查看: 3525|回复: 17
收起左侧

[病毒样本] 35个毒,md5自己查去吧....

[复制链接]
troika
发表于 2007-6-22 06:23:53 | 显示全部楼层 |阅读模式
呵呵

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
taihuxian
发表于 2007-6-22 06:31:27 | 显示全部楼层
Virus: Trojan-PSW.Win32.OnLineGames.bs, Trojan-PSW.Win32.Delf.qc, Trojan-PSW.Win32.Delf.wh, HackTool.Win32.Agent.be, Trojan-PSW.Win32.OnLineGames.rc, Trojan-PSW.Win32.OnLineGames.ya, Trojan-PSW.Win32.OnLineGames.ui, Backdoor.Win32.Delf.awy

Virus found while downloading Web content.

Address: bbs.kafan.cn
taihuxian
发表于 2007-6-22 06:32:19 | 显示全部楼层
Virus: Trojan-Spy.Win32.Agent.fs, Trojan-PSW.Win32.WOW.qo, Trojan-PSW.Win32.OnLineGames.lj, Trojan-PSW.Win32.OnLineGames.qo, Trojan-PSW.Win32.QQPass.xc, Trojan-PSW.Win32.OnLineGames.nw, Trojan-PSW.Win32.Delf.qc, Trojan-PSW.Win32.OnLineGames.sl (2x), Trojan-PSW.Win32.OnLineGames.rc, Trojan-PSW.Win32.Small.cf, Trojan-PSW.Win32.OnLineGames.ui, Backdoor.Win32.Hupigon.cqx, Worm.Win32.Viking.ls

Virus found while downloading Web content.

Address: bbs.kafan.cn
taihuxian
发表于 2007-6-22 06:38:21 | 显示全部楼层
Virus: Win32:Onlinegames-ACD [Trj] (2x), Win32:OnLineGames-WK [Trj] (4x)

Virus found while downloading Web content.

Address: bbs.kafan.cn
mofunzone
发表于 2007-6-22 07:10:45 | 显示全部楼层
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\Downloads'
C:\Documents and Settings\Administrator\My Documents\Downloads\
  01.exe
      [DETECTION] Is the Trojan horse TR/PSW.Steal.31849
      [WARNING]   The file was ignored!
  02.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.QC.50
      [WARNING]   The file was ignored!
  03.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
      [WARNING]   The file was ignored!
  04.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.WH.1
      [WARNING]   The file was ignored!
  05.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
  06.exe
  07.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
      [WARNING]   The file was ignored!
  08.exe
      [DETECTION] Is the Trojan horse TR/Agent.16896.67
      [WARNING]   The file was ignored!
  09.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.AVG.2
      [WARNING]   The file was ignored!
  10.exe
      [DETECTION] Is the Trojan horse TR/Drop.Spy.Pca.A.1
      [WARNING]   The file was ignored!
  101.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
      [WARNING]   The file was ignored!
  102.dll
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AWB.2
      [WARNING]   The file was ignored!
  103.dll
      [DETECTION] Is the Trojan horse TR/PSW.WOW.QO.1
      [WARNING]   The file was ignored!
  104.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.LJ.14
      [WARNING]   The file was ignored!
  105.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
  106.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.BS.197
      [WARNING]   The file was ignored!
  107.dll
      [DETECTION] Is the Trojan horse TR/PSW.7680.2
      [WARNING]   The file was ignored!
  108.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.54
      [WARNING]   The file was ignored!
  11.exe
  12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
  13.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.QC.50
      [WARNING]   The file was ignored!
  14.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.SL.69
      [WARNING]   The file was ignored!
  15.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.AUP.135
      [WARNING]   The file was ignored!
  16.exe
      [DETECTION] Is the Trojan horse TR/Hijack.Explor.3299
      [WARNING]   The file was ignored!
  17.exe
      [DETECTION] Is the Trojan horse TR/Agent.34708.B
      [WARNING]   The file was ignored!
  18.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGam.QW
      [WARNING]   The file was ignored!
  19.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UI.53
      [WARNING]   The file was ignored!
  20.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [WARNING]   The file was ignored!
  21.exe
      [DETECTION] Is the Trojan horse TR/PSW.Delf.AF.2
      [WARNING]   The file was ignored!
  22.exe
      [DETECTION] Is the Trojan horse TR/Agent.19456.66
      [WARNING]   The file was ignored!
  23.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.UI.54
      [WARNING]   The file was ignored!
  24.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.54
      [WARNING]   The file was ignored!
  25.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.WH.47
      [WARNING]   The file was ignored!
  26.exe
      [DETECTION] Is the Trojan horse TR/PSW.7680.2
      [WARNING]   The file was ignored!
  27.exe
      [DETECTION] Is the Trojan horse TR/PSW.Onlinegames.AWD.4
      [WARNING]   The file was ignored!


