几个所谓的“外挂”

显示全部楼层 · 发表于 2009-12-5 09:36:05

http://u.115.com/file/t0d35bb145

显示全部楼层 · 发表于 2009-12-5 10:48:27

本帖最后由 Ayer 于 2009-12-5 10:57 编辑

没找到下载方法

显示全部楼层 · 发表于 2009-12-5 12:06:16

在 E:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar->ppjsq0728.rar->ppjsq0728.exe 中发现 TrojanDownloader.Agent.ayzq 病毒, 已删除
在 E:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar->dnf_wg.rar->dnf_wg.exe->dnf多开外挂.exe->mg_dnf\IlvMoney1129.sys 中发现 Trojan/Agent.dfal 病毒, 已删除
在 E:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar->dnf_wg.rar->dnf_wg.exe->dnf多开外挂.exe->mg_dnf\stealth.dll 中发现 Trojan/Agent.dfap 病毒, 已删除
在 E:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar->dnf_wg.rar->dnf_wg.exe->dnf多开外挂.exe->mg_dnf\tutorial.exe 中发现 TrojanDownloader.Delphi.j 病毒, 已删除
在 E:\Documents and Settings\Administrator\桌面\TDDOWNLOAD.rar->dnf_wg.rar->dnf_wg.exe->1.exe 中发现 Trojan/Vilsel.blm 病毒, 已删除

显示全部楼层 · 发表于 2009-12-5 12:16:55

ESS4报毒，直接上图

E:\Documents and Settings\桌面\TDDOWNLOAD.rar > RAR > ppjsq0728.rar > RAR > ppjsq0728.exe - Win32/TrojanDropper.Agent.NWG 特洛伊木马

显示全部楼层 · 发表于 2009-12-5 12:19:19

感谢楼主提供，已上报

显示全部楼层 · 发表于 2009-12-5 18:13:35

2009/12/5 18:12:41 已删除病毒 Virus.Win32.Agent.dg G:\Temp\Virus\TDDOWNLOAD.rar/ppjsq0728.rar/ppjsq0728.exe
2009/12/5 18:12:42 已删除木马程序 Trojan.Win32.Vilsel.nzq G:\Temp\Virus\TDDOWNLOAD.rar/dnf_wg.rar/dnf_wg.exe/1.exe

To KL

显示全部楼层 · 发表于 2009-12-5 19:03:13

norton kill all

显示全部楼层 · 发表于 2009-12-5 19:25:32

本帖最后由 z2665 于 2009-12-5 19:27 编辑

Begin scan in 'C:\Users\z2665\Desktop\TDDOWNLOAD'
C:\Users\z2665\Desktop\TDDOWNLOAD\dnf_wg.rar
  [0] Archive type: RAR
--> dnf_wg.exe
   [1] Archive type: RAR SFX (self extracting)
   --> dnfﾶ￠﾿ﾪￍ￢ﾹￒ.exe
      [2] Archive type: RAR SFX (self extracting)
      --> mg_dnf\stealth.dll
      [DETECTION] Is the TR/Downloader.E Trojan
   --> 1.exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
C:\Users\z2665\Desktop\TDDOWNLOAD\ppjsq0728.rar
  [0] Archive type: RAR
--> ppjsq0728.exe
   [DETECTION] Is the TR/Agent.cmpr.27 Trojan

Beginning disinfection:
C:\Users\z2665\Desktop\TDDOWNLOAD\dnf_wg.rar
[NOTE]    The file was moved to '4b804371.qua'!
C:\Users\z2665\Desktop\TDDOWNLOAD\ppjsq0728.rar
[NOTE]    The file was moved to '4b844373.qua'!

miss 2，to

We received the following archive files:

File ID	Filename	Size (Byte)	Result
25511832	TDDOWNLOAD.rar	1.36 MB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25511833	dnfjj.exe	641.06 KB	UNDER ANALYSIS
25511834	521dnf.exe	852.88 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename	Result
dnfjj.exe	UNDER ANALYSIS

The file 'dnfjj.exe' has been determined to be 'UNDER ANALYSIS'.

Filename	Result
521dnf.exe	UNDER ANALYSIS

The file '521dnf.exe' has been determined to be 'UNDER ANALYSIS'.

Please note that you will receive an email which will contain theresults shown above. In case the final outcome of the analysis is notyet finished for all files the notification will be sent once ready.

显示全部楼层 · 发表于 2009-12-5 20:01:17

[病毒样本] 几个所谓的“外挂”

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源