20091224样本一堆

显示全部楼层 · 发表于 2009-12-24 15:10:16

请未查杀的上报

显示全部楼层 · 发表于 2009-12-24 15:48:09

本帖最后由王子带着刀于 2009-12-24 15:53 编辑

卡巴09

2009-12-24 15:50:25 启动任务
2009-12-24 15:50:42 检测到: Trojan.Win32.Cosmu.itl E:\ddas.rar/3.exe
2009-12-24 15:50:42 未处理: Trojan.Win32.Cosmu.itl E:\ddas.rar/3.exe 延期
2009-12-24 15:50:42 检测到: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/73.exe
2009-12-24 15:50:42 未处理: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/73.exe 延期
2009-12-24 15:50:42 检测到: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/89.exe
2009-12-24 15:50:42 未处理: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/89.exe 延期
2009-12-24 15:50:42 检测到: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/101.exe
2009-12-24 15:50:42 未处理: Trojan-Dropper.Win32.Small.edx E:\ddas.rar/101.exe 延期
2009-12-24 15:50:43 检测到: Trojan-Spy.Win32.Agent.bckd E:\ddas.rar/1186.exe/data0006
2009-12-24 15:50:43 未处理: Trojan-Spy.Win32.Agent.bckd E:\ddas.rar/1186.exe/data0006 延期
2009-12-24 15:50:43 检测到: Trojan-Spy.Win32.Agent.bcke E:\ddas.rar/1186.exe/data0007
2009-12-24 15:50:43 检测到: Trojan-Spy.Win32.Agent.bckf E:\ddas.rar/1186.exe/data0008
2009-12-24 15:50:43 处理错误: Trojan-Spy.Win32.Agent.bckf E:\ddas.rar/1186.exe
2009-12-24 15:50:43 检测到: Trojan-GameThief.Win32.OnLineGames.vwww E:\ddas.rar/11867.exe
2009-12-24 15:50:43 未处理: Trojan-GameThief.Win32.OnLineGames.vwww E:\ddas.rar/11867.exe 延期
2009-12-24 15:50:43 检测到: Trojan.Win32.Pincav.nqe E:\ddas.rar/100046.exe
2009-12-24 15:50:43 未处理: Trojan.Win32.Pincav.nqe E:\ddas.rar/100046.exe 延期
2009-12-24 15:50:45 检测到: Backdoor.Win32.Hupigon.ixzg E:\ddas.rar/cpa.exe
2009-12-24 15:50:45 未处理: Backdoor.Win32.Hupigon.ixzg E:\ddas.rar/cpa.exe 延期
2009-12-24 15:50:46 检测到: Backdoor.Win32.Httpbot.abe E:\ddas.rar/dk.exe/data0002/iMUL
2009-12-24 15:50:46 未处理: Backdoor.Win32.Httpbot.abe E:\ddas.rar/dk.exe/data0002/iMUL 延期
2009-12-24 15:50:46 检测到: HEUR:Trojan.Win32.Generic E:\ddas.rar/dk.exe/data0002
2009-12-24 15:50:46 检测到: Trojan-Downloader.Win32.Small.aodu E:\ddas.rar/dk.exe/data0003
2009-12-24 15:50:46 处理错误: Trojan-Downloader.Win32.Small.aodu E:\ddas.rar/dk.exe
2009-12-24 15:50:47 检测到: Trojan-PSW.Win32.QQFish.ew E:\ddas.rar/q5.exe/PE_Patch.UPX/UPX
2009-12-24 15:50:47 未处理: Trojan-PSW.Win32.QQFish.ew E:\ddas.rar/q5.exe/PE_Patch.UPX/UPX 延期
