12
返回列表 发新帖
楼主: F-Secure
收起左侧

[病毒样本] 毒14个

[复制链接]
红心王子
发表于 2007-5-25 15:33:03 | 显示全部楼层
LZ发别人发过的东西
先BS一下
wangjay1980
发表于 2007-5-25 15:35:18 | 显示全部楼层
卡巴14
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/spglsdr.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/csrss.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/IEXPLORE.EXE
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/mmc.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/smss.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/srogm.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/stpgldk.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/svchost32.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/ctfmon.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/copypfh.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/svchost(1).exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/conime.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.um        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/services.exe
detected: Trojan program Trojan-Downloader.Win32.Agent.bmo        File: C:\Documents and Settings\Owner\×ÀÃæ\swfed[1].zip.zip/svchost.exe
promised
发表于 2007-5-25 16:25:21 | 显示全部楼层
原帖由 红心王子 于 2007-5-25 15:33 发表
LZ发别人发过的东西
先BS一下

你自己发过N多次别人发过的东西,还有空BS别人
promised
发表于 2007-5-25 16:26:44 | 显示全部楼层
原帖由 mofunzone 于 2007-5-25 12:23 发表
扫描一个就够了,看来是kav免杀?
扫描日志
NOD32版本 2288 (20070524) NT
命令行: C:\Documents and Settings\morgan\My Documents\ ?
?IEXPLORE.EXE
正在检查NOD32.EXE文件的CRC:状态正常
D:\Eset\no ...

NOD32只杀一个前几天入库的,请误主观臆断
dericyeoh
发表于 2007-5-25 16:29:31 | 显示全部楼层
KIS7全部
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\spglsdr.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\csrss.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\IEXPLORE.EXE
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\mmc.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\smss.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\srogm.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\stpgldk.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\svchost32.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\ctfmon.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\copypfh.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\svchost(1).exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\conime.exe
已经删除: 木马程序 Trojan-PSW.Win32.OnLineGames.um        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\services.exe
已经删除: 木马程序 Trojan-Downloader.Win32.Agent.bmo        文件: C:\Documents and Settings\Deric Yeoh\桌面\swfed.zip\svchost.exe
鼻耳盖子
发表于 2007-5-25 17:06:18 | 显示全部楼层

微点也全都报已知

木马名称:Trojan-PSW.Win32.OnLineGames.dre
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SPGLSDR.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drb
程序:
I:\TEST\070525\4\SWFED[1].ZIP\CSRSS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.dri
程序:
I:\TEST\070525\4\SWFED[1].ZIP\IEXPLORE.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drn
程序:
I:\TEST\070525\4\SWFED[1].ZIP\MMC.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.dqs
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SMSS.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drk
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SROGM.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drj
程序:
I:\TEST\070525\4\SWFED[1].ZIP\STPGLDK.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.dqu
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SVCHOST32.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drc
程序:
I:\TEST\070525\4\SWFED[1].ZIP\CTFMON.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drd
程序:
I:\TEST\070525\4\SWFED[1].ZIP\COPYPFH.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drm
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SVCHOST(1).EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drl
程序:
I:\TEST\070525\4\SWFED[1].ZIP\CONIME.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.drg
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SERVICES.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.Agent.htt
程序:
I:\TEST\070525\4\SWFED[1].ZIP\SVCHOST.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
taihuxian
发表于 2007-5-25 17:56:55 | 显示全部楼层
Scan path        : C:\Documents and Settings\Administrator\桌面\swfed.zip
Folders        : 1
Files        :  14
Memory processes scanned        : 0
Archives        : 0
Runtime packers        : 0
Identified viruses        : 1
Infected files        : 14
C:\Documents and Settings\Administrator\桌面\swfed.zip\spglsdr.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\spglsdr.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\spglsdr.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\csrss.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\csrss.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\csrss.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\IEXPLORE.EXE        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\IEXPLORE.EXE        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\IEXPLORE.EXE        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\mmc.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\mmc.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\mmc.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\smss.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\smss.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\smss.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\srogm.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\srogm.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\srogm.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\stpgldk.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\stpgldk.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\stpgldk.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost32.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost32.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost32.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\ctfmon.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\ctfmon.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\ctfmon.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\copypfh.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\copypfh.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\copypfh.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost(1).exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost(1).exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost(1).exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\conime.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\conime.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\conime.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\services.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\services.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\services.exe        Moved
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost.exe        Infected: Trojan.Downloader.Agent.YCA
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost.exe        Disinfection failed
C:\Documents and Settings\Administrator\桌面\swfed.zip\svchost.exe        Moved
virus007
发表于 2007-5-25 21:47:04 | 显示全部楼层
咖啡难得一次全杀了

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2024-5-22 17:14 , Processed in 0.099038 second(s), 15 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表