全是新的 一共31个

lanvin

googlehack

不错，种类也丰富，鸽子、盗号的、下载器之类的还都有啊！

dyw1021

Start of the scan: 2007年10月24日  11:00

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\新建文件夹'
C:\Documents and Settings\Administrator\桌面\新建文件夹\New_Folder.part4.rar
  [0] Archive type: RAR
  --> New Folder\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> New Folder\9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '4795b5b4.qua'!
C:\Documents and Settings\Administrator\桌面\新建文件夹\New_Folder.part3.rar
  [0] Archive type: RAR
  --> New Folder\27.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> New Folder\29.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
  --> New Folder\3.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.32 Backdoor server programs
  --> New Folder\30.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
  --> New Folder\31.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.QS.513
  --> New Folder\5.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was moved to '4795b5b6.qua'!
C:\Documents and Settings\Administrator\桌面\新建文件夹\New_Folder.part2.rar
  [0] Archive type: RAR
  --> New Folder\19.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\20.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.Gen Backdoor server programs
  --> New Folder\21.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was moved to '4795b5b7.qua'!
C:\Documents and Settings\Administrator\桌面\新建文件夹\New_Folder.part1.rar
  [0] Archive type: RAR
  --> New Folder\1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Casino.W.139
  --> New Folder\11.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> New Folder\15.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\16.exe
      [DETECTION] Is the Trojan horse TR/Agent.147456.8
  --> New Folder\17.exe
      [DETECTION] Contains detection pattern of the worm WORM/SdBot.624686
      [INFO]      The file was moved to '4795b5b9.qua'!


End of the scan: 2007年10月24日  11:00
Used time: 00:07 min

The scan has been done completely.

      1 Scanning directories
     32 Files were scanned
     17 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      4 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     15 Files not concerned
      4 Archives were scanned
      0 Warnings
      0 Notes

wangjay1980

detected: virus Heur.Downloader (modification)        File: E:\Ñù±¾\New Folder\11.exe
detected: virus Heur.Trojan.Generic        File: E:\Ñù±¾\New Folder\12.exe
detected: Trojan program Trojan.Win32.Delf.ajk        File: E:\Ñù±¾\New Folder\15.exe//#
detected: virus Packed.Win32.PePatch.dk (modification)        File: E:\Ñù±¾\New Folder\2.exe
detected: Trojan program Backdoor.Win32.Bifrose.aci        File: E:\Ñù±¾\New Folder\20.exe//ASPack//NSPack
detected: Trojan program Backdoor.Win32.Hupigon.cda        File: E:\Ñù±¾\New Folder\25.exe
detected: virus Packed.Win32.Tibs.cu        File: E:\Ñù±¾\New Folder\29.exe
detected: virus Packed.Win32.Tibs.cu        File: E:\Ñù±¾\New Folder\30.exe
detected: Trojan program Trojan.Win32.DNSChanger.qs        File: E:\Ñù±¾\New Folder\31.exe//data0001
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\New Folder\5.exe//PE_Patch.MaskPE//PE_Patch.MaskPE//PE_Patch.MaskPE
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\New Folder\7.exe
detected: virus Heur.Trojan.Generic (modification)        File: E:\Ñù±¾\New Folder\8.exe//SVKP//SimplePack

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\New Folder'
C:\Users\morgan\Documents\New Folder\
  1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Casino.W.139
      [INFO]      The file was deleted!
  10.exe
  11.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
      [INFO]      The file was deleted!
  12.exe
  13.exe
  14.exe
  15.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  16.exe
      [DETECTION] Is the Trojan horse TR/Agent.147456.8
      [INFO]      The file was deleted!
  17.exe
      [DETECTION] Contains detection pattern of the worm WORM/SdBot.624686
      [INFO]      The file was deleted!
  18.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  19.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  2.exe
      [DETECTION] Contains detection pattern of the SPR/Tool.NetCat.B program
      [INFO]      The file was deleted!
  20.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.Gen Backdoor server programs
      [INFO]      The file was deleted!
  21.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  22.exe
  23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
  24.exe
  25.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  26.exe
  27.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [INFO]      The file was deleted!
  28.exe
  29.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
      [INFO]      The file was deleted!
  3.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.32 Backdoor server programs
      [INFO]      The file was deleted!
  30.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
      [INFO]      The file was deleted!
  31.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.QS.513
      [INFO]      The file was deleted!
  35.exe
  5.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  6.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
  7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!
  8.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/SVKP). Please verify the origin of the file
      [INFO]      The file was deleted!
  9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!


End of the scan: 2007年10月23日  20:20
Used time: 00:06 min

The scan has been done completely.

