几个样本

ALEXBLAIR

从这个回复看，是个批量的东西，测试了一下果然是

1. http://vvv.123sky.biz/107/107.exe
   
2. 这个
   
3. Starting the file scan:
   
4. 
   
5. Begin scan in 'C:\TDDOWNLOAD\107.exe'
   
6. C:\TDDOWNLOAD\
   
7.   107.exe
   
8.     [0] Archive type: Runtime Packed
   
9.     --> Object
   
10.         [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
    
11.       [NOTE]      The file was deleted!

复制代码

格式为
http://vvv.123sky.biz/101/101.exe
到
http://vvv.123sky.biz/115/115.exe

大家拿去玩吧~~目前无防火墙+无杀毒软件，就不提供扫描日志了~~

The EQs

[:08:] 都是杀一个东西。。。。不好玩

ALEXBLAIR

md5都不一样的~~

The EQs

cnbeta果然是口水之乡。。。。

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\My Documents\xxx'
C:\Documents and Settings\Administrator\My Documents\xxx\
  101.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  102.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  103.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  104.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  105.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  107.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  109.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  110.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  111.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  112.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  113.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  114.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!
  115.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the worm WORM/Cekar.A
      [NOTE]      The file was deleted!


End of the scan: 2008年3月13日  11:11
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     13 Files were scanned
     13 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     13 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     13 Notes

jick117

Virus: Worm.Win32.Anilogo.f (13x)
File: xxx[1].rar
Directory: C:\Documents and Settings\Administrator\Local Settings\Temporary Internet Files\Content.IE5\CKKPEG6Q
Process: IEXPLORE.EXE

红心王子

蠕虫名称:Worm.Win32.Anilogo.br

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\101.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.ca

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\102.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.bn

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\103.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?
蠕虫名称:Worm.Win32.Anilogo.fr

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\104.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.fs

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\105.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-Spy.Win32.Delf.fdw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\107.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.fw

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\109.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.ce

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\110.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.dc

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\111.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.fz

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\112.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.ga

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\113.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

蠕虫名称:Worm.Win32.Anilogo.gb

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\114.EXE
是蠕虫程序!
已成功阻止其运行,是否要删除此文件?

木马名称:Trojan-PSW.Win32.OnLineGame.azu

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\新建文件夹\115.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

hahacomcn

原帖由 EQ2 于 2008-3-14 02:11 发表
cnbeta果然是口水之乡。。。。

红伞杀。

cnbeta是个很XE滴地方哈。

不过资讯还可以。

sharkkong

已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/101.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/102.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/103.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/104.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/105.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/107.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/109.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/110.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/111.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/112.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/113.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/114.exe//UPack
已删除: 病毒 Worm.Win32.Anilogo.f        文件: E:\下载\xxx.rar/115.exe//UPack

Nblock

蠕虫名称:Worm.Win32.Anilogo.br