捉回来了几个[MD5: F3C740 761D7B 276DBE 90430B 893873]

dikex

从这贴里面的网页毒网里面捉的几个

http://bbs.kafan.cn/viewthread.php?tid=96984&extra=page%3D1%26amp%3Bfilter%3D0%26amp%3Borderby%3Ddateline

小邪邪

咖啡企业版报一个木马

目前已发现许多咖啡个人版报的东西企业版却不报  

mofunzone

果然nsis就无奈了，运行后秒3个。。
扫描日志
NOD32版本 2330 (20070615) NT
命令行： C:\Documents and Settings\Administrator\My  ?
?Documents\样本.rar
正在检查NOD32.EXE文件的CRC：状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中：没有进行 (选项已关闭)
扫描MBR及引导区中：没有进行 (选项已关闭)
日期： 14.6.2007  时间：23:29:18
已关闭反隐藏功能.
已扫描的磁盘，文件夹及文件：C:\Documents and Settings\ ?
?Administrator\My Documents\样本.rar
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>iexplore.exe - Win32/TrojanDownloader.Delf. ?
?NVV 木马
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>NTDETECT.dll - Win32/TrojanDownloader.Delf. ?
?BLI 木马
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>805.exe >>NSIS >>805.exe - Win32/Agent.NAU  ?
?蠕虫的变种
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>805.exe >>NSIS >>805~.exe - Win32/Agent.NEO  ?
?木马的变种
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>805.exe >>NSIS >>eqifa009.exe -  ?
?Win32/TrojanDownloader.Agent.NOK 木马
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>cc_231.exe - Win32/TrojanDownloader.Agent. ?
?NON 木马
C:\Documents and Settings\Administrator\My Documents\样本. ?
?rar >>RAR >>down.exe - Win32/TrojanDownloader.Delf.BHO  ?
?木马
已扫描的文件数目：7
已发现的病毒数目：7
完成时间： 23:29:20 总扫描时间：2 秒 (00:00:02)


Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\样本.rar'
C:\Documents and Settings\Administrator\My Documents\
  样本.rar
    [0] Archive type: RAR
    --> iexplore.exe
        [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> NTDETECT.dll
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.bli
        [WARNING]   Infected files in archives cannot be repaired!
    --> 805.exe
    --> cc_231.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
    --> down.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Delf.bko
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


[Scan path] C:\Documents and Settings\Administrator\My Documents\样本.rar
>>C:\Documents and Settings\Administrator\My Documents\样本.rar\iexplore.exe infected with Trojan.Cipher
>>C:\Documents and Settings\Administrator\My Documents\样本.rar\NTDETECT.dll infected with Trojan.Cipher
>>>C:\Documents and Settings\Administrator\My Documents\样本.rar\805.exe\data001 - Ok
>>>C:\Documents and Settings\Administrator\My Documents\样本.rar\805.exe\data002 probably infected with DLOADER.Trojan
>>C:\Documents and Settings\Administrator\My Documents\样本.rar\805.exe\data003 infected with Trojan.Popwin
>>C:\Documents and Settings\Administrator\My Documents\样本.rar\805.exe\data004 infected with Trojan.Popwin
>C:\Documents and Settings\Administrator\My Documents\样本.rar\805.exe - archive contains infected objects
>>C:\Documents and Settings\Administrator\My Documents\样本.rar\cc_231.exe probably infected with BACKDOOR.Trojan
>C:\Documents and Settings\Administrator\My Documents\样本.rar\down.exe infected with BackDoor.WebDor
C:\Documents and Settings\Administrator\My Documents\样本.rar - archive contains infected objects

fanrubin

4

小邪邪

wangjay1980

detected: Trojan program Trojan-Downloader.Win32.Delf.aef        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/iexplore.exe//ASPack
detected: Trojan program Trojan-Downloader.Win32.Delf.bli        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/NTDETECT.dll
detected: virus Worm.Win32.Agent.t        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/805.exe//data0002//PE_Patch.PECompact//PecBundle//PECompact
detected: Trojan program Backdoor.Win32.Agent.ahj        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/805.exe//data0003
detected: Trojan program Trojan-Downloader.Win32.Delf.bko        File: C:\Documents and Settings\Owner\×ÀÃæ\Ñù±¾.rar/down.exe
detected: virus Trojan.Generic (modification) File: c:\documents and settings\owner\×ÀÃæ\Ñù±¾.rar/805.exe//data0004

[ 本帖最后由 wangjay1980 于 2007-6-15 14:44 编辑 ]

欠妳緈諨

2

kp2006

卡吧7杀4个

promised

20070615 083144        扫描 '单击右键扫描' 已启动.
20070615 083147        在"C:\ABC\样本.rar\iexplore.exe"中检测到病毒'Mal/DelpDldr-B'
20070615 083147        在"C:\ABC\样本.rar\NTDETECT.dll"中检测到病毒'Mal/Behav-056'
20070615 083147        在"C:\ABC\样本.rar\805.exe\FILE:0001"中检测到病毒'Mal/Behav-097'
20070615 083147        在"C:\ABC\样本.rar\805.exe\FILE:0002"中检测到病毒'Mal/EncPk-P'
20070615 083147        在"C:\ABC\样本.rar\805.exe\FILE:0003"中检测到病毒'Mal/EncPk-P'
20070615 083147        在"C:\ABC\样本.rar\down.exe"中检测到病毒'W32/Versie-Gen'
20070615 083147        扫描 '单击右键扫描' 已完成.
20070615 083147        扫描'单击右键扫描'结果摘要:
                处理项目: 6
                错误: 0
                隔离安全隐患: 1
                处理安全隐患: 0
      (137个项目)

红心王子

斧头KV和avast报的都是两个
上斧头！！