End of the scan: 2007年6月21日  16:14
Used time: 00:15 min

The scan has been done completely.

      1 Scanning directories
     35 Files were scanned
     33 viruses and/or unwanted programs were found
      1 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      0 Archives were scanned
     33 Warnings
      0 Notes
      0 Hidden objects were found

扫描日志
NOD32版本 2340 (20070620) NT
命令行: C:\Documents and Settings\Administrator\My  ?
?Documents\Downloads
正在检查NOD32.EXE文件的CRC:状态正常
D:\Eset\nod32.exe - 是正常的
扫描系统内存中:没有进行 (选项已关闭)
扫描MBR及引导区中:没有进行 (选项已关闭)
日期: 21.6.2007  时间:16:14:41
已关闭反隐藏功能.
已扫描的磁盘,文件夹及文件:C:\Documents and Settings\ ?
?Administrator\My Documents\Downloads\
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\01.exe - 可能是 Win32/PSW.QQPass.VD 木马  ?
?的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\02.exe - Win32/PSW.Delf.NHI 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\03.exe - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\04.exe - Win32/PSW.Delf.NHI 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\05.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\06.exe >>NSIS >>InstallOptions.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\06.exe >>NSIS >>ioSpecial.ini - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\06.exe >>NSIS >>modern-wizard.bmp - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\06.exe >>NSIS >>System.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\07.exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\08.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\09.exe - Win32/PSW.Agent.NDP 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\10.exe - Win32/Delf.NFD 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\101.dll - 可能是 Win32/Genetik 木马 的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\102.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\103.dll - Win32/PSW.WOW.NCD 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\104.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\105.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\106.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\107.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\108.dll - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\11.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\12.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\13.exe - Win32/PSW.Delf.NHI 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\14.exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\15.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\16.exe - 可能是 Win32/PSW.Agent.NDP 木马  ?
?的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\17.exe - Win32/PSW.Agent.NDP 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\18.exe - Win32/PSW.Agent.NEW 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\19.exe - Win32/PSW.Agent.NDP 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\20.exe - Win32/Hupigon 木马的变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\21.exe - 可能是 Win32/Viking 病毒 的一个变种
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\22.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\23.exe - Win32/PSW.Agent.NDP 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\24.exe - Win32/PSW.Agent.NDP 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\25.exe - 是正常的
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\26.exe - Win32/PSW.Agent.NDP 木马
C:\Documents and Settings\Administrator\My Documents\ ?
?Downloads\27.exe - 可能是 Win32/PSW.Agent.NDP 木马  ?
?的一个变种
已扫描的文件数目:38
已发现的病毒数目:21
完成时间: 16:14:51 总扫描时间:10 秒 (00:00:10)



