查看: 3865|回复: 21
收起左侧

[病毒样本] 早餐,11个

[复制链接]
troika
发表于 2007-5-3 04:41:56 | 显示全部楼层 |阅读模式
呵呵

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
The EQs
发表于 2007-5-3 04:45:38 | 显示全部楼层
Scan performed at: 2007-5-3 4:45:52
Scanning Log
NOD32 version 2234 (20070502) NT
Command line: C:\Documents and Settings\EQ2\桌面\Downloads
Operating memory - is OK

Date: 3.5.2007  Time: 04:45:56
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Downloads\
C:\Documents and Settings\EQ2\桌面\Downloads\1.exe - probably a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\Downloads\2.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\Downloads\3.exe - a variant of Win32/PSW.Agent.NDF trojan
C:\Documents and Settings\EQ2\桌面\Downloads\4.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\Downloads\5.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\Downloads\6.exe - a variant of Win32/PSW.Agent.NCC trojan
C:\Documents and Settings\EQ2\桌面\Downloads\7.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Downloads\8.exe - Win32/PSW.WOW.NBV trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads\9.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Downloads\kehu0703.exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
Number of scanned files: 11
Number of threats found: 10
Number of files cleaned: 10
Time of completion: 04:46:00 Total scanning time: 4 sec (00:00:04)

Notes:
[7] File is probably infected with an unknown virus.
solcroft
发表于 2007-5-3 04:58:37 | 显示全部楼层
翻版壳王杀八个... 却不知怎么给它数成17个了

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
yinxuchina
发表于 2007-5-3 05:22:46 | 显示全部楼层
费尔 8个 其中 启发一个
yinxuchina
发表于 2007-5-3 05:26:36 | 显示全部楼层
江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 10.00.600
        病毒库日期 2007-05-02
        更新日期 2007-05-03

扫描目标 C:\Documents and Settings\mrly\My Documents\virus\

开始时间 2007-05-03 05:26:24

在 C:\Documents and Settings\mrly\My Documents\virus\1.exe 中发现 Trojan/PSW.GamePass.hcp 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\2.exe 中发现 Trojan/PSW.GamePass.hfg 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\10.exe 中发现 Backdoor/Agent.lmu 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\4.exe 中发现 Trojan/PSW.OnLineGames.atx 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\8.exe 中发现 Trojan/Agent.glv 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\6.exe 中发现 Trojan/PSW.OnLineGames.atz 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\9.exe 中发现 Trojan/PSW.GamePass.his 病毒, 发现病毒
在 C:\Documents and Settings\mrly\My Documents\virus\kehu0703.exe 中发现 Trojan/PSW.GamePass.gva 病毒, 发现病毒
正常结束。

扫描结果:
                 文件数 :11                                  病毒体 :8         
                   删除 :0                                     解毒 :0         
    扫描速度(千字节/秒) :509                               扫描时间 :00:00:01
    扫描文件速度(个/秒) :11
jlennon
头像被屏蔽
发表于 2007-5-3 06:19:30 | 显示全部楼层
Virus check with AntiVirusKit
Version 16.0.7
Virus signatures of 2007-4-25
Start time: 2007-5-3 6:19
Engine(s): KAV engine (AVK 17.4126), BD-Engine (BD 17.3645)
Heuristic: On
Archives: On
System areas: On

Check system areas...
Check selected directories and files...
Object: 1.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.oe (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 10.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-Spy.Win32.Agent.pr (KAV engine)
Object: 2.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.rc (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 3.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.es (KAV engine), Generic.Malware.SdldPWS.449C6D25 (BD-Engine)
Object: 4.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.qy (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 5.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Generic.Malware.Sdld!gPWS.D4ECB4DD (BD-Engine)
Object: 6.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-PSW.Win32.OnLineGames.qy (KAV engine), Trojan.PWS.OnLineGames.ARI (BD-Engine)
Object: 7.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Generic.Malware.SdldPWS.39FE9ED7 (BD-Engine)
Object: 8.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-Dropper.Win32.Agent.bcv (KAV engine), GenPack:Trojan.PWS.WoW.DT (BD-Engine)
Object: 9.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.Small.czl (KAV engine), Trojan.PWS.Lmir.AII (BD-Engine)
Object: kehu0703.exe
        Path: C:\Documents and Settings\Administrator\桌面\Downloads
        Status: Move file into quarantine
        Virus: Trojan-Downloader.Win32.Delf.bho (KAV engine), Generic.Malware.WBdld.0900FCEC (BD-Engine)
Analysis complete: 2007-5-3 6:19
    11 files checked
    11 infected files detected
    0 suspected files detected
mofunzone
发表于 2007-5-3 06:33:04 | 显示全部楼层
近乎超越双引擎的antivir粉墨登场。。
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\Downloads.rar'
C:\Documents and Settings\morgan\My Documents\
  Downloads.rar
    [0] Archive type: RAR
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/PSW.11264.7
        [WARNING]   Infected files in archives cannot be repaired!
    --> 10.exe
        [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.4 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ARI.193
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Agent.18944.42
        [WARNING]   Infected files in archives cannot be repaired!
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.17
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Agent.12288.27
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.22
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> kehu0703.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月2日  15:32
Used time: 00:11 min

The scan has been done completely.

      0 Scanning directories
     12 Files were scanned
     11 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
     12 Warnings
      0 Notes
      0 Hidden objects were found
马力
发表于 2007-5-3 08:59:41 | 显示全部楼层
驱逐舰十个~

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-5-3 09:19:37 | 显示全部楼层

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
tracydk
发表于 2007-5-3 09:23:57 | 显示全部楼层
Starting the file scan:

Begin scan in 'F:\样本\Downloads.rar'
F:\样本\Downloads.rar
  [0] Archive type: RAR
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.11264.7
  --> 10.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh.4 Backdoor server programs
  --> 2.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ARI.193
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.42
  --> 4.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.17
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Agent.12288.27
  --> 6.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.22
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> kehu0703.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-3-29 14:28 , Processed in 0.119337 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表