2009-12-24 15:50:47 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/101.exe
2009-12-24 15:50:47 未处理: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/101.exe 延期
2009-12-24 15:50:52 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/73.exe
2009-12-24 15:50:52 未处理: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/73.exe 延期
2009-12-24 15:50:52 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/89.exe
2009-12-24 15:50:52 未处理: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/89.exe 延期
2009-12-24 15:50:52 检测到: Backdoor.Win32.Agent.angq E:\openr.7z/openr/B1.exe
2009-12-24 15:50:52 未处理: Backdoor.Win32.Agent.angq E:\openr.7z/openr/B1.exe 延期
2009-12-24 15:50:56 检测到: Trojan-GameThief.Win32.WOW.vqd E:\openr.7z/openr/t322027.dll
2009-12-24 15:50:56 未处理: Trojan-GameThief.Win32.WOW.vqd E:\openr.7z/openr/t322027.dll 延期
2009-12-24 15:50:56 检测到: Trojan-PSW.Win32.WOW.bjh E:\openr.7z/openr/t329106.dll
2009-12-24 15:50:56 未处理: Trojan-PSW.Win32.WOW.bjh E:\openr.7z/openr/t329106.dll 延期
2009-12-24 15:50:56 处理错误: Trojan-PSW.Win32.WOW.bjh E:\openr.7z
2009-12-24 15:50:56 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/101.exe
2009-12-24 15:51:36 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/73.exe
2009-12-24 15:51:36 检测到: Trojan-Dropper.Win32.Small.edx E:\openr.7z/openr/89.exe
2009-12-24 15:51:36 检测到: Backdoor.Win32.Agent.angq E:\openr.7z/openr/B1.exe
2009-12-24 15:52:52 检测到: Trojan-GameThief.Win32.WOW.vqd E:\openr.7z/openr/t322027.dll
2009-12-24 15:52:52 检测到: Trojan-PSW.Win32.WOW.bjh E:\openr.7z/openr/t329106.dll
2009-12-24 15:52:52 已删除: Trojan-PSW.Win32.WOW.bjh E:\openr.7z
2009-12-24 15:52:52 检测到: Backdoor.Win32.Hupigon.ixzg E:\ddas.rar/cpa.exe
2009-12-24 15:52:54 已删除: Backdoor.Win32.Hupigon.ixzg E:\ddas.rar/cpa.exe
2009-12-24 15:52:55 检测到: Backdoor.Win32.Httpbot.abe E:\ddas.rar/dk.exe/data0002/iMUL
2009-12-24 15:52:57 检测到: HEUR:Trojan.Win32.Generic E:\ddas.rar/dk.exe/data0002
2009-12-24 15:52:57 检测到: Trojan-Downloader.Win32.Small.aodu E:\ddas.rar/dk.exe/data0003
2009-12-24 15:52:57 已删除: Trojan-Downloader.Win32.Small.aodu E:\ddas.rar/dk.exe
2009-12-24 15:52:57 检测到: Trojan-PSW.Win32.QQFish.ew E:\ddas.rar/q5.exe/PE_Patch.UPX/UPX
2009-12-24 15:52:58 已删除: Trojan-PSW.Win32.QQFish.ew E:\ddas.rar/q5.exe
2009-12-24 15:52:59 完成任务

