毒网?

Starting the file scan:

Begin scan in 'E:\AV\abd.cab'
E:\AV\abd.cab
  [0] Archive type: CAB (Microsoft)
    --> abd.exe
          [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\bf.exe'
E:\AV\bf.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\rl.exe'
E:\AV\rl.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\014.exe'
E:\AV\014.exe
      [DETECTION] Is the Trojan horse TR/Downloader.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\014.js'
E:\AV\014.js
      [DETECTION] Contains suspicious code HEUR/HTML.Malware
      [NOTE]      The fund was classified as suspicious.
      [NOTE]      The file was moved to '486128c2.qua'!


End of the scan: 2008年5月16日  14:24
Used time: 00:13 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      4 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      4 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      5 Notes

The file '014.js' has been determined to be 'MALWARE'.
Our analysts named the threat JS/Dldr.Psyme.DL. The term "JS/" denotes a Java scriptvirus.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/HTML.Malware.

[ 本帖最后由 Exia 于 2008-5-16 18:00 编辑 ]

秋叶濛濛

原帖由 冷冷 于 2008-5-16 14:21 发表
ACEFB4A25907A7168083EF0A6278D162  abd.exe
ACEFB4A25907A7168083EF0A6278D162  bf.exe
ACEFB4A25907A7168083EF0A6278D162  rl.exe
ACEFB4A25907A7168083EF0A6278D162  014.exe

浪费感情 都是一个鸟...

sam.to

原帖由 秋叶濛濛 于 2008-5-16 14:23 发表



浪费感情 都是一个鸟...

是

kkgh

avg全杀

menghan

不是毒网吧？有人试过吗？

tanlimo

http://wb.xiazaizhe.net/e.txt

样本.rar (95.03 KB, 下载次数: 31)

2008-5-16 17:13 上传

点击文件名下载附件

Starting the file scan:

Begin scan in 'E:\AV\0.exe'
E:\AV\0.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\1.exe'
E:\AV\1.exe
      [DETECTION] Is the Trojan horse TR/Hijacker.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\2.exe'
E:\AV\2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\3.exe'
E:\AV\3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\4.exe'
E:\AV\4.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Small.uqb.1
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Agent.mzm
      [NOTE]      The file was deleted!


End of the scan: 2008年5月16日  17:25
Used time: 00:21 min

The scan has been done completely.

      0 Scanning directories
      5 Files were scanned
      6 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -1 Files not concerned
      0 Archives were scanned
      0 Warnings
      5 Notes

tanlimo

http://wb.xiazaizhe.net/b.txt  猜出来的 ，没讯雷不好下。


20080509 http://new.benchi999.com/ma/1.exe  (不用下了）
20080509 http://new.benchi999.com/ma/2.exe (不用下了）
20080509 http://new.benchi999.com/ma/3.exe (不用下了）
20080509 http://new.benchi999.com/ma/4.exe (不用下了）
20080509 http://new.benchi999.com/ma/5.exe
20080509 http://new.benchi999.com/ma/6.exe
20080509 http://new.benchi999.com/ma/7.exe
20080509 http://new.benchi999.com/ma/8.exe
20080509 http://new.benchi999.com/ma/9.exe
20080509 http://new.benchi999.com/ma/10.exe
20080509 http://new.benchi999.com/ma/11.exe
20080509 http://new.benchi999.com/ma/12.exe
20080509 http://new.benchi999.com/ma/13.exe
20080509 http://new.benchi999.com/ma/14.exe
20080509 http://new.benchi999.com/ma/15.exe
20080509 http://new.benchi999.com/ma/16.exe
20080509 http://new.benchi999.com/ma/17.exe
20080509 http://new.benchi999.com/ma/18.exe
20080509 http://new.benchi999.com/ma/19.exe

[ 本帖最后由 tanlimo 于 2008-5-16 17:25 编辑 ]

Starting the file scan:

Begin scan in 'E:\AV\1.exe'
E:\AV\1.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\2.exe'
E:\AV\2.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\3.exe'
E:\AV\3.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\4.exe'
E:\AV\4.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\5.exe'
E:\AV\5.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\6.exe'
E:\AV\6.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\7.exe'
E:\AV\7.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\8.exe'
E:\AV\8.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\9.exe'
E:\AV\9.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\10.exe'
E:\AV\10.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\11.exe'
E:\AV\11.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\12.exe'
E:\AV\12.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\13.exe'
E:\AV\13.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\14.exe'
E:\AV\14.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\15.exe'
E:\AV\15.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XDR.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\16.exe'
E:\AV\16.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\17.exe'
E:\AV\17.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\18.exe'
E:\AV\18.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!
Begin scan in 'E:\AV\19.exe'
E:\AV\19.exe
      [DETECTION] Is the Trojan horse TR/Spy.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月16日  17:30
Used time: 00:21 min

The scan has been done completely.

      0 Scanning directories
     19 Files were scanned
     19 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     19 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
     19 Notes

yunhan123

信息        2008-05-16  17:30:26        您此次查毒清除了3个病毒                       
信息        2008-05-16  17:30:26        您此次查毒共查出4个病毒以及危险代码                       
信息        2008-05-16  17:30:26        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件10个                       
信息        2008-05-16  17:30:26        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       
病毒        2008-05-16  17:30:26        C:\Documents and Settings\Administrator\桌面\桌面.rar\rl.exe        Win32.TrojDownloader.Small.90112        清除成功       
病毒        2008-05-16  17:30:26        C:\Documents and Settings\Administrator\桌面\桌面.rar\014.exe        Win32.TrojDownloader.Small.90112        清除成功       
病毒        2008-05-16  17:30:25        C:\Documents and Settings\Administrator\桌面\桌面.rar\bf.exe        Win32.TrojDownloader.Small.90112        清除成功