      1 Scanning directories
     31 Files were scanned
     22 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     22 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes

小邪邪

AVK杀24个，剩下的MCAFEE又杀了1个

啊弥陀佛

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\5.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SERVERS.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\15.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\~75979.TMP
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\13.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\23.EXE
木马程序生成以下文件:
1) C:\WINDOWS\SYSTEM32\MSSRV32.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\11.EXE
木马程序生成以下文件:
1) C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMPORARY INTERNET FILES\CONTENT.IE5\01MVOPAB\TFTPD32[1].EXE
2) C:\FUCK.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\26.EXE
是否删除木马程序及其衍生物?


程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\29.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NOSKRNL.EXE
2) C:\WINDOWS\SYSTEM32\NOSKRNL.SYS
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\30.EXE
木马程序生成以下文件:
1) C:\WINDOWS\NOSKRNL.EXE
是否删除木马程序及其衍生物?

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\NEW FOLDER[1]\NEW FOLDER\18.EXE
木马程序生成以下文件:
1) C:\WINDOWS\WINDOWS
是否删除木马程序及其衍生物?

timhas266

Start of the scan: Wednesday, 24 October, 2007  12:12

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\樣本'
C:\Documents and Settings\tim\桌面\樣本\New_Folder.part1.rar
  [0] Archive type: RAR
  --> New Folder\1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Casino.W.139
  --> New Folder\11.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> New Folder\15.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\16.exe
      [DETECTION] Is the Trojan horse TR/Agent.147456.8
  --> New Folder\17.exe
      [DETECTION] Contains detection pattern of the worm WORM/SdBot.624686
      [INFO]      A backup was created as '4795c67c.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\tim\桌面\樣本\New_Folder.part2.rar
  [0] Archive type: RAR
  --> New Folder\19.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\2.exe
      [DETECTION] Contains detection pattern of the SPR/Tool.NetCat.B program
  --> New Folder\20.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Bifrose.Gen Backdoor server programs
  --> New Folder\21.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
  --> New Folder\23.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      A backup was created as '4795c67d.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\tim\桌面\樣本\New_Folder.part3.rar
  [0] Archive type: RAR
  --> New Folder\27.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
  --> New Folder\29.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
  --> New Folder\3.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Agent.ahj.32 Backdoor server programs
  --> New Folder\30.exe
      [DETECTION] Contains detection pattern of the worm WORM/Storm.twc
  --> New Folder\31.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.QS.513
  --> New Folder\5.exe
      [DETECTION] Contains a detection pattern of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      A backup was created as '463fbdfe.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!
C:\Documents and Settings\tim\桌面\樣本\New_Folder.part4.rar
  [0] Archive type: RAR
  --> New Folder\7.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> New Folder\8.exe
      [DETECTION] File has been compressed with an unusual runtime compression tool (PCK/SVKP). Please verify the origin of the file
  --> New Folder\9.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      A backup was created as '4795c67f.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Wednesday, 24 October, 2007  12:12
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     36 Files were scanned
     19 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      4 files were deleted
      0 files were repaired
      4 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     17 Files not concerned
      4 Archives were scanned
      0 Warnings
      0 Notes

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 666
Paranoia Database - 48130
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\1.exe - Suspected MaliciousScope:GENERIC.PSW.16
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\10.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\11.exe - Suspected WIN32.TROJAN-DOWNLOADER.ZLOB.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\12.exe - Suspected MaliciousScope:WIN32.GENERIC.PSW.13
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\13.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\14.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\15.exe - Infected WIN32.BACKDOOR.HUPIGON.21 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\16.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\17.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\18.exe - Infected WIN32.BACKDOOR.HUPIGON.10 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\19.exe - Infected WIN32.BACKDOOR.HUPIGON.10 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\2.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\20.exe - Suspected MaliciousScope:GENERIC.PSW.6
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\21.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\22.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\23.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\24.exe - Infected WIN32.BACKDOOR.HUPIGON.21 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\25.exe - Infected WIN32.TROJAN-PSW.MAGANIA.1 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\26.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\27.exe - Suspected MaliciousScope:GENERIC.PSW.1
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\28.exe - Infected BACKDOOR.HUPIGON.10 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\29.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\3.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\30.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\31.exe - Suspected TROJAN-PSW.ONLINEGAMES.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\35.exe - Suspected TROJAN-DOWNLOADER.SMALL.2
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\5.exe - Infected WIN32.TROJAN-PSW.ONLINEGAMES.A - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\6.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\7.exe - Suspected MaliciousScope:GENERIC.PSW.11
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\8.exe - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\9.exe - Suspected MaliciousScope:WIN32.GENERIC.PSW.24

31 Files scanned
7 Infected files found
14 Suspected files found
0 Files cured
7 Files deleted