今日的包总计52

显示全部楼层 · 发表于 2008-5-26 13:52:05

不保证全是病毒在-5范围内
如果你的杀毒软件能杀到30个你就欢呼吧
卡饭的样本不能卖钱不爽啊，应该收费下载的

antivir25个，一半不到。。
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\xcv'
C:\Documents and Settings\morgan\My Documents\xcv\xcv\
  641000.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.NMO
   [NOTE]    The file was deleted!
  9kgen_up.int
  9kgen_up1.int
  apunbegy.dll
[0] Archive type: Runtime Packed
--> Object
  atfxqogp.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
   [NOTE]    The file was deleted!
  atfxsdqogp.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
   [NOTE]    The file was deleted!
  boqnrwdmstg.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
   [NOTE]    The file was deleted!
  boqnrwdmvdr.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
   [NOTE]    The file was deleted!
  c-setup.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
   [DETECTION] Contains suspicious code HEUR/Malware
   [NOTE]    The fund was classified as suspicious.
   [NOTE]    The file was moved to '48ad4f0d.qua'!
  calc.exe
   [DETECTION] Is the Trojan horse TR/DNSChanger.dlg
   [NOTE]    The file was deleted!
  Codec.exe
   [DETECTION] Is the Trojan horse TR/Dldr.VB.eqd
   [NOTE]    The file was deleted!
  crack.exe
  ctfmona.exe
   [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
   [NOTE]    The file was deleted!
  edwf.exe
   [DETECTION] Is the Trojan horse TR/Vapsup.fqm
   [NOTE]    The file was deleted!
  efcBuvSJ.dll
  etkq.exe
  file.exe
  file[1].exe
  kdxcq.exe
   [DETECTION] Is the Trojan horse TR/DNSChanger.dli
   [NOTE]    The file was deleted!
  keygen.exe
  ljJCvWpo.dll
   [DETECTION] Is the Trojan horse TR/Obfuscated.aul
   [NOTE]    The file was deleted!
  MediaTubeCodec_ver1.1099.2.exe
  MediaTubeCodec_ver1.1099.4.exe
  MediaTubeCodec_ver1.971.45.exe
  mooncodec1345.exe
   [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dlc
   [NOTE]    The file was deleted!
  mooncodec4049.exe
   [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dja.21
   [NOTE]    The file was deleted!
  mooncodec4192.exe
   [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.dja.22
   [NOTE]    The file was deleted!
  msprint.exe
[0] Archive type: Runtime Packed
   --> Object
      [1] Archive type: RSRC
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
      --> Object
      [2] Archive type: Runtime Packed
      --> Object
         [3] Archive type: RSRC
         --> Object
   [DETECTION] Is the Trojan horse TR/Downloader.Gen
   [NOTE]    The file was deleted!
  MsUpdate.exe
  pmnmlKBT.dll
  popularos.exe
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trh
   [NOTE]    The file was deleted!
  services.exe
  setup1.exe
  setup2.exe
  setup4.exe
  setup5.exe
  setup_526_1_.exe
   [DETECTION] Is the Trojan horse TR/Dldr.FraudLoad.abk
   [NOTE]    The file was deleted!
  sn_pkz.int
  sn_pkz1.int
  tmp61.exe
   [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
   [NOTE]    The file was deleted!
  tmp65.exe
  tmp69.exe
  update.exe
   [DETECTION] Contains detection pattern of the dropper DR/Dldr.Autoit.GL
   [NOTE]    The file was deleted!
  vltdfabsfdw.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
   [NOTE]    The file was deleted!
  vltdfabw.dll
   [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
   [NOTE]    The file was deleted!
  vregfwlx.dll
   [DETECTION] Is the Trojan horse TR/Vapsup.fqt
   [NOTE]    The file was deleted!
  vreggfwlx.dll
  vtUlKEWm.dll
  winmqx32.dll
  xmpssfdtean.exe
   [DETECTION] Is the Trojan horse TR/Dldr.Zlob.Gen
   [NOTE]    The file was deleted!
  xmpstean.exe
   [DETECTION] Is the Trojan horse TR/Vapsup.fqq
   [NOTE]    The file was deleted!
  zfe0.exe

End of the scan: 2008年5月25日  22:47
Used time: 00:05 min

The scan has been done completely.

