毒网及其上面的毒

dikex

毒网：
http://free.20-09.cn/error.htm

上面的毒：
http://www.ip228.cn/svcos.exe
http://wvw.8x9x8.cn/888.exe
http://www.ip228.cn/down.exe
http://www.ip228.cn/xiazai.exe
http://www.souxse.cn/xuik.exe
http://www.ip228.cn/du.cab（下不了）

去掉重复后有三个

nosferatu

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\TEMP.rar'
C:\Documents and Settings\Administrator\桌面\TEMP.rar
  [0] Archive type: RAR
  --> xuik.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
  --> 888.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> down.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [INFO]      The file was deleted!

dikex

附加一堆：

http://vvv.3x7x.cn/100.exe

……
……

http://vvv.3x7x.cn/119.exe

xiaopangmd

C:\Documents and Settings\Martin\Local Settings\Application Data\Mozilla\Firefox\Profiles\r5vy9ey1.default\Cache\E87810ECd01 » RAR » xuik.exe    a variant of Win32/PSW.Delf.NIY trojan        
C:\Documents and Settings\Martin\Local Settings\Application Data\Mozilla\Firefox\Profiles\r5vy9ey1.default\Cache\E87810ECd01 » RAR » 888.exe    a variant of Win32/Delf.NDV worm        
C:\Documents and Settings\Martin\Local Settings\Application Data\Mozilla\Firefox\Profiles\r5vy9ey1.default\Cache\E87810ECd01 » RAR » down.exe    probably a variant of Win32/PSW.Delf.NHI trojan

残缺的唯美

The requested URL http://wvw.8x9x8.cn/888.exe is infected with Trojan-Downloader.Win32.Murlo.hs virus
The requested URL http://www.souxse.cn/xuik.exe is infected with Trojan-PSW.Win32.Small.dq virus

down  pas

yurius

W32.SillyFDC           down.exe
W32.Fubalca.E        888.exe
W32.Silly!gen           xuik.exe

红心王子

2007-10-11        20:43:19        1192106599        Administrator        1992        Sign of "Win32:PePatch-FA [Trj]" has been found in "D:\Downloads\TEMP.rar\xuik.exe\[UPX]" file.  
2007-10-11        20:43:23        1192106603        Administrator        1992        Sign of "Win32:Delf-FVX [Trj]" has been found in "D:\Downloads\TEMP.rar\888.exe" file.  
2007-10-11        20:43:23        1192106603        Administrator        1992        Sign of "Win32:Nilage-AI [Trj]" has been found in "D:\Downloads\TEMP.rar\down.exe\[Embedded#DATAINFO]" file.  
2007-10-11        20:43:23        1192106603        Administrator        1992        Sign of "Win32:Nilage-AI [Trj]" has been found in "D:\Downloads\TEMP.rar\down.exe" file.

wangjay1980

detected: Trojan program Trojan-PSW.Win32.Small.dq        File: C:\Documents and Settings\Owner\×ÀÃæ\TEMP.rar/xuik.exe//UPX
detected: Trojan program Trojan-Downloader.Win32.Murlo.hs        File: C:\Documents and Settings\Owner\×ÀÃæ\TEMP.rar/888.exe

zlq7zj

打不开啊 网址！！

mofunzone

Starting the file scan:
Begin scan in 'C:\Users\morgan\Documents\TDDOWNLOAD.rar'
C:\Users\morgan\Documents\
  TDDOWNLOAD.rar
    [0] Archive type: RAR
    --> 119.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 100.exe
        [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
        [WARNING]   Infected files in archives cannot be repaired!
    --> 101.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 102.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 103.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 104.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.DOJ.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 105.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 106.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.cdv.11
        [WARNING]   Infected files in archives cannot be repaired!
    --> 107.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Zlob.dfw
        [WARNING]   Infected files in archives cannot be repaired!
    --> 108.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.eja
        [WARNING]   Infected files in archives cannot be repaired!
    --> 109.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.dgi.4
        [WARNING]   Infected files in archives cannot be repaired!
    --> 110.exe
        [DETECTION] Is the Trojan horse TR/PSW.QQpass.agj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 111.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 112.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 113.exe
        [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Kolmat.B.12 Backdoor server programs
        [WARNING]   Infected files in archives cannot be repaired!
    --> 114.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.cnf.3
        [WARNING]   Infected files in archives cannot be repaired!
    --> 115.exe
        [DETECTION] Is the Trojan horse TR/PSW.Nilage.bql.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> 116.exe
        [DETECTION] Is the Trojan horse TR/PSW.OnLineGa.dmj
        [WARNING]   Infected files in archives cannot be repaired!
    --> 117.exe
        [DETECTION] Is the Trojan horse TR/Dropper.Gen
        [WARNING]   Infected files in archives cannot be repaired!
    --> 118.exe
        [DETECTION] Is the Trojan horse TR/PSW.Delf.KH.1
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!

End of the scan: 2007年10月11日  07:49
Used time: 00:04 min
The scan has been done completely.
      0 Scanning directories
     21 Files were scanned
     20 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
     21 Warnings
      0 Notes