偶也来凑一下热闹来几个新样本

scottxzt

Starting the file scan:

Begin scan in 'C:\Documents and Settings\dell\桌面\新建文件夹'
C:\Documents and Settings\dell\桌面\新建文件夹\DADOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\DHDINS.EXE
      [DETECTION] Is the Trojan horse TR/Spy.Delf.UV.90
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\GOSKDL.DLL
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\HIDE.EXE
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\JTDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\QHDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\QJDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\RKSLDK.DLL
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\RXDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.ccc
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\TLDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\VBSDAAS2.EXE
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\WLDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\XK1S0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\ZTDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!
C:\Documents and Settings\dell\桌面\新建文件夹\ZXDOOR0.DLL
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年8月19日  15:35
Used time: 00:14 min

The scan has been done completely.

      1 Scanning directories
     20 Files were scanned
     15 viruses and/or unwanted programs were found

scottxzt

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename  Size (Byte) Result
1257750  reg.bak  212.5 KB  UNDER ANALYSIS
1257751  AUTORUN.INF  26 Byte  UNDER ANALYSIS
206398  PACKET.DLL  80 KB  KNOWN CLEAN
206396  WANPACKET.DLL  60 KB  KNOWN CLEAN
245901  WPCAP.DLL  228 KB  KNOWN CLEAN

scottxzt

喜欢红伞是因为它的上报分析真的不错.回复也挺快的.

yinxuchina

北京江民新科技术有限公司

        扫描引擎 11.00.700
        病毒库日期 2007-08-18
        更新日期 2007-08-19

扫描目标 C:\Documents and Settings\yin\桌面\Cccccccccc\

开始时间 2007-08-19 15:52:29

在 C:\Documents and Settings\yin\桌面\Cccccccccc\JTDOOR0.DLL 中发现 TrojanSpy.Agent.arp 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\DADOOR0.DLL 中发现 TrojanSpy.Agent.atj 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\QHDOOR0.DLL 中发现 TrojanSpy.Agent.ars 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\QJDOOR0.DLL 中发现 TrojanSpy.Agent.arq 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\TLDOOR0.DLL 中发现 TrojanSpy.Agent.art 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\RXDOOR0.DLL 中发现 Trojan/PSW.GamePass.wbs 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\VBSDAAS2.EXE 中发现 Trojan/PSW.OnLineGames.esx 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\WLDOOR0.DLL 中发现 TrojanSpy.Agent.arr 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\XK1S0.DLL 中发现 Trojan/PSW.OnLineGames.eqr 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\ZTDOOR0.DLL 中发现 Trojan/PSW.GamePass.wal 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\ZXDOOR0.DLL 中发现 TrojanSpy.Agent.ary 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\HIDE.EXE 中发现 Trojan/PSW.GamePass.wug 病毒, 已删除
在 C:\Documents and Settings\yin\桌面\Cccccccccc\DHDINS.EXE 中发现 TrojanSpy.Delf.afw 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :18                                  病毒体 :13        
                   删除 :13                                    解毒 :0         
    扫描速度(千字节/秒) :295                               扫描时间 :00:00:02
    扫描文件速度(个/秒) :9

红心王子

漏掉4个
有三个DLL  上报
给13楼做点补充

欠妳緈諨

杀了12个