   2 Scanning directories
   52 Files were scanned
   24 viruses and/or unwanted programs were found
   1 Files were classified as suspicious:
   24 files were deleted
   0 files were repaired
   1 files were moved to quarantine
   0 files were renamed
   0 Files cannot be scanned
   28 Files not concerned
   0 Archives were scanned
   0 Warnings
   25 Notes

[ 本帖最后由 mofunzone 于 2008-5-25 21:53 编辑 ]

显示全部楼层 · 发表于 2008-5-26 14:00:59

Scan performed at: 2008/5/26 14:00:55
Scanning Log
NOD32 version 3129 (20080526) NT
Command line: G:\v\xcv
C:\Program Files\Eset\nod32.exe - is OK

Date: 26.5.2008 Time: 14:00:56
Anti-Stealth technology is enabled.
Scanned disks, folders and files: G:\v\xcv\
G:\v\xcv\641000.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\641000.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\641000.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\641000.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\641000.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\9kgen_up.int - is OK
G:\v\xcv\9kgen_up1.int - is OK
G:\v\xcv\apunbegy.dll - is OK
G:\v\xcv\atfxqogp.dll - is OK
G:\v\xcv\atfxsdqogp.dll - is OK
G:\v\xcv\boqnrwdmstg.dll - is OK
G:\v\xcv\boqnrwdmvdr.dll - is OK
G:\v\xcv\c-setup.exe ?ASPack v2.12 - is OK
G:\v\xcv\calc.exe - is OK
G:\v\xcv\Codec.exe - is OK
G:\v\xcv\crack.exe - is OK
G:\v\xcv\ctfmona.exe - is OK
G:\v\xcv\edwf.exe - is OK
G:\v\xcv\efcBuvSJ.dll - is OK
G:\v\xcv\etkq.exe - is OK
G:\v\xcv\file.exe - is OK
G:\v\xcv\file[1].exe - is OK
G:\v\xcv\kdxcq.exe - is OK
G:\v\xcv\keygen.exe - is OK
G:\v\xcv\ljJCvWpo.dll - is OK
G:\v\xcv\MediaTubeCodec_ver1.1099.2.exe - is OK
G:\v\xcv\MediaTubeCodec_ver1.1099.4.exe - is OK
G:\v\xcv\MediaTubeCodec_ver1.971.45.exe - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?DcryptDll.dll - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec1345.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4049.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?notepad.exe.dat - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?calc.exe.dat - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?linux - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?dcryptdll.dll - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?StartMenu.dll - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Entries.bin - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?Strings.txt - is OK
G:\v\xcv\mooncodec4192.exe ?NSIS ?Uninstall.exe ?NSIS ?modern-header.bmp - is OK
G:\v\xcv\msprint.exe ?PECompact v2.xx - is OK
G:\v\xcv\MsUpdate.exe - is OK
G:\v\xcv\pmnmlKBT.dll - is OK
G:\v\xcv\popularos.exe - is OK
G:\v\xcv\services.exe - is OK
G:\v\xcv\setup1.exe - is OK
G:\v\xcv\setup2.exe - is OK
G:\v\xcv\setup4.exe - is OK
G:\v\xcv\setup5.exe - is OK
G:\v\xcv\setup_526_1_.exe - Win32/Adware.WinSpywareProtect application
G:\v\xcv\sn_pkz.int - is OK
G:\v\xcv\sn_pkz1.int - is OK
G:\v\xcv\tmp61.exe - is OK
G:\v\xcv\tmp65.exe - is OK
G:\v\xcv\tmp69.exe - is OK
G:\v\xcv\update.exe ?AUTOIT ?script.au3 - is OK
G:\v\xcv\vltdfabsfdw.dll - is OK
G:\v\xcv\vltdfabw.dll - is OK
G:\v\xcv\vregfwlx.dll - is OK
G:\v\xcv\vreggfwlx.dll - is OK
G:\v\xcv\vtUlKEWm.dll - is OK
G:\v\xcv\winmqx32.dll - is OK
G:\v\xcv\xmpssfdtean.exe - is OK
G:\v\xcv\xmpstean.exe - is OK
G:\v\xcv\zfe0.exe - is OK
Number of scanned files: 88
Number of threats found: 1
Time of completion: 14:01:17 Total scanning time: 21 sec (00:00:21)