显示全部楼层 · 发表于 2009-12-24 15:49:16

本帖最后由 jordanpchome 于 2009-12-24 15:54 编辑

To ACE

显示全部楼层 · 发表于 2009-12-24 17:33:00

openr.7z  下载不了

VIP.7z  过卡巴2010和AVK2010

ddas  检测到: Trojan.Win32.Cosmu.itl  启发式分析计算的威胁级别值较高 Firefox

显示全部楼层 · 发表于 2009-12-24 18:12:36

只有VIP过了卡巴和MSE

显示全部楼层 · 发表于 2009-12-24 18:16:47

瑞星2010

显示全部楼层 · 发表于 2009-12-24 18:41:27

kis2010

vip.exe

修改 C:\WINDOWS\System32\veskhyog.ccr
创建 C:\WINDOWS\System32\TroSer.dll
重命名 C:\WINDOWS\System32\TroSer.dll
设置调试权限被拒绝: 设置调试权限

显示全部楼层 · 发表于 2009-12-24 22:55:05

2009/12/24 22:43:43 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\openr\openr\101.exe
2009/12/24 22:43:43 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\openr\openr\73.exe
2009/12/24 22:43:43 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\openr\openr\89.exe
2009/12/24 22:43:43 已删除木马程序 Backdoor.Win32.Agent.angq G:\Temp\Virus\openr\openr\B1.exe
2009/12/24 22:43:44 已删除木马程序 Trojan-GameThief.Win32.WOW.vqd G:\Temp\Virus\openr\openr\t322027.dll
2009/12/24 22:43:44 已删除木马程序 Trojan-PSW.Win32.WOW.bjh G:\Temp\Virus\openr\openr\t329106.dll
2009/12/24 22:43:50 已删除木马程序 Trojan.Win32.Pincav.nqe G:\Temp\Virus\ddas\100046.exe
2009/12/24 22:43:50 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\ddas\101.exe
2009/12/24 22:43:52 已删除木马程序 Trojan-Spy.Win32.Agent.bckd G:\Temp\Virus\ddas\1186.exe//data0006
2009/12/24 22:43:51 已删除木马程序 Trojan-GameThief.Win32.OnLineGames.vwww G:\Temp\Virus\ddas\11867.exe
2009/12/24 22:43:51 已删除木马程序 Trojan.Win32.Cosmu.itl G:\Temp\Virus\ddas\3.exe
2009/12/24 22:43:52 已删除木马程序 Trojan-Spy.Win32.Agent.bcke G:\Temp\Virus\ddas\1186.exe//data0007
2009/12/24 22:43:52 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\ddas\73.exe
2009/12/24 22:43:52 已删除木马程序 Trojan-Dropper.Win32.Small.edx G:\Temp\Virus\ddas\89.exe
2009/12/24 22:43:52 已删除木马程序 Trojan-Spy.Win32.Agent.bckf G:\Temp\Virus\ddas\1186.exe//data0008
2009/12/24 22:43:52 已删除木马程序 Trojan-Spy.Win32.Agent.bckf G:\Temp\Virus\ddas\1186.exe
2009/12/24 22:43:53 已删除木马程序 Backdoor.Win32.Hupigon.ixzg G:\Temp\Virus\ddas\cpa.exe
2009/12/24 22:43:53 已删除木马程序 Backdoor.Win32.Hupigon.ixzg G:\Temp\Virus\ddas\cpa.exe
2009/12/24 22:43:54 已删除木马程序 Backdoor.Win32.Httpbot.abe G:\Temp\Virus\ddas\dk.exe//data0002//#
2009/12/24 22:43:53 已删除木马程序 Trojan-PSW.Win32.QQFish.ew G:\Temp\Virus\ddas\q5.exe//PE_Patch.UPX//UPX
2009/12/24 22:43:53 已删除木马程序 Trojan-PSW.Win32.QQFish.ew G:\Temp\Virus\ddas\q5.exe//PE_Patch.UPX
2009/12/24 22:43:53 已删除木马程序 Trojan-PSW.Win32.QQFish.ew G:\Temp\Virus\ddas\q5.exe
2009/12/24 22:43:54 已删除木马程序 Trojan-Downloader.Win32.Small.aodu G:\Temp\Virus\ddas\dk.exe//data0003
2009/12/24 22:43:54 已删除木马程序 Trojan-Downloader.Win32.Small.aodu G:\Temp\Virus\ddas\dk.exe

To KL

显示全部楼层 · 发表于 2009-12-25 15:09:42

MSE报威胁，清除之。

显示全部楼层 · 发表于 2009-12-25 17:55:18

avast          16个

2009-12-25 17:52:57 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\openr\101.exe" file.
2009-12-25 17:53:01 SYSTEM 576 Sign of "Win32:Crypt-BXV [Trj]" has been found in "D:\My Documents\桌面\test\openr\openr\4110.exe" file.
2009-12-25 17:53:01 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\openr\73.exe" file.
2009-12-25 17:53:02 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\openr\89.exe" file.
2009-12-25 17:53:03 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\openr\B1.exe" file.
2009-12-25 17:53:04 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\openr\wini32.exe" file.
2009-12-25 17:53:05 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\3.exe" file.
2009-12-25 17:53:06 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\73.exe" file.
2009-12-25 17:53:07 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\89.exe" file.
2009-12-25 17:53:07 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\101.exe" file.
2009-12-25 17:53:08 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\11867.exe" file.
2009-12-25 17:53:09 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\100046.exe" file.
2009-12-25 17:53:10 SYSTEM 576 Sign of "Win32:Delf-FHQ [Trj]" has been found in "D:\My Documents\桌面\test\openr\cpa.exe" file.
2009-12-25 17:53:12 SYSTEM 576 Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\openr\dk.exe\$INSTDIR\dk.exe\[NsPack]\[Embedded_I#7168]" file.
2009-12-25 17:53:13 SYSTEM 576 Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\openr\q5.exe" file.

[病毒样本] 20091224样本一堆

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源

本帖子中包含更多资源