Anycall-D908 毒网帖子中样本

sdbsky

.......................8个

Anycall-D908

呵呵~刚才顾着找东西,忘记抓样本了.谢谢大家帮我抓样本

mofunzone

antivir全

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus0509-1.rar'
C:\Documents and Settings\morgan\My Documents\
  virus0509-1.rar
    [0] Archive type: RAR
    --> 4.exe
        [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Agent.18432.36
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/Agent.17408.51
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Contains signature of the dropper DR/Agent.alh.1
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: RAR SFX (self extracting)
        --> wpcap.dll
        --> systemm.exe
            [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh Backdoor server programs
            [WARNING]   Infected files in archives cannot be repaired!
        --> drivers\npf.sys
        --> Packet.dll
        --> WanPacket.dll
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> ~tmp8357.exe
        [DETECTION] Contains signature of the worm WORM/SdBot.196017
        [WARNING]   Infected files in archives cannot be repaired!
    --> 1.exe
        [DETECTION] Is the Trojan horse TR/Agent.19456.53
        [WARNING]   Infected files in archives cannot be repaired!
    --> 2.exe
        [DETECTION] Is the Trojan horse TR/Agent.19968.132
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年5月8日  19:48
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     14 Files were scanned
      9 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      2 Archives were scanned
     10 Warnings
      0 Notes
      0 Hidden objects were found

solcroft

bridgewr

微点2格已知，其他行为杀

wangjay1980

detected: Trojan program Trojan-PSW.Win32.OnLineGames.qo        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/4.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/5.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nb        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/8.exe
detected: Trojan program Backdoor.Win32.Agent.alh        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/7.exe//data.rar/systemm.exe//UPack
detected: Trojan program Trojan-Spy.Win32.Delf.nt        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/9.exe//FSG
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/~tmp8357.exe//FSG
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/1.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\virus0509-1.rar/2.exe

tonger2003

已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.qo        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/4.exe
已检测到: 病毒 Invader (修改)        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/5.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.nb        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/8.exe
已检测到: 木马程序 Backdoor.Win32.Agent.alh        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/7.exe//data.rar/systemm.exe//UPack
已检测到: 木马程序 Trojan-Spy.Win32.Delf.nt        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/9.exe//FSG
已检测到: 病毒 Invader (修改)        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/~tmp8357.exe//FSG
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/1.exe
已检测到: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: C:\Documents and Settings\Administrator\桌面\virus0509-1.rar/2.exe

hj5abc

怎么NOD32每次食量都这么小呢 .. 6个

harry_chang2003

PCC 2007