N个

qianwenxiang

http://www.222428.cn/down/1001.exe
http://www.222428.cn/down/1002.exe
.................
http://www.222428.cn/down/2049.exe
http://www.222428.cn/down/2050.exe

不过很多都是相同的。。附件是其中几个。

[ 本帖最后由 qianwenxiang 于 2007-12-30 18:37 编辑 ]

无尽藏海

Begin scan in 'D:\Downloads\样本\2062.rar'
D:\Downloads\样本\2062.rar
  [0] Archive type: RAR
  --> 2062.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> 2101.exe
      [DETECTION] Is the Trojan horse TR/Dldr.BHO.JA

zwl2828

0个

lic

2062.rar

Norman all miss

F-prot all miss

Nod32 all miss

ClamWin all miss

qigang

Rising20.24.60未杀一个，还N个哩！晕死！

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\15.rar'
C:\Documents and Settings\Administrator\My Documents\
  15.rar
    [0] Archive type: RAR
      --> 14.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
      --> 1.EXE
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: OVL
          --> Object
              [DETECTION] Is the Trojan horse TR/Autorun.CA
              [WARNING]   Infected files in archives cannot be repaired!
      --> 4.exe
        [1] Archive type: RSRC
        --> Object
        --> Object
    --> 6.exe
        [DETECTION] Contains suspicious code HEUR/Crypted
        [WARNING]   Infected files in archives cannot be repaired!
      --> 10.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: OVL
          --> Object
              [DETECTION] Is the Trojan horse TR/Autorun.CA
              [WARNING]   Infected files in archives cannot be repaired!
      --> 15.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/FWDisable.25015
              [WARNING]   Infected files in archives cannot be repaired!
      --> 2.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      --> 5.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Contains suspicious code HEUR/Malware
              [WARNING]   Infected files in archives cannot be repaired!
    --> 7.exe
      --> 11.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: OVL
          --> Object
              [DETECTION] Is the Trojan horse TR/Autorun.CA
              [WARNING]   Infected files in archives cannot be repaired!
      --> 16.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
              [DETECTION] Is the Trojan horse TR/FWDisable.23513
              [WARNING]   Infected files in archives cannot be repaired!
      --> 3.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
    --> 8.exe
        [DETECTION] Is the Trojan horse TR/Agent.16184
        [WARNING]   Infected files in archives cannot be repaired!
      --> 9.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      --> 12.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
      [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\Administrator\My Documents\1.rar'
C:\Documents and Settings\Administrator\My Documents\
  1.rar
    [0] Archive type: RAR
      --> 1.exe
        [1] Archive type: Runtime Packed
        --> Object
          [2] Archive type: RSRC
          --> Object
          --> Object
          --> Object
          --> Object


End of the scan: 2007年12月30日  08:33
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     18 Files were scanned
      9 viruses and/or unwanted programs were found
      5 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      9 Files not concerned
     15 Archives were scanned
      9 Warnings
      0 Notes

傻猪猪米走鸡

上报ena了……

欠妳緈諨

2

浪滔天

卡巴
已删除: 广告程序 not-a-virus:AdWare.Win32.Ejik.p        文件: F:\病毒样本\2062.rar/2101.exe//PE_Patch.PECompact//PecBundle//PECompact//#

醉一生爱妍

江民只杀一个，其余上报