病毒样本

28654621

病毒样本

tonger2003

卡巴斯基反病毒 7.0 测试版
The requested URL http://bbs.kafan.cn/attachment.php?aid=55452 is forbidden
卡巴斯基反病毒 7.0 测试版
The requested URL http://bbs.kafan.cn/attachment.php?aid=55453 is infected with Trojan-PSW.Win32.Nilage.bcw virus
卡巴斯基反病毒 7.0 测试版
The requested URL http://bbs.kafan.cn/attachment.php?aid=55455 is infected with Trojan-PSW.Win32.OnLineGames.lz virus
第三个是坏的~~~

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用



===============================================
   ___________病毒查杀结果__________________


===============================================

2007年4月15日15时8分18秒 开始查杀C:\Documents and Settings\Administrator\桌面\新建文件夹\VIRUS4
C:\Documents and Settings\Administrator\桌面\新建文件夹\VIRUS4\2.exe 为可疑文件
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\新建文件夹\VIRUS4\setup.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\新建文件夹\VIRUS4\rrrr.exe
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。


C:\Documents and Settings\Administrator\桌面\新建文件夹\VIRUS4\rrrr.exe 带壳文件:UPX加壳
-----------------------------------------

2007年4月15日15时8分21秒收起线程…100% 查杀完毕！
扫描文件：3查杀病毒：3

harry_chang2003

PCC 2007殺兩隻

欠妳緈諨

avast!杀掉3个，一个无法扫描

sdbsky

\virus\VIRUS1.rar>>setup.exe>>pecompact2x
Trojan.DL.Delf.dww
\virus\VIRUS2.rar>>rrrr.exe>>UPX
Trojan.Delf.rra
\virus\VIRUS4.rar>>2.exe
Trojan.PSW.OnlineGames.aer

3个压缩包坏

promised

Scan performed at: 2007-4-15 15:12:34
Scanning Log
NOD32 version 2190 (20070415) NT
Command line: E:\VIRUS3.rar E:\VIRUS4.rar E:\VIRUS1.rar E:\VIRUS2.rar
Operating memory - is OK

Date: 15.4.2007  Time: 15:12:43
Anti-Stealth technology is enabled.
Scanned disks, folders and files: E:\VIRUS3.rar; E:\VIRUS4.rar; E:\VIRUS1.rar; E:\VIRUS2.rar
E:\VIRUS3.rar ?RAR ?gz.exe - incorrect CRC checksum, the file may be damaged
E:\VIRUS4.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NCC trojan
E:\VIRUS1.rar ?RAR ?setup.exe - Win32/TrojanDownloader.Adload.NBC trojan
Number of scanned files: 5
Number of threats found: 2
Number of active threats: 2
Time of completion: 15:12:48 Total scanning time: 5 sec (00:00:05)

promised

---------------------------------------------------------
AVG Anti-Spyware - Scan Report
---------------------------------------------------------

+ Created at:        15:13:38 2007-4-15

+ Scan result:       



E:\VIRUS1.rar/setup.exe -> Downloader.Delf.aku : Cleaned with backup (quarantined).
E:\VIRUS2.rar/rrrr.exe -> Trojan.Nilage.bcw : Cleaned with backup (quarantined).
E:\VIRUS4.rar/2.exe -> Trojan.OnLineGames.es : Cleaned with backup (quarantined).


::Report end

通杀

The EQs

Scan performed at: 2007-4-15 17:09:10
Scanning Log
NOD32 version 2190 (20070415) NT
Command line: C:\Documents and Settings\EQ2\桌面\VIRUS3.rar C:\Documents and Settings\EQ2\桌面\VIRUS1.rar C:\Documents and Settings\EQ2\桌面\VIRUS2.rar C:\Documents and Settings\EQ2\桌面\VIRUS4.rar
Operating memory - is OK

Date: 15.4.2007  Time: 17:09:14
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\VIRUS3.rar; C:\Documents and Settings\EQ2\桌面\VIRUS1.rar; C:\Documents and Settings\EQ2\桌面\VIRUS2.rar; C:\Documents and Settings\EQ2\桌面\VIRUS4.rar
C:\Documents and Settings\EQ2\桌面\VIRUS3.rar ?RAR ?gz.exe - incorrect CRC checksum, the file may be damaged
C:\Documents and Settings\EQ2\桌面\VIRUS1.rar ?RAR ?setup.exe - Win32/TrojanDownloader.Adload.NBC trojan - was a part of the deleted object
C:\Documents and Settings\EQ2\桌面\VIRUS4.rar ?RAR ?2.exe - a variant of Win32/PSW.Agent.NCC trojan
Number of scanned files: 7
Number of threats found: 2
Number of files cleaned: 2
Time of completion: 17:09:14 Total scanning time: 0 sec (00:00:00)

KAV-Longhorn

红伞全杀了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS1.rar'
C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS1.rar
  [0] Archive type: RAR
  --> setup.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was moved to '4673f938.qua'!
Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS2.rar'
C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS2.rar
  [0] Archive type: RAR
  --> rrrr.exe
      [DETECTION] Is the Trojan horse TR/PSW.Nilage.bcw.9
      [INFO]      The file was moved to '4673f939.qua'!
Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS3.rar'
C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS3.rar
  [0] Archive type: RAR
  --> gz.exe
      [DETECTION] Is the Trojan horse TR/Agent.615k
      [INFO]      The file was moved to '40ef7cfe.qua'!
Begin scan in 'C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS4.rar'
C:\Documents and Settings\FEAR\My Documents\Downloads\病毒测试\VIRUS4.rar
  [0] Archive type: RAR
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/Agent.10240.32
      [INFO]      The file was moved to '4673f93b.qua'!


End of the scan: 2007年4月15日  22:05
Used time: 00:03 min

The scan has been done completely.

      0 Scanning directories
      8 Files were scanned
      4 viruses and/or unwanted programs were found
      0 files were deleted
      0 files were repaired
      4 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      4 Files not concerned
      4 Archives were scanned
      0 Warnings
      0 Notes