传点样本上来~~~

coldwinter

不多说~~~下之~~~~



忘了说密码了:zillya

[ 本帖最后由 coldwinter 于 2009-10-21 13:26 编辑 ]

Soma Cruz

密码呢？

coldwinter

原帖由 悠柚的弟弟 于 2009-10-21 13:26 发表
密码呢？

zillya

Soma Cruz

D:\TDDownload\suspicious\2.exe : infected Trojan.Win32.Pincav.hts
D:\TDDownload\suspicious\aa1.exe : infected Trojan-GameThief.Win32.OnLineGames.bmtc
D:\TDDownload\suspicious\aa17.exe : infected Trojan-GameThief.Win32.Magania.bwsi
D:\TDDownload\suspicious\aa2.exe : infected Trojan-Dropper.Win32.Agent.ayqa
D:\TDDownload\suspicious\aa25.exe : infected Trojan-GameThief.Win32.Magania.bfrp
D:\TDDownload\suspicious\aa28.exe : infected Trojan-GameThief.Win32.Magania.bfrp
D:\TDDownload\suspicious\bbgg.exe : infected Trojan-GameThief.Win32.OnLineGames.bkzf
D:\TDDownload\suspicious\server.exe : infected Trojan-Dropper.Win32.Small.dyl

Soma Cruz

[Found security risk] <W32/Rootkit-PX!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\0.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\0.exe
[Found security risk] <W32/OnlineGames.BY.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\2.exe->rsrcPE
[Deleted]        D:\TDDownload\suspicious\2.exe
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa1.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\aa1.exe
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa17.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\aa17.exe
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa2.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\aa2.exe
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa25.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\aa25.exe
[Found password stealer] <W32/OnlineGames.CA.gen!Eldorado (generic, not disinfectable)>         D:\TDDownload\suspicious\aa28.exe->(UPX)
[Deleted]        D:\TDDownload\suspicious\aa28.exe
[Found possible security risk] <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>         D:\TDDownload\suspicious\aa34.exe->rsrcPE->(UPack)->(UPack)->(UPack)->(UPack)
[Deleted]        D:\TDDownload\suspicious\aa34.exe
[Found virus] <W32/OnlineGames!Generic>         D:\TDDownload\suspicious\bbgg.exe->(NSPack)->(PE_Patch)
[Deleted]        D:\TDDownload\suspicious\bbgg.exe
[Found possible virus] <W32/Downloader-WebExe-based!Maximus>         D:\TDDownload\suspicious\mv播放器.exe->(embedded)
[Deleted]        D:\TDDownload\suspicious\mv播放器.exe
[Found possible virus] <W32/Downloader-WebExe-based!Maximus>         D:\TDDownload\suspicious\server.exe->(embedded)
[Deleted]        D:\TDDownload\suspicious\server.exe

dyzjzb

微点+SD，实机试毒。

328397663

原帖由 dyzjzb 于 2009-10-21 13:43 发表
微点+SD，实机试毒。


646646

胆子还不小.

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TEST'
C:\Documents and Settings\Administrator\桌面\TEST\TEST\0.exe
    [DETECTION] Contains suspicious code HEUR/Malware
    [NOTE]      The detection was classified as suspicious.
    [WARNING]   The file was ignored!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\123333.exe
    [DETECTION] Is the TR/Crypt.FKM.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\2.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa1.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa17.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa2.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa25.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa28.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\aa34.exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\bbgg.exe
    [DETECTION] Is the TR/PSW.OnLineGames.bkzf.111 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\sbplussubup.exe
    [DETECTION] Is the TR/Dldr.Agent.csia Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\sbplusunins.exe
    [DETECTION] Is the TR/Dldr.Agent.csis Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\sbplusup.exe
    [DETECTION] Is the TR/Dldr.Agent.csfk Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Administrator\桌面\TEST\TEST\server.exe
    [DETECTION] Is the TR/ATRAPS.Gen2 Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年10月21日 星期三  14:17
Used time: 00:28 Minute(s)

The scan has been done completely.

      2 Scanned directories
     15 Files were scanned
     13 Viruses and/or unwanted programs were found
      1 Files were classified as suspicious
     13 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
      1 Warnings
     14 Notes

File ID	Filename	Size (Byte)	Result
25477899	0.exe	25.5 KB	UNDER ANALYSIS
25477984	mv######.exe	25.5 KB	UNDER ANALYSIS

[ 本帖最后由 nosferatu 于 2009-10-21 14:19 编辑 ]

hjl27

红伞啊红伞没反应？

250662772

费尔全部干掉