查看: 2233|回复: 7
收起左侧

[病毒样本] 来一系

[复制链接]
sdbsky
发表于 2007-4-28 12:53:36 | 显示全部楼层 |阅读模式
...........................

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
1p1
发表于 2007-4-28 13:09:09 | 显示全部楼层
真多阿
mofunzone
发表于 2007-4-28 13:16:22 | 显示全部楼层
lz请把x.rar改成exe然后自己用rar压缩,不要直接该后缀
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus11'
C:\Documents and Settings\morgan\My Documents\virus11\
  1012.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.ahj.302 Backdoor server programs
      [INFO]      The file was deleted!
  16.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Agent.bls.20
      [INFO]      The file was deleted!
  20336.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Agent.BZ.6
      [INFO]      The file was deleted!
  37311.exe
      [DETECTION] Is the Trojan horse TR/Agent.NVC
      [INFO]      The file was deleted!
  ad_1768.exe
  bind_50077.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46a0d8ea.qua'!
  ok.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  theopen.exe
      [DETECTION] Is the Trojan horse TR/Qhost.HY.4
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\x.rar'
C:\Documents and Settings\morgan\My Documents\
  x.rar
      [DETECTION] Contains signature of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\11'
C:\Documents and Settings\morgan\My Documents\11\
  562037311.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
      [INFO]      The file was deleted!
  avp.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
      [INFO]      The file was deleted!
  bind.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '46a0d8ec.qua'!
  down.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\12'
C:\Documents and Settings\morgan\My Documents\12\
  bd10.exe
      [DETECTION] Is the Trojan horse TR/Agent.540672
      [INFO]      The file was deleted!
  bd11.exe
    [0] Archive type: RAR SFX (self extracting)
    --> 1.exe
    --> 888.dll
        [DETECTION] Is the Trojan horse TR/Joret.1
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!
  bd12.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The file was moved to '4663d8e9.qua'!
  bd3.exe
  bd4.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  bd5.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4667d8eb.qua'!
  bd6.exe
      [DETECTION] Is the Trojan horse TR/Drop.Pool.A
      [INFO]      The file was deleted!
  bd7.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agen.201104
      [INFO]      The file was deleted!
  bd8.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  bd9.exe
      [DETECTION] Is the Trojan horse TR/Agent.NVC
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\123'
C:\Documents and Settings\morgan\My Documents\123\
  123.exe
      [DETECTION] Is the Trojan horse TR/Agent.23673
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\bd2'
C:\Documents and Settings\morgan\My Documents\bd2\
  bd2.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.1
      [INFO]      The file was deleted!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus'
C:\Documents and Settings\morgan\My Documents\virus\
  ADOBESVC.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4681d8cd.qua'!
  CFTMON.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4686d8d0.qua'!
  DATSC.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4686d8cb.qua'!
  MSTCS.exe
  SMSSS.exe
      [DETECTION] Is the Trojan horse TR/Drop.Delf.aom
      [INFO]      The file was deleted!
  SOUND.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.JJ.72
      [INFO]      The file was deleted!
  SPOOLVS.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '4681d8db.qua'!


End of the scan: 2007年4月27日  22:15
Used time: 00:19 min

The scan has been done completely.

      6 Scanning directories
     34 Files were scanned
     29 viruses and/or unwanted programs were found
      8 classified as suspicious:
     21 files were deleted
      0 files were repaired
      8 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -3 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes
      0 Hidden objects were found
promised
发表于 2007-4-28 13:31:41 | 显示全部楼层
太肥了,吞不下
shenrenrenren
头像被屏蔽
发表于 2007-4-28 13:35:38 | 显示全部楼层
已删除: 病毒 Worm.Win32.Delf.bs 文件: C:\TDDOWNLOAD\11.rar/down.exe//UPack
已隔离: 病毒 Downloader (修改) 文件: C:\TDDOWNLOAD\11.rar/bind.exe
已隔离: 病毒 Invader (修改) 文件: C:\TDDOWNLOAD\virus(1).rar/DATSC.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nw 文件: C:\TDDOWNLOAD\virus(1).rar/MSTCS.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除: 木马程序 Backdoor.Win32.Agent.alh 文件: C:\TDDOWNLOAD\virus(1).rar/SMSSS.exe//data.rar/systemt.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.jj 文件: C:\TDDOWNLOAD\virus(1).rar/SOUND.exe//PE_Patch.UPX\SVCHOST.EXE
已删除: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\virus(1).rar/SOUND.exe//PE_Patch.UPX
已隔离: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\virus(1).rar/SPOOLVS.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es 文件: C:\TDDOWNLOAD\virus(1).rar/ADOBESVC.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.qq 文件: C:\TDDOWNLOAD\virus(1).rar/CFTMON.exe
已隔离: 病毒 Downloader (修改) 文件: C:\TDDOWNLOAD\x.rar
已删除: 木马程序 Trojan-Downloader.Win32.VB.atk 文件: C:\TDDOWNLOAD\virus11.rar/bind_50077.exe
已删除: 木马程序 Trojan-Downloader.Win32.Agent.bls 文件: C:\TDDOWNLOAD\virus11.rar/16.exe//stream//data0001//PE_Patch.Upolyx//PE_Patch.UPX//UPX
已删除: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\virus11.rar/16.exe//stream//data0002
已删除: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\virus11.rar/16.exe//stream//data0005
已删除: 病毒 Invader (修改) 文件: C:\TDDOWNLOAD\virus11.rar/16.exe//stream//data0007//PE_Patch.UPX
已删除: 木马程序 Trojan.Win32.Qhost.hy 文件: C:\TDDOWNLOAD\virus11.rar/theopen.exe
已删除: 广告程序 not-a-virus:AdWare.Win32.Agent.bz 文件: C:\TDDOWNLOAD\virus11.rar/20336.exe
已隔离: 病毒 Worm.Generic (修改) 文件: C:\TDDOWNLOAD\virus11.rar/ok.exe//PE_Patch//UPack
已删除: 木马程序 Backdoor.Win32.Agent.ahj 文件: C:\TDDOWNLOAD\virus11.rar/1012.exe
已隔离: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\virus11.rar/37311.exe
已隔离: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\bd12.exe
已删除: 木马程序 Trojan-Spy.Win32.Agent.pn 文件: C:\TDDOWNLOAD\bd4.exe//PE_Patch//UPack
已删除: 木马程序 Trojan-Downloader.Win32.Adload.bz 文件: C:\TDDOWNLOAD\bd5.exe//PE_Patch//UPack\7849.TMP//stream//data0004
已删除: 广告程序 not-a-virus:AdWare.Win32.Agent.bx 文件: C:\TDDOWNLOAD\bd6.exe//PE_Patch//UPack
已删除: 广告程序 not-a-virus:AdWare.Win32.AdMoke.bg 文件: C:\TDDOWNLOAD\bd8.exe//ASPack
已隔离: 病毒 Trojan.Generic (修改) 文件: C:\TDDOWNLOAD\bd9.exe
worker321
头像被屏蔽
发表于 2007-4-28 17:16:45 | 显示全部楼层
beta版蜘蛛29个

