从一个朋友那里搞来的一堆样本

hope250

看看你的杀软能报几个

aoyang

没劲，不如一个一个的发好玩

[ 本帖最后由 aoyang 于 2007-5-15 15:20 编辑 ]

hope250

呵呵，上瘾了

tracydk

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\样本.rar'
C:\Documents and Settings\morgan\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> ²¡¶¾Ñù±¾\c8.exe.exe
        [DETECTION] Is the Trojan horse TR/Spy.Delf.PG.66
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\ck3.exe.exe
        [DETECTION] Is the Trojan horse TR/Spy.Delf.PG.65
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\IEXPLORE.Dat
        [DETECTION] Is the Trojan horse TR/Spy.Delf.PG.65
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\IEXPLORE.Sys
        [DETECTION] Is the Trojan horse TR/Spy.Delf.PG.67
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\IEXPLORE.win
        [DETECTION] Is the Trojan horse TR/Spy.Delf.PG.66
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\ldmedia4.dll
        [DETECTION] Is the Trojan horse TR/Drop.Maran.C.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\lsass.exe
        [DETECTION] Is the Trojan horse TR/PSW.Maran.CT.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\shua.exe.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> ²¡¶¾Ñù±¾\soundmid3.dll
        [DETECTION] Is the Trojan horse TR/Drop.Maran.C.3
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!


End of the scan: 2005年5月15日  00:16
Used time: 00:09 min

The scan has been done completely.

      0 Scanning directories
     10 Files were scanned
      9 viruses and/or unwanted programs were found
      1 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      9 Warnings
      0 Notes
      0 Hidden objects were found

红心王子

费尔报了9个

小邪邪

MCAFEE  

wangjay1980

detected: Trojan program Trojan-Spy.Win32.Delf.pg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\c8.exe.exe//UPX
detected: Trojan program Trojan-Spy.Win32.Delf.pg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\ck3.exe.exe//UPX
detected: Trojan program Trojan-Spy.Win32.Delf.pg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\IEXPLORE.Dat
detected: Trojan program Trojan-Spy.Win32.Delf.pg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\IEXPLORE.Sys
detected: Trojan program Trojan-Spy.Win32.Delf.pg        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\IEXPLORE.win
detected: Trojan program Trojan-PSW.Win32.Maran.dk        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\ldmedia4.dll
detected: Trojan program Trojan-PSW.Win32.Maran.ct        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\lsass.exe
detected: Trojan program Trojan-PSW.Win32.Maran.bo        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/²¡¶¾Ñù±¾\soundmid3.dll

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用
蜜罐检测:正常 OK!

===============================================
   ___________病毒查杀结果__________________


===============================================

2007年5月15日16时36分6秒 开始查杀C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本
威胁性文件：C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\c8.exe.exe
威胁性文件：C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\ck3.exe.exe
C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\lsass.exe 为可疑文件
威胁性文件：C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\shua.exe.exe
  未知的可疑率80%的文件(启发)C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\shua.exe.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\shua.exe.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\ldmedia4.dll
威胁性文件：C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\soundmid3.dll
=========================================

_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。


C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\c8.exe.exe 带壳文件:UPX加壳
C:\Documents and Settings\root\桌面\新建文件夹\新建文件夹\样本\病毒样本\ck3.exe.exe 带壳文件:UPX加壳
-----------------------------------------

2007年5月15日16时36分16秒收起线程…100% 查杀完毕！
扫描文件：6查杀病毒：6

moonsilver