开饭啦

mofunzone

今日样本56个，质量不错
antivir29个，神奇的及格了
Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\virus'
C:\Documents and Settings\morgan\My Documents\virus\
  818646.dll
      [DETECTION] Is the Trojan horse TR/BHO.Gen
      [NOTE]      The file was deleted!
  9kgen_up.int
  9kgen_up.int:Zone.Identifier
  9kgen_up1.int
  9kgen_up1.int:Zone.Identifier
  a.tmp
  A46C-tmp.exe
      [DETECTION] Contains detection pattern of the SPR/Tool.Downlo.P.1 program
      [NOTE]      The file was deleted!
  apsagy.dll
      [DETECTION] Is the Trojan horse TR/Drop.BHO.AS
      [NOTE]      The file was deleted!
  atfxqogp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
  boqnrwdmfrp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
  c-setup.exe
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the SPR/Tool.Downlo.P.1 program
      [NOTE]      The file was deleted!
  calc.exe
  Codec.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.wfd
      [NOTE]      The file was deleted!
  crack.exe
  csrss.exe
      [DETECTION] Is the Trojan horse TR/Retapu.D.41
      [NOTE]      The file was deleted!
  ctfmona.exe
      [DETECTION] Is the Trojan horse TR/WinFixer.AJ
      [NOTE]      The file was deleted!
  embd.exe
  fccApQJA.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
  file.exe
  install.exe
    [0] Archive type: Runtime Packed
    --> Object
      [NOTE]      The file was deleted!
  install12.exe
    [0] Archive type: Runtime Packed
    --> Object
  iSecurity.cpl
    [0] Archive type: Runtime Packed
    --> Object
  iSecurity1.cpl
    [0] Archive type: Runtime Packed
    --> Object
  keygen.exe
  khfGxWqn.dll
  light-codec1345.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HL
      [NOTE]      The file was deleted!
  light-codec1363.exe
  light-codec1363.exe:Zone.Identifier
  light-codec4049.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HM
      [NOTE]      The file was deleted!
  light-codec4192.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HN
      [NOTE]      The file was deleted!
  luapvs.dll
    [0] Archive type: Runtime Packed
    --> Object
        [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Flycodec.A.2
      [NOTE]      The file was deleted!
  MediaTubeCodec_ver1.971.45.exe
  MediaTubeCodec_ver1.971.45.exe:Zone.Identifier
  msconfig.exe
  msprint.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.Y
      [NOTE]      The file was deleted!
  notepad.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.abv
      [NOTE]      The file was deleted!
  nyps4.exe
  qoMdDuvS.dll
  rbnpsrv.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  services.exe
  setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
  setup3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was deleted!
  smss.exe
  sn_pkz.int
  sn_pkz.int:Zone.Identifier
  sn_pkz1.int
  sn_pkz1.int:Zone.Identifier
  tmp529448591.dll
    [0] Archive type: Runtime Packed
      --> Object
        [1] Archive type: RSRC
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
        --> Object
          [2] Archive type: Runtime Packed
          --> Object
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
  urqOHWnO.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
  vltdfabw.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [NOTE]      The file was deleted!
  vregfwlx.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
  winwil32.dll
  xmpstean.exe
  XXXmediaCodec_ver1.5051.0.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
  yaywvstT.dll
  zfe0.exe
  zfe01.exe
  zfe02.exe
  ztool1
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
  ztool2
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月29日  22:49
Used time: 00:04 min

The scan has been done completely.

