To KL

z2665

Sophos miss5，to

as4524

Hello,


t.jpg - Trojan-Banker.Win32.Banker.aofa

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\virus1'
C:\Documents and Settings\Administrator\桌面\virus1\1.jpg
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\abb.txt
    [DETECTION] Is the TR/Dldr.Cutwail.32256C Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\bot.txt
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\box.txt
    [DETECTION] Contains a recognition pattern of the (harmful) BDS/Hostil.F.2 back-door program
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\maill.exe
  [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/PSW.Wow.tzo Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\mydll.jpg
    [DETECTION] Is the TR/Delf.PVG Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\so.bin
    [DETECTION] Is the TR/Spy.94208.125 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\virus1\st.txt
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年10月17日  00:47
Used time: 00:04 Minute(s)

The scan has been done completely.

      1 Scanned directories
     12 Files were scanned
      8 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      8 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      0 Archives were scanned
      0 Warnings
      8 Notes

zhb0128

反病毒专家 AntiVirusKit 2006 扫描病毒日志记录
版本 16.0.7
双引擎反病毒签名 2009-10-15
开始时间: 2009-10-17 0:49
引擎: KAV 引擎 (AVK 19.8104), BD 引擎 (BD 18.1468)
高启发式: 打开
压缩文件: 打开
系统区域: 关闭

扫描所选择的目录和文件...
对象: t.jpg
        路径: C:\Documents and Settings\Administrator\桌面\virus2
        Status: 文件移入隔离区
        病毒: BehavesLike:Win32.SMTP-Mailer (BD 引擎)
对象: w.bin
        路径: C:\Documents and Settings\Administrator\桌面\virus2
        Status: 文件移入隔离区
        病毒: Trojan-Downloader.Win32.DlfBfkg.akf (KAV 引擎), Gen:Trojan.Heur.iG0@SIlfkHjb (BD 引擎)
对象: zzxx(1).exe
        路径: C:\Documents and Settings\Administrator\桌面\virus2
        Status: 已清除病毒
        病毒: Trojan-Dropper.Win32.VB.afbw (KAV 引擎), Trojan.Generic.2527032 (BD 引擎)
扫描完成: 2009-10-17 0:49
    已检查 3 个文件
    已发现 3 个染毒文件
    发现 0 个可疑文件