查看: 6844|回复: 45
收起左侧

[病毒样本] 毒25个,md5见帖子

[复制链接]
troika
发表于 2007-6-12 15:41:00 | 显示全部楼层 |阅读模式
39df0a
4bd473
b43430
4245e3
fd9499
e4de62
c56099
0d732e
c2c637
655591
1fd01c
32ba08
f924e9
b86dc9
d17c9c
37865e
55a8b5
218f69
5d6a5e
82e1c5
5062c5
b98912
9e1e0f
75fd56
242ee0

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-6-12 15:50:26 | 显示全部楼层
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.ui        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part2.rar/22.exe
探测到: 病毒 Worm.Win32.Delf.ci        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/09.exe
探测到: 木马程序 Trojan-Downloader.Win32.Small.czl        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/02.exe//NSPack
探测到: 木马程序 Trojan-PSW.Win32.Lmir.amj        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/03.exe//PE_Patch//UPack
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.qw        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/04.exe//PE_Patch//UPack
探测到: 病毒 Virus.Win32.AutoRun.bp        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/05.exe//UPX
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.ui        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/06.exe
探测到: 木马程序 Trojan-PSW.Win32.Small.cf        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/07.exe
探测到: 病毒 Invader (变种)        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/08.exe
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.xg        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/01.exe//PE_Patch//UPack
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.ui        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/10.exe
探测到: 木马程序 Trojan-PSW.Win32.WOW.qo        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/12.exe//WOSO0.DLL
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.xa        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/13.exe//MSIMMS32.DLL
探测到: 木马程序 Trojan-Proxy.Win32.Small.du        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/14.exe//PE_Patch.AvSpoof//BeRo//KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.qw        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/15.exe//PE_Patch//UPack
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.sl        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/17.exe//PE_Patch//UPack
探测到: 病毒 Virus.Win32.AutoRun.bx        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/19.exe//PE_Patch.PECompact//PecBundle//PECompact
探测到: 木马程序 Trojan-PSW.Win32.OnLineGames.ui        文件: C:\Documents and Settings\Administrator\桌面\Downloads.part1.rar/22.exe
卡巴7有的还报了壳,一共报了18个,有的无法删除,但是可以隔离
一派胡言
发表于 2007-6-12 15:51:33 | 显示全部楼层
江民杀毒软件报告文件

        北京江民新科技术有限公司

        扫描引擎 10.00.600
        病毒库日期 2007-06-12
        更新日期 2007-06-12

扫描目标 C:\Documents and Settings\Administrator\桌面\Downloads[1]\

开始时间 2007-06-12 15:54:23

在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\09.exe 中发现 Worm/Delf.ac 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\02.exe 中发现 TrojanDownloader.Agent.kfh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\03.exe 中发现 Trojan/PSW.GamePass.ixm 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\04.exe 中发现 Trojan/PSW.GamePass.mhm 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\05.exe 中发现 Trojan/PSW.GamePass.mup 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\06.exe 中发现 Trojan/PSW.GamePass.gdt 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\07.exe 中发现 Trojan/PSW.GamePass.mqq 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\08.exe 中发现 TrojanSpy.Delf.lg 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\10.exe 中发现 Trojan/PSW.GamePass.gdt 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\01.exe 中发现 Trojan/PSW.GamePass.lpa 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\12.exe 中发现 Trojan/PSW.GamePass.lfc 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\13.exe 中发现 Trojan/PSW.GamePass.nmh 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\15.exe 中发现 TrojanDownloader.Adload.lp 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\17.exe 中发现 Trojan/PSW.GamePass.nab 病毒, 已删除
在 C:\Documents and Settings\Administrator\桌面\Downloads[1]\22.exe 中发现 Trojan/PSW.GamePass.gdt 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :614                                 病毒体 :15        
                   删除 :15                                    解毒 :0         
    扫描速度(千字节/秒) :4740                              扫描时间 :00:00:35
    扫描文件速度(个/秒) :17

   == == ==        == == == == == ==   == == == == == ==    == == == == == ==    == == == == ==     == == == == == ==
The EQs
发表于 2007-6-12 15:51:49 | 显示全部楼层
Scan performed at: 2007-6-12 15:50:24
Scanning Log
NOD32 version 2323 (20070611) NT
Command line: C:\Documents and Settings\EQ2\桌面\Downloads
Operating memory - is OK