      1 Scanning directories
     62 Files were scanned
     28 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     29 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     34 Files not concerned
      0 Archives were scanned
      0 Warnings
     29 Notes

Starting the file scan:

Begin scan in 'E:\AV\virus'
E:\AV\virus\818646.dll
      [DETECTION] Is the Trojan horse TR/BHO.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\A46C-tmp.exe
      [DETECTION] Contains detection pattern of the SPR/Tool.Downlo.P.1 program
      [NOTE]      The file was deleted!
E:\AV\virus\apsagy.dll
      [DETECTION] Is the Trojan horse TR/Drop.BHO.AS
      [NOTE]      The file was deleted!
E:\AV\virus\atfxqogp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\boqnrwdmfrp.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\c-setup.exe
      [DETECTION] Contains detection pattern of the SPR/Tool.Downlo.P.1 program
      [NOTE]      The file was deleted!
E:\AV\virus\Codec.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Small.wfd
      [NOTE]      The file was deleted!
E:\AV\virus\csrss.exe
      [DETECTION] Is the Trojan horse TR/Retapu.D.41
      [NOTE]      The file was deleted!
E:\AV\virus\ctfmona.exe
      [DETECTION] Is the Trojan horse TR/WinFixer.AJ
      [NOTE]      The file was deleted!
E:\AV\virus\fccApQJA.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
E:\AV\virus\install.exe
      [DETECTION] Contains suspicious code HEUR/Malware
      [NOTE]      The file was deleted!
E:\AV\virus\iSecurity.cpl
      [DETECTION] Is the Trojan horse TR/Dldr.Nonaco.A.5
      [NOTE]      The file was deleted!
E:\AV\virus\iSecurity1.cpl
      [DETECTION] Is the Trojan horse TR/Emgr.AC
      [NOTE]      The file was deleted!
E:\AV\virus\light-codec1345.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HL
      [NOTE]      The file was deleted!
E:\AV\virus\light-codec1363.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.DLC.53
      [NOTE]      The file was deleted!
E:\AV\virus\light-codec4049.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HM
      [NOTE]      The file was deleted!
E:\AV\virus\light-codec4192.exe
      [DETECTION] Contains detection pattern of the dropper DR/DNSChanger.HN
      [NOTE]      The file was deleted!
E:\AV\virus\luapvs.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Flycodec.A.2
      [NOTE]      The file was deleted!
E:\AV\virus\msprint.exe
      [DETECTION] Is the Trojan horse TR/Agent.18944.Y
      [NOTE]      The file was deleted!
E:\AV\virus\notepad.exe
      [DETECTION] Is the Trojan horse TR/DNSChanger.abv
      [NOTE]      The file was deleted!
E:\AV\virus\rbnpsrv.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\setup.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
E:\AV\virus\setup1.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
E:\AV\virus\setup2.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Zlob.icp
      [NOTE]      The file was deleted!
E:\AV\virus\setup3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.CFI.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\tmp529448591.dll
    --> Object
      [1] Archive type: RSRC
      --> Object
          [DETECTION] Is the Trojan horse TR/Emgr.AC
      --> Object
          [DETECTION] Is the Trojan horse TR/Dldr.Nonaco.A.5
      [NOTE]      The file was deleted!
E:\AV\virus\urqOHWnO.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Virtumonde.trz
      [NOTE]      The file was deleted!
E:\AV\virus\vltdfabw.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/Agent.PB
      [NOTE]      The file was deleted!
E:\AV\virus\vregfwlx.dll
      [DETECTION] Contains detection pattern of the Ad- or Spyware ADSPY/AdSpy.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\XXXmediaCodec_ver1.5051.0.exe
      [DETECTION] Contains detection pattern of the dropper DR/Delphi.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\ztool1
      [DETECTION] Contains detection pattern of the worm WORM/Zhelatin.Gen
      [NOTE]      The file was deleted!
E:\AV\virus\ztool2
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [NOTE]      The file was deleted!


End of the scan: 2008年5月30日  17:05
Used time: 00:19 min

The scan has been done completely.

