查看: 3436|回复: 18
收起左侧

[病毒样本] 7个~~~

[复制链接]
tonger2003
发表于 2007-5-23 14:24:35 | 显示全部楼层 |阅读模式


两个包是一样的

所以删出了一个~~~

[ 本帖最后由 tonger2003 于 2007-5-23 14:30 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-5-23 14:28:44 | 显示全部楼层
费尔这次报的启发式比较多
两个包

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
mofunzone
发表于 2007-5-23 14:31:45 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\桌面.rar'
C:\Documents and Settings\morgan\My Documents\
  桌面.rar
    [0] Archive type: RAR
    --> 0.exe
        [DETECTION] Is the Trojan horse TR/Agent.nma.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 3.exe
        [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 5.exe
        [DETECTION] Is the Trojan horse TR/Agent.22016.B
        [WARNING]   Infected files in archives cannot be repaired!
    --> 6.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 8.exe
        [DETECTION] Contains suspicious code HEUR/Malware
        [WARNING]   Infected files in archives cannot be repaired!
    --> 9.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
扫描日志
NOD32版本 2285 (20070522) NT
命令行: C:\Documents and Settings\morgan\My Documents\ ?
?桌面.rar
正在检查NOD32.EXE文件的CRC:状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中:没有进行 (选项已关闭)
扫描MBR及引导区中:没有进行 (选项已关闭)
日期: 22.5.2007  时间:23:31:07
已关闭反隐藏功能.
已扫描的磁盘,文件夹及文件:C:\Documents and Settings\ ?
?morgan\My Documents\桌面.rar
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>0.exe - 可能是 Win32/PSW.Agent.NEC 木马 的一个变种
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>3.exe - 未查明的 NewHeur_PE 病毒 [7]
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>5.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>6.exe - Win32/Agent.NEO 木马的变种
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>7.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>8.exe - 是正常的
C:\Documents and Settings\morgan\My Documents\桌面.rar  ?
?>>RAR >>9.exe - 可能是 Win32/Genetik 木马 的一个变种
已扫描的文件数目:8
已发现的病毒数目:4
活动的病毒数目:1
完成时间: 23:31:12 总扫描时间:5 秒 (00:00:05)
注意:
[7] 该文件可能感染上未知病毒。

[Scan path] C:\Documents and Settings\morgan\My Documents\1打dll.rar
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\moyu102.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\1打dll.rar\MSDEG32.DLL - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Msxo0.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\nwizAsktao.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Packet.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\ps_mirr.dll probably infected with WIN.WORM.Virus
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\qjzo0.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\sijbjo.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\srhxvn.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\tongji_cnnic.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\upxdnd.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\WanPacket.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\Winhttps.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\wpcap.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\cmdbcs.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\dh2103.dll - Ok
>C:\Documents and Settings\morgan\My Documents\1打dll.rar\jnavavm.dll - Ok
>>C:\Documents and Settings\morgan\My Documents\1打dll.rar\LYMANGR.DLL - Ok
C:\Documents and Settings\morgan\My Documents\1打dll.rar - archive contains infected objects

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 20
Infected objects found: 0
Objects with modifications found: 0
Suspicious objects found: 1
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 278 Kb/s
Scan time: 00:00:03
wangjay1980
发表于 2007-5-23 14:39:05 | 显示全部楼层
detected: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/0.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/3.exe
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/5.exe
detected: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/6.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/7.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/8.exe
detected: virus Invader (modification)        File: C:\Documents and Settings\Owner\×ÀÃæ\×ÀÃæ.rar/9.exe//PE_Patch//UPack
fanrubin
头像被屏蔽
发表于 2007-5-23 14:45:11 | 显示全部楼层
卡6

[ 本帖最后由 fanrubin 于 2007-5-23 14:54 编辑 ]

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
tonger2003
 楼主| 发表于 2007-5-23 14:47:57 | 显示全部楼层

回复 #4 wangjay1980 的帖子

直接拿压缩包扫描 会报几个变种

解压文件在扫描就只报一个  变种~~~

在压缩包里扫描 受到限制~~~
l10x
发表于 2007-5-23 14:48:32 | 显示全部楼层
Starting the file scan:

Begin scan in 'E:\桌面.rar'
E:\桌面.rar
  [0] Archive type: RAR
  --> 0.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> 5.exe
      [DETECTION] Is the Trojan horse TR/Agent.22016.B
  --> 7.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 8.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年5月23日  14:47
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
      9 Files were scanned
      6 viruses and/or unwanted programs were found
      3 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found
moonsilver
发表于 2007-5-23 17:05:29 | 显示全部楼层
瑞星病毒查杀结果报告

清除病毒种类列表:
病毒: Trojan.Mnless.lxc        
病毒: Trojan.PSW.CabalOnline.aie

用户来源:互联网

软件版本:19.24.22

3个
鼻耳盖子
发表于 2007-5-23 17:25:41 | 显示全部楼层

微点全拦

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
onesand
发表于 2007-5-23 22:59:27 | 显示全部楼层

六个,少了一个!!

deleted: Trojan program Trojan-PSW.Win32.OnLineGames.nn        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\0.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\3.exe
deleted: Trojan program Trojan-Proxy.Win32.Small.du        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\5.exe
deleted: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\6.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\7.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: C:\Documents and Settings\huaxun\桌面\桌面.rar\8.exe
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2026-10-20 14:06 , Processed in 0.080847 second(s), 2 queries , Redis On.

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表