下载者产物82个

残缺的唯美

用微点 点到手麻=。=

dragonkf

。。。。。。。。。。。。。。。。。。。 少了50个  我汗  果然咖啡在测试区满郁闷的=。=

[ 本帖最后由 dragonkf 于 2007-8-1 22:03 编辑 ]

lsyer

就看到雨伞报了一堆壳~

woai_jolin

看看fs的表现
76个

tracydk

ArcaMicroScan - Scanning report [2007.08.02 09:50:37]
Base date : 2007.08.01 08:03:30





[Scanning : F:\virus]


F:\virus\virus.part1.rar<RAR>:10012[1].exe<UPack>:10012[1].exe<ASPack>:10012[1].exe <- Variant:Trojan.Agent.Ahj : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:1012[1].exe<UPack>:1012[1].exe<ASPack>:1012[1].exe <- Variant:Trojan.Agent.Ahj : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:103.exe<UPack>:103.exe<ASPack>:103.exe <- Variant:Trojan.Agent.Ahj : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:1063.exe<NSIS>:wr-1-22.exe <- Downloader.Small.Eqn : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:1063[1].exe<NSIS>:wr-1-22.exe <- Downloader.Small.Eqn : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:112.exe <- Downloader.Vb.Atk : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:1228[1].exe<NSIS>:565.exe <- Downloader.Small.Eqn : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:2.exe<UPack>:2.exe<ASPack>:2.exe <- Variant:Trojan.Agent.Ahj : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:3EE4F2CC.EXE<UPack>:3EE4F2CC.EXE<ASPack>:3EE4F2CC.EXE <- Variant:Trojan.Agent.Ahj : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:565.exe <- Downloader.Small.Eqn : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:7.exe<PECompact2>:7.exe <- Variant:Worm.Agent.T : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:8.exe<NSIS>:565.exe <- Downloader.Small.Eqn : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:847[1].exe<PECompact2>:847[1].exe <- Variant:Worm.Agent.T : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:9.exe<PECompact2>:9.exe <- Variant:Worm.Agent.T : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:944.exe<NSIS>:DoSSSetup.dll <- Adware.Cinmus.T : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:aabb.exe <- Downloader.Agent.Bys : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:b122.exe <- Adware.Rond.C : Cleaning -> Delete
F:\virus\virus.part1.rar<RAR>:b122.exe.bin<ZIP>:b122.exe <- Adware.Rond.C : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:bd8[1].rar<ASPack>:bd8[1].rar <- Adware.Admoke.Ba : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:cmd.exe <- Trojan.W32.Downloader.Adv1 : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:cuod.exe<NSIS>:aabb.exe <- Downloader.Agent.Bys : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:DoSSSetup.dll <- Adware.Cinmus.T : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:guyi1234.exe <- Downloader.Small.Dxm : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:gwTiN.exe<PECompact2>:gwTiN.exe <- Variant:Worm.Agent.T : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:ldcore.dll <- Downloader.Small.Dxm : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:my_70136[1].rar <- Downloader.Vb.Atk : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:retadpu22.exe <- Trojan.Downloader.Agnet.Bls : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:retadpu565.exe <- Trojan.Downloader.Agnet.Bls : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:retadpu[1].exe <- Trojan.Downloader.Agnet.Bls : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:sd.exe <- Variant:Adware.Cinmus.F : Cleaning -> Delete
F:\virus\virus.part2.rar<RAR>:sh.exe<ASPack>:sh.exe <- Adware.Admoke.Ba : Cleaning -> Delete
F:\virus\virus.part3.rar<RAR>:UnInstall.exe <- Trojan.Small.Oa : Cleaning -> Delete
F:\virus\virus.part3.rar<RAR>:wr-1-22.exe <- Downloader.Small.Eqn : Cleaning -> Delete



Scanned objects : 130

Infected objects : 33

tracydk

Arcabit的狂启发就这水平??

红心王子

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Small.sdd      
病毒： Adware.Win32.Agent.nuk   
病毒： Trojan.DL.Win32.Agent.xen
病毒： Trojan.IMMSG.Win32.TBMSG.jc
病毒： Trojan.Win32.Agent.tww   
病毒： Trojan.IMMSG.Win32.TBMsg.iv
病毒： Trojan.DL.Win32.Agent.xfl
病毒： Trojan.Spy.Win32.Agent.ddd
病毒： Trojan.DL.Win32.VB.xex   
病毒： Trojan.DL.Win32.Agent.xbm
病毒： Trojan.DL.Win32.Agent.xfj
病毒： Trojan.DL.Mnless.zq      
病毒： Trojan.Win32.Dodolook.g  
病毒： Dropper.Win32.Agent.nwe  
病毒： Trojan.DL.Win32.Agent.xer
病毒： Adware.Win32.AdMoke.ej   
病毒： Trojan.Win32.MultiDrop.c
病毒： Trojan.Win32.Dodolook.h  
病毒： Trojan.DL.Win32.Agent.xet
病毒： Trojan.Spy.Win32.Agent.ddd
病毒： Trojan.DL.Win32.Agent.xes
病毒： Adware.Win32.ZhongSou.a  
病毒： Adware.Win32.ZhongSou.a  
病毒： Adware.Win32.Agent.nuk   
病毒： Adware.Win32.ZhongSou.c  