[Scan path] C:\Documents and Settings\Administrator\My Documents\Downloads
>>C:\Documents and Settings\Administrator\My Documents\Downloads\01.exe infected with Trojan.PWS.Qqpass.851
>>C:\Documents and Settings\Administrator\My Documents\Downloads\02.exe infected with Trojan.PWS.Gamania.origin
>C:\Documents and Settings\Administrator\My Documents\Downloads\03.exe - Ok
C:\Documents and Settings\Administrator\My Documents\Downloads\04.exe - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data001 - Ok
>>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data001 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data002 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data003 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data004 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data005 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data006 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data007 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data008 - Ok
>>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002\data009 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data002 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe\data003 infected with Trojan.Sniff
C:\Documents and Settings\Administrator\My Documents\Downloads\05.exe - archive contains infected objects
>>C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe\data001 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe\data002 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe\data003 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe\data004 - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe\data005 - Ok
C:\Documents and Settings\Administrator\My Documents\Downloads\06.exe - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\07.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\08.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\09.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\10.exe infected with Trojan.Sniff
>C:\Documents and Settings\Administrator\My Documents\Downloads\101.dll - Ok
C:\Documents and Settings\Administrator\My Documents\Downloads\102.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\103.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\104.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\105.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\106.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\107.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\108.dll infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\11.exe - Ok
>C:\Documents and Settings\Administrator\My Documents\Downloads\12.exe probably infected with MULDROP.Trojan
>>C:\Documents and Settings\Administrator\My Documents\Downloads\13.exe infected with Trojan.PWS.Gamania.origin
>C:\Documents and Settings\Administrator\My Documents\Downloads\14.exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\Administrator\My Documents\Downloads\15.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\16.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\17.exe infected with Trojan.PWS.Wsgame.origin
>C:\Documents and Settings\Administrator\My Documents\Downloads\18.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\19.exe infected with Trojan.PWS.Wsgame
>>C:\Documents and Settings\Administrator\My Documents\Downloads\20.exe infected with BackDoor.Pigeon.3151
C:\Documents and Settings\Administrator\My Documents\Downloads\21.exe infected with Win32.HLLW.Gavir.72
>C:\Documents and Settings\Administrator\My Documents\Downloads\22.exe probably infected with MULDROP.Trojan
C:\Documents and Settings\Administrator\My Documents\Downloads\23.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\24.exe infected with Trojan.PWS.Wsgame
>C:\Documents and Settings\Administrator\My Documents\Downloads\25.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\26.exe infected with Trojan.PWS.Wsgame
C:\Documents and Settings\Administrator\My Documents\Downloads\27.exe infected with Trojan.PWS.Wsgame

-----------------------------------------------------------------------------
Scan statistics
-----------------------------------------------------------------------------
Objects scanned: 51
Infected objects found: 28
Objects with modifications found: 0
Suspicious objects found: 2
Adware programs found: 0
Dialer programs found: 0
Joke programs found: 0
Riskware programs found: 0
Hacktool programs found: 0
Objects cured: 0
Objects deleted: 0
Objects renamed: 0
Objects moved: 0
Objects ignored: 0
Scan speed: 621 Kb/s
Scan time: 00:00:04
红心王子
发表于 2007-6-22 08:27:16 | 显示全部楼层
斧头报26个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
tracydk
发表于 2007-6-22 08:31:35 | 显示全部楼层
avast居然查出36个

本帖子中包含更多资源

您需要 登录 才可以下载或查看,没有帐号?快速注册

x
红心王子
发表于 2007-6-22 08:35:11 | 显示全部楼层

回复 #7 tracydk 的帖子

难道说KV漏杀了?
上报看看
The EQs
发表于 2007-6-22 08:36:45 | 显示全部楼层

回复 #7 tracydk 的帖子

I服了U。。。。。都没解压。。。直接扫当然会这样
红心王子
发表于 2007-6-22 08:39:15 | 显示全部楼层
KV扫描,我没有解压,扫出来的识别出的病毒都不一样
没有重的
您需要登录后才可以回帖 登录 | 快速注册

本版积分规则

手机版|杀毒软件|软件论坛| 卡饭论坛

Copyright © KaFan  KaFan.cn All Rights Reserved.

Powered by Discuz! X3.4( 沪ICP备2020031077号-2 ) GMT+8, 2025-5-10 12:59 , Processed in 0.123095 second(s), 19 queries .

卡饭网所发布的一切软件、样本、工具、文章等仅限用于学习和研究,不得将上述内容用于商业或者其他非法用途,否则产生的一切后果自负,本站信息来自网络,版权争议问题与本站无关,您必须在下载后的24小时之内从您的电脑中彻底删除上述信息,如有问题请通过邮件与我们联系。

快速回复 客服 返回顶部 返回列表