查看: 1800|回复: 7
收起左侧

[病毒样本] 一堆毒。。。。。。。。。。。。

[复制链接]
The EQs
发表于 2007-4-2 10:27:24 | 显示全部楼层 |阅读模式
Scan performed at: 2007-4-2 10:26:06
Scanning Log
NOD32 version 2161 (20070401) NT
Command line: C:\Documents and Settings\EQ2\桌面\复件 桌面.rar
Operating memory - is OK
Date: 2.4.2007  Time: 10:26:10
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\复件 桌面.rar
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?a0031.exe - Win32/PSW.Legendmir.AYK trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?foto.exe - Win32/Wigon.S trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?head[1].js - JS/TrojanDownloader.IstBar.AI trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?LinkShare.exe - Win32/LowZones.DR trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?loader.exe - probably a variant of Win32/TrojanDownloader.Small.NFP trojan
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?skydown.exe - Win32/TrojanDownloader.Agent.NJH trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?a002.exe - probably a variant of Win32/PSW.Legendmir.AYK trojan
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?a0021.exe - Win32/TrojanDropper.Small.AUQ trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\复件 桌面.rar ?RAR ?a003.exe - Win32/PSW.Legendmir.AYK trojan - was a part of the deleted object
Number of scanned files: 10
Number of threats found: 9
Number of files cleaned: 1
Time of completion: 10:26:11 Total scanning time: 1 sec (00:00:01)

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
solcroft
发表于 2007-4-2 10:29:36 | 显示全部楼层
老兄,不就是我刚发的样本吗?
mofunzone
发表于 2007-4-2 10:29:41 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\����.rar'
C:\Documents and Settings\morgan\My Documents\
  ����.rar
    [0] Archive type: RAR
    --> a0031.exe
        [DETECTION] Is the Trojan horse TR/PSW.Lmir.bey.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> foto.exe
        [DETECTION] Is the Trojan horse TR/Rootkit.AU
        [WARNING]   Infected files in archives cannot be repaired!
    --> head[1].js
        [DETECTION] Contains signature of the exploits EXP/Agent.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> LinkShare.exe
        [DETECTION] Is the Trojan horse TR/QLowZones.35
        [WARNING]   Infected files in archives cannot be repaired!
    --> loader.exe
        [DETECTION] Is the Trojan horse TR/Agent.4608.67
        [WARNING]   Infected files in archives cannot be repaired!
    --> skydown.exe
        [DETECTION] Is the Trojan horse TR/Hijack.Explor.1360
        [WARNING]   Infected files in archives cannot be repaired!
    --> a002.exe
        [DETECTION] Is the Trojan horse TR/PSW.Lmir.bgo
        [WARNING]   Infected files in archives cannot be repaired!
    --> a0021.exe
        [DETECTION] Is the Trojan horse TR/Drop.Small.auq
        [WARNING]   Infected files in archives cannot be repaired!
    --> a003.exe
        [DETECTION] Is the Trojan horse TR/PSW.Lmir.bey.2
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月1日  19:29
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
     10 Warnings
      0 Notes
The EQs
 楼主| 发表于 2007-4-2 10:30:54 | 显示全部楼层

回复 #2 solcroft 的帖子

貌似发重的了。。。。。

[ 本帖最后由 EQ2 于 2007-4-2 10:31 编辑 ]
soul20010
发表于 2007-4-2 10:43:54 | 显示全部楼层
FS7.0
Result: 8 malware found
Trojan-PSW.Win32.Lmir.bey (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\a0031.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\a003.exe
Trojan-Dropper.Win32.Small.avu (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\foto.exe
Trojan.Win32.LowZones.dr (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\LinkShare.exe
Trojan-Downloader.Win32.Small.elf (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\loader.exe
Trojan-Downloader.Win32.Agent.azy (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\skydown.exe
Trojan-PSW.Win32.Lmir.bgo (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\a002.exe
Trojan-Dropper.Win32.Small.auq (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\×ÀÃæ.rar\a0021.exe
上个帖子说错了,不好意思。。。
gggh
发表于 2007-4-2 16:15:29 | 显示全部楼层
卡巴报警...
popfather
头像被屏蔽
发表于 2007-4-3 22:16:05 | 显示全部楼层
报8个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
无瑕
发表于 2007-4-3 22:54:59 | 显示全部楼层
驱逐舰扫描结果

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-4-24 15:37 , Processed in 0.128179 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表