病毒样本生成物56X

angir

RT
来源：http://bbs.kafan.cn/thread-618497-1-1.html
生成物没有抓全，也不保证全部生成物均为malware
如果有clean的样本请自行无视

ps：不需要上报微点

angir

To AVIRA，KL

62590423

没人回复

angir

回复 3# 62590423


    是……
觉得好奇怪的说

jason_jiang

f-secure left 17, to

结果: 找到 39 恶意软件
Adware.Sogou.Gen (广告软件)
D:\Backup\Desktop\Unknownfiles\CPUSH.DLL
D:\Backup\Desktop\Unknownfiles\CPUSH.TMP
D:\BACKUP\DESKTOP\UNKNOWNFILES\CPUSH.TMP 操作： 删除
Gen:Adware.Heur.my8@NKNc1Job (广告软件)
D:\Backup\Desktop\Unknownfiles\WINDRV.CED
D:\Backup\Desktop\Unknownfiles\WINDRV.CED.1.BAK
D:\BACKUP\DESKTOP\UNKNOWNFILES\WINDRV.CED.1.BAK 操作： 删除
Trojan.Obfuscated.KU (病毒)
D:\Backup\Desktop\Unknownfiles\01.SYS 操作： 删除
Gen:Trojan.Heur.emW@XQuVyul (病毒)
D:\Backup\Desktop\Unknownfiles\16.EXE 操作： 删除
Gen:Trojan.Heur.emW@XQ4fMtd (病毒)
D:\Backup\Desktop\Unknownfiles\12.EXE 操作： 删除
Gen:Trojan.Heur.emW@XEEYNjh (病毒)
D:\Backup\Desktop\Unknownfiles\12FR3.EXE 操作： 删除
D:\Backup\Desktop\Unknownfiles\SYSBAR.EXE 操作： 删除
Trojan.Generic.2900681 (病毒)
D:\Backup\Desktop\Unknownfiles\AV2F.TMP 操作： 删除
Trojan.Generic.2890542 (病毒)
D:\Backup\Desktop\Unknownfiles\APPMGMTS.DLL 操作： 删除
D:\Backup\Desktop\Unknownfiles\QMGR.DLL 操作： 删除
Trojan.Generic.2911667 (病毒)
D:\Backup\Desktop\Unknownfiles\AV8.TMP 操作： 删除
D:\Backup\Desktop\Unknownfiles\AV9.TMP 操作： 删除
Trojan.Generic.2900653 (病毒)
D:\Backup\Desktop\Unknownfiles\AVA.TMP 操作： 删除
Trojan.Generic.CJ.AIXD (病毒)
D:\Backup\Desktop\Unknownfiles\CORPOR.DLL 操作： 删除
Generic.Malware.dld!!.552617DA (病毒)
D:\Backup\Desktop\Unknownfiles\D.EXE 操作： 删除
Trojan.Viking.A (病毒)
D:\Backup\Desktop\Unknownfiles\EXPOR.EXE 操作： 删除
GenPack:Generic.Malware.Fdld.86434219 (怀疑的感染)
D:\Backup\Desktop\Unknownfiles\DK.EXE 操作： 删除
D:\Backup\Desktop\Unknownfiles\LASSO.EXE 操作： 删除
Trojan.Generic.2901671 (病毒)
D:\Backup\Desktop\Unknownfiles\GAMECLIEN.EXE 操作： 删除
Gen:Rootkit.Heur.bqW@h8Rfcdg (病毒)
D:\Backup\Desktop\Unknownfiles\IBRNF.SYS 操作： 删除
Trojan.Downloader.JMQL (病毒)
D:\Backup\Desktop\Unknownfiles\ERNEL32.DLL 操作： 删除
Generic.Malware.SP!g.F0CFA2F2 (病毒)
D:\Backup\Desktop\Unknownfiles\MING9B090423.EXE 操作： 删除
Backdoor:W32/Koutodoor.gen!A (病毒)
D:\Backup\Desktop\Unknownfiles\MJFF.DLL 操作： 删除
D:\Backup\Desktop\Unknownfiles\NMEI.DLL 操作： 删除
Gen:Trojan.Heur.ouZ@XEBzpEi (病毒)
D:\Backup\Desktop\Unknownfiles\MTLRD.SYS 操作： 删除
Generic.Malware.P!g.1560A17F (病毒)
D:\Backup\Desktop\Unknownfiles\NB9MING32C090423.DLL 操作： 删除
Worm.Generic.218714 (病毒)
D:\Backup\Desktop\Unknownfiles\NETSVER.EXE 操作： 删除
Trojan.Generic.1625154 (病毒)
D:\Backup\Desktop\Unknownfiles\OK.TXTSERVER.EXE 操作： 删除
Trojan.Generic.2254987 (病毒)
D:\Backup\Desktop\Unknownfiles\PCIDUMP.SYS 操作： 删除
Trojan.Generic.2899721 (病毒)
D:\Backup\Desktop\Unknownfiles\PLINK.EXE 操作： 删除
Adware:W32/Cinmus.gen!H (病毒)
D:\Backup\Desktop\Unknownfiles\PRINT32.DLL 操作： 删除
Trojan.AVKill.CA (病毒)
D:\Backup\Desktop\Unknownfiles\SYSERE.EXE 操作： 删除
DeepScan:Generic.Adw.Cinmus.2.E8144529 (病毒)
D:\Backup\Desktop\Unknownfiles\STYHTG.EXE 操作： 删除
Trojan.Generic.2901467 (病毒)
D:\Backup\Desktop\Unknownfiles\VC3.EXE 操作： 删除
Backdoor.Agent.AAJL (病毒)
D:\Backup\Desktop\Unknownfiles\VIRUS.EXE 操作： 删除
Generic.PWS.Games.4.A3AF7F16 (病毒)
D:\Backup\Desktop\Unknownfiles\kb91113225.dll 操作： 删除
Gen:Adware.Heur.iu3@snkpgjnib (广告软件)
D:\Backup\Desktop\Unknownfiles\13.EXE 操作： 删除