MAC地址：00:D0:F8:38:4B:7A

用户来源：局域网

软件版本：19.34.30
70个

竟然还有中搜的广告，无语。。

onesand

C:\Documents and Settings\huaxun\桌面\virus.part1.rar
  [0] Archive type: RAR
  --> virus\0.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\023[1].exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\10012[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.Flux.A.3
  --> virus\1012[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.Flux.A.2
  --> virus\103.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Flux.A.3
  --> virus\1063.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Small.eqn.58
  --> virus\1063[1].exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Small.eqn.58
  --> virus\1093[1].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\1093[2].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\11.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\112.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.atk.58
  --> virus\1228[1].exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Small.eqn.23
  --> virus\123.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\13715C84.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\1jh3jq.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> virus\2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Flux.A.2
  --> virus\2209[1].exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\3EE4F2CC.EXE
      [DETECTION] Is the Trojan horse TR/Dldr.Flux.A.3
  --> virus\4.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\5.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\565.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\6.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\62205[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\66005[1].exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Exaal.45056 Backdoor server programs
  --> virus\7.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\8.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Small.eqn.23
  --> virus\847[1].exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\9.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\944.exe
      [DETECTION] Contains signature of the dropper DR/Cinmus.T.5
  --> virus\999[1].rar
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\aabb.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bys
  --> virus\acpidisk.sys
      [DETECTION] Contains signature of the rootkit RKIT/Cinmus.M
  --> virus\b122.exe
      [DETECTION] Is the Trojan horse TR/Drop.Agent.56320
    --> virus\b122.exe.bin
      [1] Archive type: ZIP
      --> b122.exe
          [DETECTION] Is the Trojan horse TR/Drop.Agent.56320
  --> virus\bao118[1].exe
      [DETECTION] Is the Trojan horse TR/Agent.8192.177
  --> virus\bd2[1].rar
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.YZ.3.A
      [INFO]      The file was moved to '47234424.qua'!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus.part2.rar'
C:\Documents and Settings\huaxun\桌面\virus.part2.rar
  [0] Archive type: RAR
  --> virus\bd8[1].rar
      [DETECTION] The file name contains an executable file extension disguised as a harmless one HEUR-DBLEXT/Crypted
  --> virus\cc_231[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\cmd.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> virus\comvspn.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\cuod.exe
      [DETECTION] Contains signature of the dropper DR/Dldr.Agent.bys.1
  --> virus\dodolook264[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\DoSSSetup.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cinmus.JH
  --> virus\guyi1234.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> virus\gwTiN.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\husjdd8s.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> virus\imlgotgwckmja.dll
      [DETECTION] Is the Trojan horse TR/Ieser.A
  --> virus\ldcore.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Small.dxm.3
  --> virus\mclient.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\mminstall[1]
      [DETECTION] Is the Trojan horse TR/Drop.Age.93696.A
  --> virus\MSURLPAR.dll
      [DETECTION] Is the Trojan horse TR/BHO.Agent.136576
    --> virus\MSURLPAR.dll.zgx.tmp
      [1] Archive type: CAB (Microsoft)
      --> MSURLPAR.dll.zgx
          [DETECTION] Is the Trojan horse TR/BHO.Agent.136576
  --> virus\mszstb.dll
      [DETECTION] Is the Trojan horse TR/Spy.Agent.90112
    --> virus\mszstb.dll.zgx.tmp
      [1] Archive type: CAB (Microsoft)
      --> mszstb.dll.zgx
          [DETECTION] Is the Trojan horse TR/Spy.Agent.90112
  --> virus\mszstb.sys
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Zhongsou.I
    --> virus\mszstb.sys.tmp
      [1] Archive type: CAB (Microsoft)
      --> mszstb.sys
          [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Zhongsou.I
  --> virus\my_70136[1].rar
      [DETECTION] Is the Trojan horse TR/Dldr.VB.atk.58
  --> virus\popinstall.exe
      [DETECTION] Is the Trojan horse TR/Popwin.DE.1
  --> virus\retadpu22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\retadpu565.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\retadpu[1].exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\sb.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Agen.YZ.3.A
  --> virus\SCardSevr.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Small.BQ.18 Backdoor server programs
  --> virus\sd.exe
      [DETECTION] Contains signature of the dropper DR/Cinmus.T.7
  --> virus\Setup.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Zhongsou.H.11
  --> virus\sh.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> virus\spnvup.dll
      [DETECTION] Is the Trojan horse TR/Agent.8192.176
  --> virus\tempaq
      [DETECTION] Is the Trojan horse TR/Drop.Age.93696.A
      [INFO]      The file was moved to '4723442f.qua'!
Begin scan in 'C:\Documents and Settings\huaxun\桌面\virus.part3.rar'
C:\Documents and Settings\huaxun\桌面\virus.part3.rar
  [0] Archive type: RAR
  --> virus\uj5geqq3.dll
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.73728 Backdoor server programs
  --> virus\UnInstall.exe
      [DETECTION] Is the Trojan horse TR/Small.OA
  --> virus\wdfmgrnt.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\winpop.exe
      [DETECTION] Is the Trojan horse TR/Popwin.DE
  --> virus\wr-1-22.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> virus\y9r5hl.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [INFO]      The file was moved to '47234432.qua'!