显示全部楼层 · 发表于 2008-5-26 14:03:48

不愧是通过very bullshit认证49次的渣滓，1个，太神奇了。。

显示全部楼层 · 发表于 2008-5-26 14:04:34

原帖由 mofunzone 于 2008-5-26 14:03 发表
不愧是通过very bullshit认证49次的渣滓，1个，太神奇了。。

还是ADWARE

显示全部楼层 · 发表于 2008-5-26 16:38:03

Dr.Web

显示全部楼层 · 发表于 2008-5-26 16:42:54

DR.WEB..才12

显示全部楼层 · 发表于 2008-5-26 16:44:07

请问LZ能说说怎么抓来这么多病毒呢?

显示全部楼层 · 发表于 2008-5-26 16:53:28

IK查22个

h:\virus\xcv.rar:\9kgen_up.int - Signatur 'Win32.SuspectCrc' gefunden
h:\virus\xcv.rar:\9kgen_up1.int
h:\virus\xcv.rar:\641000.exe - Signatur 'Trojan-Downloader.Win32.Zlob.eie' gefunden
h:\virus\xcv.rar:\apunbegy.dll - Signatur 'Trojan.Win32.Delflob.I' gefunden
h:\virus\xcv.rar:\atfxqogp.dll - Signatur 'AdWare.AdSpy' gefunden
h:\virus\xcv.rar:\atfxsdqogp.dll
h:\virus\xcv.rar:\boqnrwdmstg.dll
h:\virus\xcv.rar:\boqnrwdmvdr.dll
h:\virus\xcv.rar:\calc.exe
h:\virus\xcv.rar:\Codec.exe
h:\virus\xcv.rar:\crack.exe - Signatur 'BehavesLike.Trojan.WinlogonHook' gefunden
h:\virus\xcv.rar:\c-setup.exe
h:\virus\xcv.rar:\ctfmona.exe - Signatur 'Trojan.Crypt.ULPM' gefunden
h:\virus\xcv.rar:\edwf.exe
h:\virus\xcv.rar:\efcBuvSJ.dll
h:\virus\xcv.rar:\etkq.exe
h:\virus\xcv.rar:\file.exe
h:\virus\xcv.rar:\file[1].exe
h:\virus\xcv.rar:\kdxcq.exe
h:\virus\xcv.rar:\keygen.exe - Signatur 'Trojan.Win32.Vundo.H' gefunden
h:\virus\xcv.rar:\ljJCvWpo.dll
h:\virus\xcv.rar:\MediaTubeCodec_ver1.971.45.exe
h:\virus\xcv.rar:\MediaTubeCodec_ver1.1099.2.exe
h:\virus\xcv.rar:\MediaTubeCodec_ver1.1099.4.exe
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\notepad.exe.dat
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\calc.exe.dat
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\linux
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\$PLUGINSDIR\DcryptDll.dll - Signatur 'Virus.Trojan.Win32.DNSChanger.chg' gefunden
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\$PLUGINSDIR\StartMenu.dll
h:\virus\xcv.rar:\mooncodec1345.exe\$TEMP\$PLUGINSDIR\modern-header.bmp
h:\virus\xcv.rar:\mooncodec1345.exe
h:\virus\xcv.rar:\mooncodec4049.exe
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\notepad.exe.dat
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\calc.exe.dat
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\linux
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\$PLUGINSDIR\dcryptdll.dll - Signatur 'Virus.Trojan.Win32.DNSChanger.chg' gefunden
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\$PLUGINSDIR\StartMenu.dll
h:\virus\xcv.rar:\mooncodec4192.exe\$TEMP\$PLUGINSDIR\modern-header.bmp
h:\virus\xcv.rar:\mooncodec4192.exe
h:\virus\xcv.rar:\msprint.exe - Signatur 'Trojan-Clicker.Win32.Small.BG' gefunden
h:\virus\xcv.rar:\MsUpdate.exe
h:\virus\xcv.rar:\pmnmlKBT.dll
h:\virus\xcv.rar:\popularos.exe - Signatur 'Trojan.Win32.Vundo.H' gefunden
h:\virus\xcv.rar:\services.exe
h:\virus\xcv.rar:\setup1.exe
h:\virus\xcv.rar:\setup2.exe
h:\virus\xcv.rar:\setup4.exe - Signatur 'Virus.Win32.Zlob.CBY' gefunden
h:\virus\xcv.rar:\setup5.exe - Signatur 'Virus.Win32.Zlob.CBY' gefunden
h:\virus\xcv.rar:\setup_526_1_.exe - Signatur 'Trojan-Downloader.FraudLoad.abk' gefunden
h:\virus\xcv.rar:\sn_pkz.int - Signatur 'Win32.SuspectCrc' gefunden
h:\virus\xcv.rar:\sn_pkz1.int
h:\virus\xcv.rar:\tmp61.exe - Signatur 'Trojan.Crypt.BY' gefunden
h:\virus\xcv.rar:\tmp65.exe
h:\virus\xcv.rar:\tmp69.exe
h:\virus\xcv.rar:\update.exe - Signatur 'Trojan-Spy.Win32.Ardamax.e' gefunden
h:\virus\xcv.rar:\vltdfabsfdw.dll - Signatur 'Virus.Win32.Agent.LTS' gefunden
h:\virus\xcv.rar:\vltdfabw.dll - Signatur 'Virus.Win32.Agent.LTS' gefunden
h:\virus\xcv.rar:\vregfwlx.dll - Signatur 'Virus.Win32.Agent.LTS' gefunden
h:\virus\xcv.rar:\vreggfwlx.dll - Signatur 'Virus.Win32.Agent.LTS' gefunden
h:\virus\xcv.rar:\vtUlKEWm.dll
h:\virus\xcv.rar:\winmqx32.dll
h:\virus\xcv.rar:\xmpssfdtean.exe
h:\virus\xcv.rar:\xmpstean.exe - Signatur 'AdWare.Win32.Vapsup' gefunden
h:\virus\xcv.rar:\zfe0.exe
h:\virus\xcv.rar

