在一个病毒网站上下的

The EQs

下载的全是同一个东西。。。。

kp2006

这个很熟悉

红心王子

Attack All

2007-11-22        14:43:21        1195713801        Administrator        2832        Sign of "Win32:Cinmus-D [Adw]" has been found in "D:\Downloads\dodolook315.zip\dodolook315.exe\$TEMP\dodolook315.exe\$TEMP\$TEMP\48.exe\$TEMP\acpidisk.sys\[Embedded#05664]" file.  
2007-11-22        14:43:25        1195713805        Administrator        2832        Sign of "Win32:Cinmus-J [Rtk]" has been found in "D:\Downloads\dodolook315.zip\dodolook315.exe\$TEMP\dodolook315.exe\$TEMP\$TEMP\48.exe\$TEMP\acpidisk.sys" file.  
2007-11-22        14:43:25        1195713805        Administrator        2832        Sign of "Win32:Adware-gen [Adw]" has been found in "D:\Downloads\dodolook315.zip\dodolook315.exe\$TEMP\dodolook315.exe\$TEMP\$TEMP\48.exe" file.  
2007-11-22        14:43:26        1195713806        Administrator        2832        Sign of "Win32:Baidubar-B [Trj]" has been found in "D:\Downloads\dodolook315.zip\dodolook315.exe\$TEMP\SkypeClient(2).exe\[UPX]" file.  
2007-11-22        14:43:26        1195713806        Administrator        2832        Sign of "Win32:Agent-MGE [Trj]" has been found in "D:\Downloads\dodolook315.zip\dodolook315.exe\$TEMP\FC3014.exe" file.

Graybird

Starting the file scan:

Begin scan in 'E:\dodolook315.zip'
E:\dodolook315.zip
  [0] Archive type: ZIP
  --> dodolook315.exe
      [DETECTION] Contains detection pattern of the dropper DR/Drop.Agent.bzr
      [INFO]      The file was deleted!

mofunzone

Starting the file scan:

Begin scan in 'C:\Users\morgan\Documents\dodolook315.zip'
C:\Users\morgan\Documents\
  dodolook315.zip
    [0] Archive type: ZIP
    --> dodolook315.exe
        [DETECTION] Contains detection pattern of the dropper DR/Drop.Agent.bzr
        [WARNING]   Infected files in archives cannot be repaired!
        [INFO]      The file was deleted!

googlehack

又是一个dodolook，确实熟悉……

will

Win32:Cinmus-D [Adw]
Win32:Cinmus-J [Rtk]
Win32:Adware-gen [Adw]
Win32:Baidubar-B [Trj]
Win32:Agent-MGE [Trj]

5个  avast!

pmj_sh

fs found

Roboon

Roboon：太大了，不测试。

浪滔天

已删除: 木马程序 Trojan-Dropper.Win32.Agent.bzr        文件: F:\病毒样本\dodolook315.zip/dodolook315.exe//stream//data0004//PE_Patch.PECompact//PecBundle//PECompact