来个（＋6）

granthill

费尔都杀了。。。。

挪威的冬天

把最后一个的生成物一股脑打包了。。。 粗看了下 一个 cnnic 的文件夹 一个 baidu bar 还有些未知的东西。。。

无尽藏海

这么大，慢慢下

Begin scan in 'D:\Downloads\样本\新建文件夹'
D:\Downloads\样本\新建文件夹\新建文件夹\5zqac0.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\austr.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.DNK
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\BaiduBar.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BaiduBar.DI
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\cndsv.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.CBY
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\cnprov.sys
      [DETECTION] Contains detection pattern of the rootkit RKIT/Agent.192000
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\cnprovh.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.CBU
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\config.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.G
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\convf.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.H
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\convs.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.F
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\data2.cab
  [0] Archive type: CAB (Microsoft)
  --> austr.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.DNK
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\dodolook005.exe
      [DETECTION] Contains detection pattern of the dropper DR/Cinmus.asd.1
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\idnaux.sys
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Boran.Z.192
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\idnsvr.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.CBX
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\idnsvr.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BDSearch.CBT
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\ieaux.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.183680
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\miiy4x7a.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\my2[1].rar
      [DETECTION] Contains suspicious code HEUR/Crypted.E
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\my_70133.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\setup225.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdn.B.1
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\srchsp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.32768
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\tempaq
      [DETECTION] Is the Trojan horse TR/Drop.RKit.AP
      [WARNING]   The file was ignored!
D:\Downloads\样本\新建文件夹\新建文件夹\update.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Cdnup.G
      [WARNING]   The file was ignored!


End of the scan: 2007年12月21日  15:38
Used time: 00:12 min

The scan has been done completely.

      2 Scanning directories
     45 Files were scanned
     20 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     25 Files not concerned
      1 Archives were scanned
     22 Warnings
      0 Notes

[ 本帖最后由 无尽藏海 于 2007-12-21 15:41 编辑 ]

流清泉

部分还是些广告捆绑，垃圾软件

无尽藏海

蜘蛛 3个

sharkkong

ACCESS DENIED
The requested URL could not be retrieved

--------------------------------------------------------------------------------

While trying to retrieve the URL: http://qq33224.cn/down.exe

The folowing error was encountered:

The requested object is INFECTED. The following viruses Trojan-Downloader.Win32.Delf.chp were found

Please contact your service provider if you feel this is incorrect.



--------------------------------------------------------------------------------

Generated Fri Dec 21 15:56:59 2007 by Kaspersky Anti-Virus 7.0

挪威的冬天

继续。。。

down 的生成物 ？

Graybird

The file 'Banner.dll' has been determined to be 'KNOWN CLEAN'. In particular this means that we could not find any malicious content. Please note that the file is part of 'NSIS 2.21'.

无尽藏海

红伞、蜘蛛飘

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Delf.dww      
病毒： Dropper.Win32.Misc.z     

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.23.42