kingmuro

avast           38个

2010-1-1 19:42:10        GXF        1528        Sign of "Win32:Rootkit-CN [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\01.SYS" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:BHO-VA [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\12.EXE" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:BHO-VA [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\12FR3.EXE\$[32]\36.exe" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Cinmus-AU [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\13.EXE\$[34]\$R0" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:BHO-VA [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\16.EXE" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:OnLineGames-FOS [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\AV2F.TMP" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:OnLineGames-FOS [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\AV8.TMP" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:OnLineGames-FOS [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\AV9.TMP" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:OnLineGames-FOS [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\AVA.TMP" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\CORPOR.DLL" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:BHO-GG [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\CPUSH.DLL" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:BHO-GG [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\CPUSH.TMP" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Agent-AERY [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\DK.EXE\[NsPack]" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Viking-CF" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\EXPOR.EXE\[UPX]\[Embedded_I#2070]" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\GAMECLIEN.EXE\[Embedded_I#1070]" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Viking-CF" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\GAMECLIEN.EXE" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:RtkDL [Rtk]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\IBRNF.SYS" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Vilsel-D [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\kb91113225.dll\[Upack]" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Agent-AERY [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\LASSO.EXE\[NsPack]" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:AutoRun-AXT [Wrm]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\MING9B090423.EXE" file.  
2010-1-1 19:42:13        GXF        1528        Sign of "Win32:Rootkit-CN [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\MTLRD.SYS" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Agent-SIM [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\NB9MING32C090423.DLL" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\NETSVER.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\OK.TXTSERVER.EXE\[Embedded_I#1060]\[Embedded_I#5cc0]" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Perkesh [Rtk]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\OK.TXTSERVER.EXE\[Embedded_I#1060]\[Embedded_I#6c40]" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\OK.TXTSERVER.EXE\[Embedded_I#1060]\[Embedded_I#8cc0]" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Perkesh [Rtk]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\OK.TXTSERVER.EXE\[Embedded_I#1060]" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Perkesh [Rtk]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\OK.TXTSERVER.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\PLINK.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Cinmus-AU [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\PRINT32.DLL" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\QMGR.DLL" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "NSIS:Cinmus [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\STYHTG.EXE\nsis.hdr" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Cinmus-AU [Adw]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\STYHTG.EXE\$TEMP\$TEMP\13.exe\$[34]\$R0" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:BHO-VA [Trj]" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\SYSBAR.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\VC3.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\VIRUS.EXE\[Embedded_I#5d68]" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Trojan-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\VIRUS.EXE" file.  
2010-1-1 19:42:14        GXF        1528        Sign of "Win32:Malware-gen" has been found in "D:\My Documents\桌面\test\virus\Unknownfiles\Windows.ime" file.

winxp0286

杯具啊.ESET NOD 4.0
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\01.SYS - Win32/Ysmarsys 特洛伊木马 的变种
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12.EXE - 可能是 Win32/Adware.Cinmus 应用程序 的变种
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12FR3.EXE > NSIS > Entries.bin - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12FR3.EXE > NSIS > Strings.txt - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12FR3.EXE > NSIS > script.nsi - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12FR3.EXE > NSIS > System.dll - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\12FR3.EXE > NSIS > 36.exe - 可能是 Win32/Adware.Cinmus 应用程序 的变种
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\13.EXE > NSIS > Entries.bin - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\13.EXE > NSIS > Strings.txt - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\13.EXE > NSIS > script.nsi - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\13.EXE > NSIS > System.dll - 正常
C:\Documents and Settings\Administrator\桌面\virus[1].part01.rar > RAR > Unknownfiles\13.EXE > NSIS > 龏

saga3721

25537193  XUNLEI.DLL  24.5 KB  UNDER ANALYSIS
25537196  ~0B6D5A.~~~  514 KB  UNDER ANALYSIS
25537197  ~0BA070.~~~  498 KB  UNDER ANALYSIS
25537190  IBRNF.SYS  28.13 KB  UNDER ANALYSIS
25537191  S.EXE  72 KB  UNDER ANALYSIS
25537192  SYSERE.EXE  24.5 KB  UNDER ANALYSIS

winxp0286

为什么ESET 才扫到26个文件?难道计数方式不一样?

失落的手链

瑞星2010