某下载者带来15个

qianwenxiang

好像都是老面孔..

qianwenxiang

自己抢沙发
C:\Test\0803\Data02\C2\C2.rar>>21.exe        Trojan.Cinmeng.bgxt        木马        还未处理
C:\Test\0803\Data02\C2\C2.rar>>ad1386.exe        Adware.BHO.cx.fknn.arc        广告程序        还未处理
C:\Test\0803\Data02\C2\C2.rar>>cpush.dll        Adware.BHO.cx.irnq.dll        广告程序        还未处理
C:\Test\0803\Data02\C2\C2.rar>>dodolook_7025.exe        Trojan.Cinmeng.bgxt        木马        还未处理
C:\Test\0803\Data02\C2\C2.rar>>my_70011.exe        TrojanDownloader.Mnless.yk.vlcx        木马        还未处理
C:\Test\0803\Data02\C2\C2.rar>>seveneleven_1.exe        Adware.BaiduBar.a.pled.arc        广告程序        还未处理

ALEXBLAIR

[:26:] 板凳占位

deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajw File:6w67h5ad2.dll
deleted: adware not-a-virus:AdWare.Win32.BHO.cx File:ad1386.exe//stream//data0001
deleted: adware not-a-virus:AdWare.Win32.BHO.cx File:cpush.dll
deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajx File:h2exa08l.sys
deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajx File:hvqpo4ba.sys
deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajy File:i16jqv9b.sys
deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajy File:j4axue2k.sys
deleted: Trojan program Trojan-Downloader.Win32.Hmir.ajw File:r2qdpd.dll
～～～～～～～～～～～

卡巴６个不报
１个为０字节．．．．

[ 本帖最后由 ALEXBLAIR 于 2008-3-2 22:27 编辑 ]

ALEXBLAIR

[:26:] 抢地板，卡巴不报项目沙盒测试占位～～～
21.exe

1. 出站连接 (出站连接)
   
2. Local port: 4600
   
3. Remote Address: 220.113.15.151 (loader.smartpv.cn):1207
   
4. ~~~~~~~~~~~~~
   
5. 出站连接 (出站连接)
   
6. Local port: 4604
   
7. Remote Address: 59.53.88.133 (update.51edm.net):80
   
8. ~~~~~~~~~~~
   
9. detected: Trojan program Trojan-Downloader.Win32.QQHelper.aoc        URL: http://update.51edm.net/my_70427.exe
   
10. ~~~~~~~~~
    
11. 出站连接 (出站连接)
    
12. Local port: 4617
    
13. Remote Address: 211.160.17.195 (gs.chnsystem.com):80
    
14. ~~~~~~~~~~~~~~
    
15. 出站连接 (出站连接)
    
16. Local port: 4621
    
17. Remote Address: 219.146.128.242 (down.1024tb.com):80
    
18. ~~~~~~~~~~~~~~~~
    
19. detected: adware not-a-virus:AdWare.Win32.Cinmus.bth        URL: http://down.1024tb.com/download/mu/2.3.0/459220a2c106f45907095ec56906e027.gif//data0003

复制代码

[ 本帖最后由 ALEXBLAIR 于 2008-3-2 22:33 编辑 ]

qigang

瑞星病毒查杀结果报告

清除病毒种类列表：

病毒： Trojan.DL.Win32.Mnless.ww
病毒： AdWare.Win32.cpush.g     
病毒： Trojan.DL.Win32.Mnless.yk

MAC 地址：00:11:5B:F3:6D:69

用户来源：互联网

软件版本：20.33.62

hshhua01

Begin scan in 'D:\BOOK\C2.rar'
D:\BOOK\C2.rar
  [0] Archive type: RAR
  --> i16jqv9b.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> j4axue2k.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> ad1386.exe
      [DETECTION] Contains detection pattern of the dropper DR/BHO.CX.36
  --> 21.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> dodolook_7025.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
  --> 6w67h5ad2.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> cpush.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY//BHO.CPush.A
  --> r2qdpd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
  --> seveneleven_1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BaiduBar.BP.2
  --> my_70011.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
  --> h2exa08l.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
  --> hvqpo4ba.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!


End of the scan: 2008年3月2日星期日  22:31
Used time: 00:06 min

The scan has been done completely.

      0 Scanning directories
     15 Files were scanned
     10 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:

tanlimo

ESS扫描日志
病毒库版本: 2913 (20080301)
日期: 2008-3-2  时间: 22:36:50
已扫描的磁盘、文件夹和文件: D:\Documents and Settings\\桌面\C2.rar
D:\Documents and Settings\\桌面\C2.rar > RAR > i16jqv9b.sys - Win32/Rootkit.Agent.NBQ 特洛伊木马 的变种
D:\Documents and Settings\\桌面\C2.rar > RAR > j4axue2k.sys - Win32/Rootkit.Agent.NBQ 特洛伊木马 的变种
D:\Documents and Settings\\桌面\C2.rar > RAR > DelMI2345.exe > NSIS > 龏

lengxue624

红伞报13ge

伊の星

nod32
13/29

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\C2'
C:\Documents and Settings\Administrator\My Documents\C2\
  21.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The fund was classified as suspicious.
      [WARNING]   The file was ignored!
  6w67h5ad2.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
  ad1386.exe
      [DETECTION] Contains detection pattern of the dropper DR/BHO.CX.36
      [WARNING]   The file was ignored!
  cpush.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Bho.CX.7
      [WARNING]   The file was ignored!
  DelMI2345.exe
  dodolook025.exe
  dodolook_7025.exe
      [DETECTION] Contains suspicious code HEUR/Crypted
      [INFO]      The fund was classified as suspicious.
      [WARNING]   The file was ignored!
  h2exa08l.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
  hvqpo4ba.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
  i16jqv9b.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
  j4axue2k.sys
      [DETECTION] Is the Trojan horse TR/Rootkit.Gen
      [WARNING]   The file was ignored!
  my_70011.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [WARNING]   The file was ignored!
  r2qdpd.dll
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [WARNING]   The file was ignored!
  seveneleven_1.exe
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/BaiduBar.BP.2
      [WARNING]   The file was ignored!
  tempaq


End of the scan: 2008年3月2日  11:46
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     15 Files were scanned
     10 viruses and/or unwanted programs were found
      2 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      5 Files not concerned
      0 Archives were scanned
     12 Warnings
      0 Notes