Date: 12.6.2007  Time: 15:50:28
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\Downloads\
C:\Documents and Settings\EQ2\桌面\Downloads\01.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\02.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Downloads\05.exe - probably a variant of Win32/PSW.QQPass.VD trojan
C:\Documents and Settings\EQ2\桌面\Downloads\06.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\07.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\08.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\09.exe - a variant of Win32/TrojanDownloader.Delf.BHO trojan
C:\Documents and Settings\EQ2\桌面\Downloads\10.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\12.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\14.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\15.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\16.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\17.exe - a variant of Win32/PSW.Agent.NEW trojan
C:\Documents and Settings\EQ2\桌面\Downloads\18.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\19.exe - probably unknown NewHeur_PE virus [7]
C:\Documents and Settings\EQ2\桌面\Downloads\20.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\22.exe - probably a variant of Win32/PSW.Agent.NDP trojan
C:\Documents and Settings\EQ2\桌面\Downloads\23.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\24.exe - a variant of Win32/Agent.NIK trojan
C:\Documents and Settings\EQ2\桌面\Downloads\25.exe - a variant of Win32/Agent.NIK trojan
Number of scanned files: 25
Number of threats found: 20
Number of files cleaned: 20
Time of completion: 15:50:31 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.
wangjay1980
发表于 2007-6-12 15:52:51 | 显示全部楼层
24个
detected: virus Worm.Win32.Delf.ci        File: E:\Ñù±¾\bingdu\09.exe
detected: Trojan program Trojan-Downloader.Win32.Small.czl        File: E:\Ñù±¾\bingdu\02.exe//NSPack
detected: Trojan program Trojan-PSW.Win32.Lmir.amj        File: E:\Ñù±¾\bingdu\03.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qw        File: E:\Ñù±¾\bingdu\04.exe//PE_Patch//UPack
detected: virus Virus.Win32.AutoRun.bp        File: E:\Ñù±¾\bingdu\05.exe//UPX
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ui        File: E:\Ñù±¾\bingdu\06.exe
detected: Trojan program Trojan-PSW.Win32.Small.cf        File: E:\Ñù±¾\bingdu\07.exe
detected: virus Invader (modification)        File: E:\Ñù±¾\bingdu\08.exe
detected: Trojan program Trojan-PSW.Win32.OnLineGames.xg        File: E:\Ñù±¾\bingdu\01.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ui        File: E:\Ñù±¾\bingdu\10.exe
detected: virus Trojan.Generic (modification)        File: E:\Ñù±¾\bingdu\11.exe//PE_Patch//UPack
detected: Trojan program Trojan-PSW.Win32.WOW.qo        File: E:\Ñù±¾\bingdu\12.exe//WOSO0.DLL
detected: Trojan program Trojan-PSW.Win32.OnLineGames.xa        File: E:\Ñù±¾\bingdu\13.exe//MSIMMS32.DLL
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\14.exe//PE_Patch.AvSpoof//BeRo//KLAVME.DAT//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-PSW.Win32.OnLineGames.qw        File: E:\Ñù±¾\bingdu\15.exe//PE_Patch//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\16.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
detected: Trojan program Trojan-PSW.Win32.OnLineGames.sl        File: E:\Ñù±¾\bingdu\17.exe//PE_Patch//UPack
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\18.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
detected: virus Virus.Win32.AutoRun.bx        File: E:\Ñù±¾\bingdu\19.exe//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\20.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
detected: Trojan program Trojan-PSW.Win32.OnLineGames.ui        File: E:\Ñù±¾\bingdu\22.exe
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\23.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\24.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
detected: Trojan program Trojan-Proxy.Win32.Small.du        File: E:\Ñù±¾\bingdu\25.exe//PE_Patch.AvSpoof//BeRo//CELINDRIVER.SYS
The EQs
发表于 2007-6-12 15:52:51 | 显示全部楼层

回复 #2 红心王子 的帖子

没看出来卡巴报壳。。。。卡巴报壳是packed.XXXX
wangjay1980
发表于 2007-6-12 15:56:01 | 显示全部楼层

回复 #2 红心王子 的帖子

真是服了你。。。
红心王子
发表于 2007-6-12 15:58:48 | 显示全部楼层
费尔和KV数量一样
15个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-6-12 15:59:18 | 显示全部楼层

回复 #7 wangjay1980 的帖子

为什么和你报的数量不一样
wangjay1980
发表于 2007-6-12 16:01:12 | 显示全部楼层

回复 #9 红心王子 的帖子

所以我比较佩服你。。。

还有卡巴没有报壳。。。
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-1-28 03:45 , Processed in 0.125954 second(s), 18 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表