查看: 2979|回复: 15
收起左侧

[病毒样本] 病毒17个

[复制链接]
troika
发表于 2007-6-2 11:10:27 | 显示全部楼层 |阅读模式
呵呵

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
wangjay1980
发表于 2007-6-2 11:20:09 | 显示全部楼层
deleted: Trojan program Trojan.Win32.Agent.abf        File: E:\Ñù±¾\н¨Îļþ¼Ð\1[1].exe
detected: virus Trojan.Generic (modification)        File: E:\Ñù±¾\н¨Îļþ¼Ð\ eploeree.exe//PE_Patch.PECompact//PecBundle//PECompact
deleted: Trojan program Trojan-Downloader.Win32.Small.czl        File: E:\Ñù±¾\н¨Îļþ¼Ð\11[1].exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sy        File: E:\Ñù±¾\н¨Îļþ¼Ð\12[1].exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sl        File: E:\Ñù±¾\н¨Îļþ¼Ð\13[1].exe//PE_Patch//UPack
deleted: Trojan program Trojan.Win32.Agent.abf        File: E:\Ñù±¾\н¨Îļþ¼Ð\14[1].exe//ASPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.sc        File: E:\Ñù±¾\н¨Îļþ¼Ð\15[1].exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.rc        File: E:\Ñù±¾\н¨Îļþ¼Ð\2[1].exe//PE_Patch//UPack
deleted: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\н¨Îļþ¼Ð\3[1].exe
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\н¨Îļþ¼Ð\4[1].exe//PE_Patch.Stolen//KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-PSW.Win32.Agent.im        File: E:\Ñù±¾\н¨Îļþ¼Ð\5[1].exe//FSG//MSIMMS32.DLL//Petite
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: E:\Ñù±¾\н¨Îļþ¼Ð\6[1].exe//FSG
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.es        File: E:\Ñù±¾\н¨Îļþ¼Ð\9[1].exe//PE_Patch.AvSpoof//BeRo//AVPSRV.DLL
The EQs
发表于 2007-6-2 11:23:02 | 显示全部楼层
Scan performed at: 2007-6-2 11:23:21
Scanning Log
NOD32 version 2305 (20070601) NT
Command line: C:\Documents and Settings\EQ2\桌面\Downloads
Operating memory - is OK

Date: 2.6.2007  Time: 11:23:25
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Downloads\
C:\Documents and Settings\EQ2\桌面\Downloads\ eploeree.exe - Win32/TrojanDownloader.Banload.BIW trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\Downloads\10[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\11[1].exe - probably a variant of Win32/Genetik trojan
C:\Documents and Settings\EQ2\桌面\Downloads\12[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\13[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\14[1].exe - a variant of Win32/PSW.Legendmir.NEP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\15[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\1[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\2[1].exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\3[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\4[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\5[1].exe - a variant of Win32/PSW.OnLineGames.NAL trojan
C:\Documents and Settings\EQ2\桌面\Downloads\6[1].exe - a variant of Win32/PSW.OnLineGames.NAL trojan
C:\Documents and Settings\EQ2\桌面\Downloads\7[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\8[1].exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\9[1].exe - Win32/PSW.OnLineGames.NAG trojan - quarantined - unable to clean - deleted
Number of scanned files: 17
Number of threats found: 16
Number of files cleaned: 16
Time of completion: 11:23:29 Total scanning time: 4 sec (00:00:04)
foxhound
发表于 2007-6-2 11:23:40 | 显示全部楼层
AVG Anti-Spyware 7.5 报的

Proxy.Small.du
Proxy.Small.du
Proxy.Small.du
Proxy.Small.du
Proxy.Small.du
Proxy.Small.du
Trojan.OnLineGames.es
Trojan.OnLineGames.qy
Trojan.OnLineGames.ue
Trojan.OnLineGames.uf
Trojan.OnLineGames.vd
Trojan.OnLineGames.vd
wangjay1980
发表于 2007-6-2 11:26:18 | 显示全部楼层
重了
troika
 楼主| 发表于 2007-6-2 11:28:29 | 显示全部楼层
原帖由 wangjay1980 于 2007-6-2 11:26 发表
重了

通过md5来看没有重的,虽然病毒类型可能有重复的
欠妳緈諨
发表于 2007-6-2 11:54:26 | 显示全部楼层
13个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
蓝色牛仔裤
发表于 2007-6-2 11:58:18 | 显示全部楼层
漏了一个sever.exe 。。


[Scan path] C:\Documents and Settings\Administrator\桌面\Downloads
>C:\Documents and Settings\Administrator\桌面\Downloads\ eploeree.exe infected with Trojan.DownLoader.23067
C:\Documents and Settings\Administrator\桌面\Downloads\10[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\桌面\Downloads\11[1].exe infected with Trojan.PWS.Legmir.916
>C:\Documents and Settings\Administrator\桌面\Downloads\12[1].exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\Administrator\桌面\Downloads\13[1].exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\Administrator\桌面\Downloads\14[1].exe infected with Trojan.PWS.Legmir.917
>C:\Documents and Settings\Administrator\桌面\Downloads\15[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\Downloads\1[1].exe infected with Trojan.Havedo
>C:\Documents and Settings\Administrator\桌面\Downloads\2[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\Downloads\3[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\Downloads\4[1].exe infected with Trojan.Havedo
>>>C:\Documents and Settings\Administrator\桌面\Downloads\5[1].exe infected with Trojan.PWS.Gamania
>C:\Documents and Settings\Administrator\桌面\Downloads\6[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\Downloads\7[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\Downloads\8[1].exe infected with Trojan.Havedo
C:\Documents and Settings\Administrator\桌面\Downloads\9[1].exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\桌面\Downloads\sever.exe - Ok
promised
发表于 2007-6-2 11:58:40 | 显示全部楼层
6
Command line options:
/r=susp.rpt /ha=3 /collect_suspects /nc /af+ /ar+ /bt- /mr- /ml+ /rw+ /as-
Ctrl-C will terminate program execution

*:
C:\
C:\ABC\Downloads[1]\13[1].exe : is suspected of Downloader.Small.160
C:\ABC\...\14[1].exe : is suspected of Trojan-PSW.Lmir.102 (paranoid heuristics)
C:\ABC\Downloads[1]\15[1].exe : is suspected of Downloader.Small.160
C:\ABC\Downloads[1]\2[1].exe : is suspected of Downloader.Small.160
C:\ABC\Downloads[1]\4[1].exe : infected Trojan-Proxy.Win32.Small.du
C:\ABC\...\5[1].exe : is suspected of Embedded.Trojan-PSW.Win32.Agent.im
Program execution terminated by user


Directories       : 5       Files in archives:      Files on disks:
Archives:                   - total       : 16      - total       : 87
- scanned         : 7       -  scanned    : 16      - scanned     : 87
- contain viruses : 0       -  infected   : 0       - infected    : 1
- deleted         : 0       -  suspicious : 0       - suspicious  : 5

Startup    : 11:58:39 02-06-2007
End        : 11:58:53 02-06-2007
Total time : 00:00:14
终止批处理操作吗(Y/N)?
The EQs
发表于 2007-6-2 11:59:19 | 显示全部楼层
蜘蛛也漏了sever。。。。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-26 16:38 , Processed in 0.138715 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表