JS一个＋毒包

显示全部楼层 · 发表于 2007-5-18 21:51:45

原帖由 dikex 于 2007-5-18 21:44 发表
根据http://mail.8u8y.com/ad/pic/temp.exe里面内容http://mail.8u8y.com/ad/pic/12.txt，轻易地找到了一堆病毒的地址列表

http://222.215.152.75/zo.exe
http://222.215.152.75/kap.exe
http:// ...

你另开个帖发吧

显示全部楼层 · 发表于 2007-5-18 22:00:04

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TEMP'
C:\Documents and Settings\Administrator\桌面\TEMP\
  kap.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.TL.16
   [INFO]    The file was deleted!
  temp.exe
   [DETECTION] Contains suspicious code HEUR/Crypted
   [INFO]    The file was moved to '46bab1b4.qua'!
  vip.exe
   [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ASY.9
   [INFO]    The file was deleted!
  wll.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [INFO]    The file was deleted!
  wow.exe
   [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
   [INFO]    The file was deleted!
  zo.exe
   [DETECTION] Is the Trojan horse TR/Agent.nma.2
   [INFO]    The file was deleted!

End of the scan: 2007年5月18日  21:59
Used time: 00:07 min

The scan has been done completely.

   1 Scanning directories
   6 Files were scanned
   6 viruses and/or unwanted programs were found
   1 classified as suspicious:
   5 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   -1 Files not concerned
   0 Archives were scanned
   0 Warnings
   0 Notes
   0 Hidden objects were found

显示全部楼层 · 发表于 2007-5-18 22:05:03

原帖由 promised 于 2007-5-18 21:51 发表

你另开个帖发吧

另发一个很麻烦，反正这个都发了

显示全部楼层 · 发表于 2007-5-18 22:10:03

你改改标题吧，嗯～
JS一个，加上提取的毒包。。

显示全部楼层 · 发表于 2007-5-18 22:33:00

这帖子怎么有毒，我的狐狸都会报

显示全部楼层 · 发表于 2007-5-19 00:31:16

虽然那个JS不报 ..不过样本都杀了 ..

已扫描磁盘、文件夹和文件: F:\TEMP.rar
F:\TEMP.rar ?RAR ?TEMP\kap.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\TEMP.rar ?RAR ?TEMP\temp.exe<病毒 - Win32/TrojanDownloader.Delf.AZM 木马变种>
F:\TEMP.rar ?RAR ?TEMP\vip.exe<病毒 - Win32/PSW.Agent.NCC 木马变种>
F:\TEMP.rar ?RAR ?TEMP\wll.exe<病毒 - 未知的 NewHeur_PE 病毒 [7]>
F:\TEMP.rar ?RAR ?TEMP\wow.exe<病毒 - 可能是 Win32/PSW.Delf.NGU 木马变种>
F:\TEMP.rar ?RAR ?TEMP\zo.exe<病毒 - 可能是 Win32/PSW.Agent.NEC 木马变种>
已扫描文件数量: 7
已发现病毒数量: 6

显示全部楼层 · 发表于 2007-5-19 15:38:43

另一个包

显示全部楼层 · 发表于 2007-5-19 17:22:33

帖子报毒！！！

[病毒样本] JS一个＋毒包

回复 #11 promised 的帖子

本帖子中包含更多资源