End of the scan: 2007年8月2日  10:39
Used time: 00:28 min

qqq000@qq.com

----------
              [凝逸反毒] (http://hi.baidu.com/503165656)
       [凝逸.扫描病毒引擎-日志]       2007.8.2 11:0:17
文件:F:\070801\virus[1]\virus\0.exe | 感染:Trojan.PWS.Wsgame [1062>20070729_ny0001.axx]3(3.5)
操作:删除文件
文件:F:\070801\virus[1]\virus\10.exe | 感染:Trojan.PSW.GamePass [263>20070801_ny0002.axx]3(2.4)
操作:删除文件
文件:F:\070801\virus[1]\virus\1012[1].exe | 感染:MULDROP.Trojan [104>20070801_ny0002.axx]3(2.2)
操作:删除文件
文件:F:\070801\virus[1]\virus\1093[1].exe | 感染:virus [12628>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\11.exe | 感染:virus [12628>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\13715C84.EXE | 感染:Trojan.PSW.GamePass [263>20070801_ny0002.axx]3(2.4)
操作:删除文件
文件:F:\070801\virus[1]\virus\2.exe | 感染:MULDROP.Trojan [104>20070801_ny0002.axx]3(2.2)
操作:删除文件
文件:F:\070801\virus[1]\virus\2209[1].exe | 感染:Trojan.PWS.Wsgame [1062>20070729_ny0001.axx]3(3.5)
操作:删除文件
文件:F:\070801\virus[1]\virus\5.exe | 感染:TrojanDownloader.Small.cam [630>20070729_ny0001.axx]2(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\6.exe | 感染:BINARYRES [43>20070801_ny0002.axx]3(4.5)
操作:删除文件
文件:F:\070801\virus[1]\virus\62205[1].exe | 感染:Trojan.PSW.GamePass [263>20070801_ny0002.axx]3(2.4)
操作:删除文件
文件:F:\070801\virus[1]\virus\66005[1].exe | 感染:BINARYRES [43>20070801_ny0002.axx]3(4.5)
操作:删除文件
文件:F:\070801\virus[1]\virus\7.exe | 感染:DLOADER.Trojan [44>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\847[1].exe | 感染:DLOADER.Trojan [44>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\9.exe | 感染:DLOADER.Trojan [44>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\944.exe | 感染:virus [12485>20070726_dw0001.axx]3(5.10)
操作:删除文件
文件:F:\070801\virus[1]\virus\aabb.exe | 感染:Trojan.DownLoader.27534 [6999>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\acpidisk.sys | 感染:Adware.Cinmus [6998>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\bd2[1].rar | 感染:Trojan.PWS.Wsgame [1119>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\bd4[1].rar | 感染:virus [11699>20070726_dw0001.axx]3(19.45)
操作:删除文件
文件:F:\070801\virus[1]\virus\bd8[1].rar | 感染:Adware.Clicker.bzh [586>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\dodolook264[1].exe | 感染:TrojanDownloader.Small.cam [630>20070729_ny0001.axx]2(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\DoSSSetup.dll | 感染:Adware.Cinmus [7000>20070726_dw0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\gwTiN.exe | 感染:DLOADER.Trojan [44>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\MSURLPAR.dll | 感染:Trojan.PSW.GamePass [249>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\mszstb.dll | 感染:DLOADER.Trojan [827>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\retadpu22.exe | 感染:Trojan.DownLoader.24772 [31>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\retadpu565.exe | 感染:Trojan.DownLoader.24772 [31>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\retadpu[1].exe | 感染:Trojan.DownLoader.24772 [31>20070801_ny0002.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\sb.exe | 感染:Trojan.PWS.Wsgame [1119>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\sd.exe | 感染:virus [11699>20070726_dw0001.axx]3(19.45)
操作:删除文件
文件:F:\070801\virus[1]\virus\sh.exe | 感染:Adware.Clicker.bzh [586>20070729_ny0001.axx]3(1.1)
操作:删除文件
文件:F:\070801\virus[1]\virus\wdfmgrnt.exe | 感染:TrojanDownloader.Small.cam [149>20070801_ny0002.axx]2(1.1)
操作:删除文件
扫描完成|病毒:33 文件:82|耗时:17315
----------