65 Dateien 黚erpr黤t
(1 Archiv mit 64 Dateien)
22 Signaturen gefunden
0 bedenkliche Programmsequenzen gefunden
Ben鰐igte Zeit: 0:07.711

显示全部楼层 · 发表于 2008-5-26 17:15:46

等 LZ 半天了

信息 2008-05-26  17:15:13 您此次查毒隔离了11个文件
信息 2008-05-26  17:15:13 您此次查毒清除了1个病毒
信息 2008-05-26  17:15:13 您此次查毒共查出12个病毒以及危险代码
信息 2008-05-26  17:15:13 您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件59个
信息 2008-05-26  17:15:13 金山毒霸主程序查毒过程结束，查毒方式：命令行查毒
风险程序 2008-05-26  17:15:13 D:\Desktop\xcv\xcv\popularos.exe Win32.Adware.Virtumonde.94208 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\xmpstean.exe Win32.Troj.Vapsup.94208 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\tmp61.exe Win32.Troj.DNSChanger.17979 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\setup_526_1_.exe Win32.TrojDownloader.FraudLoad.33280 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\msprint.exe Win32.VirInstaller.Agent.69632 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\kdxcq.exe Win32.Troj.DNSChanger.62464 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\edwf.exe Win32.Troj.Vapsup.159744 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\ctfmona.exe Win32.Troj.Agent.96256 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\Codec.exe Win32.TrojDownloader.VB.15876 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\calc.exe Win32.Troj.DNSChanger.62464 隔离成功
病毒 2008-05-26  17:15:12 D:\Desktop\xcv\xcv\boqnrwdmstg.dll Win32.Troj.Vapsup.266240 隔离成功
病毒 2008-05-26  17:15:10 D:\Desktop\xcv\xcv\atfxqogp.dll Win32.Troj.Vapsup.188416 隔离成功

不过放在一个贴子实在很舒服啊... 赞一个

显示全部楼层 · 发表于 2008-5-26 17:36:57

瑞星病毒查杀结果报告

清除病毒种类列表：
病毒： Trojan.DL.Win32.Undef.nq
病毒： Trojan.Win32.Zlob.ajl
病毒： Trojan.DL.Win32.QQHelper.bgc
病毒： Trojan.DL.Win32.Zlob.gbo

用户来源：互联网

软件版本：20.46.01
6ge

[病毒样本] 今日的包总计52

本帖子中包含更多资源

回复 2楼 woai_jolin 的帖子

本帖子中包含更多资源