virus.rar\DATSC.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Trojan.PWS.Wsgame.origin;;
virus.rar\MSTCS.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Trojan.PWS.Legmir.906;;
SMSSS.exe\systemt.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar\SMSSS.exe;Trojan.Onlyone;;
SMSSS.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Archive contains infected objects;;
virus.rar\SOUND.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Trojan.MulDrop.5762;;
virus.rar\SPOOLVS.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Probably MULDROP.Trojan;;
virus.rar\ADOBESVC.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Trojan.PWS.Wsgame.origin;;
virus.rar\CFTMON.exe;C:\Documents and Settings\Administrator\桌面\1\virus.rar;Trojan.PWS.Wsgame.origin;;
virus.rar;C:\Documents and Settings\Administrator\桌面\1;Archive contains infected objects;;
11.rar\avp.exe;C:\Documents and Settings\Administrator\桌面\1\11.rar;BackDoor.Pomax;;
11.rar\down.exe;C:\Documents and Settings\Administrator\桌面\1\11.rar;Win32.HLLW.Autoruner;;
11.rar\bind.exe;C:\Documents and Settings\Administrator\桌面\1\11.rar;Trojan.DownLoader.origin;;
11.rar\562037311.exe;C:\Documents and Settings\Administrator\桌面\1\11.rar;BackDoor.Pigeon.1604;;
11.rar;C:\Documents and Settings\Administrator\桌面\1;Archive contains infected objects;;
123.rar\123.exe;C:\Documents and Settings\Administrator\桌面\1\123.rar;Trojan.PWS.Qqshou.origin;;
123.rar;C:\Documents and Settings\Administrator\桌面\1;Archive contains infected objects;;
bd2.rar\bd2.exe;C:\Documents and Settings\Administrator\桌面\1\bd2.rar;Adware.Cdn;;
bd2.rar;C:\Documents and Settings\Administrator\桌面\1;Archive contains infected objects;;
virus11.rar\bind_50077.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Trojan.DownLoader.21634;;
16.exe\data001;C:\Documents and Settings\Administrator\桌面\1\virus11.rar\16.exe;Trojan.DownLoader.21691;;
16.exe\data002;C:\Documents and Settings\Administrator\桌面\1\virus11.rar\16.exe;Trojan.Popwin.origin;;
16.exe\data005;C:\Documents and Settings\Administrator\桌面\1\virus11.rar\16.exe;Trojan.Popwin.origin;;
16.exe\data006;C:\Documents and Settings\Administrator\桌面\1\virus11.rar\16.exe;Trojan.Packed.108;;
16.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Archive contains infected objects;;
virus11.rar\theopen.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Trojan.Click.1681;;
virus11.rar\20336.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Adware.Newweb;;
virus11.rar\ok.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Trojan.Hitpop.origin;;
virus11.rar\1012.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Trojan.Popwin.origin;;
virus11.rar\37311.exe;C:\Documents and Settings\Administrator\桌面\1\virus11.rar;Trojan.Popwin.origin;;
virus11.rar;C:\Documents and Settings\Administrator\桌面\1;Archive contains infected objects;;
x.rar;C:\Documents and Settings\Administrator\桌面\1;Trojan.PWS.Gamania;;
bd11.exe\888.dll;C:\Documents and Settings\Administrator\桌面\1\12\bd11.exe;Trojan.Cipher.origin;;
bd11.exe;C:\Documents and Settings\Administrator\桌面\1\12;Archive contains infected objects;;
bd12.exe;C:\Documents and Settings\Administrator\桌面\1\12;Probably BACKDOOR.Trojan;;
bd4.exe;C:\Documents and Settings\Administrator\桌面\1\12;Trojan.Hitpop.origin;;
bd8.exe;C:\Documents and Settings\Administrator\桌面\1\12;Trojan.Click.2252;;
bd9.exe;C:\Documents and Settings\Administrator\桌面\1\12;Trojan.Popwin.origin;;
shenrenrenren
头像被屏蔽
发表于 2007-4-28 19:22:41 | 显示全部楼层
下午报了,卡巴现在杀29个了。
moonsilver
发表于 2007-4-28 20:03:02 | 显示全部楼层
2

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-2 05:35 , Processed in 0.132187 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表