      1 Scanning directories
     56 Files were scanned
     32 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     32 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     24 Files not concerned
      0 Archives were scanned
      0 Warnings
     32 Notes

25032136  9kgen_up1.int  436.5 KB  MALWARE
25032137  9kgen_up.int  419.5 KB  MALWARE
25032138  MediaTubeCodec_ve...45.exe  118.02 KB  MALWARE
25032139  calc.exe  61.5 KB  MALWARE
25032140  crack.exe  43.5 KB  MALWARE
25032141  embd.exe  92 KB  MALWARE
25032142  keygen.exe  92.5 KB  MALWARE
25032143  install12.exe  12 KB  MALWARE
25032144  iSecurity1.cpl  132.5 KB  MALWARE
25032145  iSecurity.cpl  5.5 KB  MALWARE
25032146  khfGxWqn.dll  32.63 KB  MALWARE
25032135  light-codec1363.exe  170.82 KB  MALWARE
25032149  msconfig.exe  76.43 KB  DAMAGED FILE (UNKNOWN)
25032150  nyps4.exe  43.13 KB  MALWARE
25032151  qoMdDuvS.dll  32.63 KB  MALWARE
25032152  services.exe  74.63 KB  DAMAGED FILE (UNKNOWN)
25032138  a.tmp  118.02 KB  MALWARE
25032142  file.exe  92.5 KB  MALWARE
25032153  smss.exe  132.22 KB  DAMAGED FILE (UNKNOWN)
25032154  sn_pkz1.int  416 KB  MALWARE
25032155  sn_pkz.int  388.5 KB  MALWARE
25032156  winwil32.dll  32 KB  MALWARE
25032157  xmpstean.exe  80 KB  MALWARE
25032158  yaywvstT.dll  32.63 KB  MALWARE
25032159  zfe0.exe  156.6 KB  DAMAGED FILE (MALWARE)
25032160  zfe01.exe  156.6 KB  DAMAGED FILE (MALWARE)
25032148  zfe02.exe  156.6 KB  DAMAGED FILE (MALWARE)
25032221  zfe02.exe  156.56 KB  MALWARE
25032221  zfe0.exe  156.56 KB  MALWARE
25032221  zfe01.exe  156.56 KB  MALWARE

The file 'install.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dldr.FraudL.VL. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection will be added to our virus definition file (VDF) with one of the next updates. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: HEUR/Malware

[ 本帖最后由 Exia 于 2008-5-30 19:05 编辑 ]

jimmyleo

刚吃过馄饨

E:\VirusZoo\MalCol\virus\atfxqogp.dll [L] Win32:Vapsup-FS [Adw] (0)
E:\VirusZoo\MalCol\virus\boqnrwdmfrp.dll [L] Win32:Vapsup-EB [Adw] (0)
E:\VirusZoo\MalCol\virus\calc.exe [L] Win32:KdCrypt [Cryp] (0)
E:\VirusZoo\MalCol\virus\embd.exe [L] Win32:Vapsup-BO [Adw] (0)
E:\VirusZoo\MalCol\virus\fccApQJA.dll [L] Win32:VunDrop [Drp] (0)
E:\VirusZoo\MalCol\virus\iSecurity.cpl\[PECompact] [L] Win32:Agent-WOT [Trj] (0)
E:\VirusZoo\MalCol\virus\iSecurity1.cpl\[PECompact] [L] Win32:Agent-WPR [Trj] (0)
E:\VirusZoo\MalCol\virus\light-codec1345.exe [L] Win32:Trojan-gen {Other} (0)
E:\VirusZoo\MalCol\virus\light-codec1363.exe [L] Win32:Trojan-gen {Other} (0)
E:\VirusZoo\MalCol\virus\notepad.exe [L] Win32:KdCrypt [Cryp] (0)
E:\VirusZoo\MalCol\virus\setup.exe [L] Win32:Zlob-CBY [Trj] (0)
E:\VirusZoo\MalCol\virus\setup1.exe [L] Win32:Zlob-CBY [Trj] (0)
E:\VirusZoo\MalCol\virus\setup2.exe [L] Win32:Zlob-CBY [Trj] (0)
E:\VirusZoo\MalCol\virus\setup3.exe\[Embedded#01c00]\[PECompact]\[Embedded#04000]\[PECompact] [L] Win32:Agent-WPR [Trj] (0)
E:\VirusZoo\MalCol\virus\setup3.exe [L] Win32:Trojano-2144 [Trj] (0)
E:\VirusZoo\MalCol\virus\tmp529448591.dll\[PECompact]\[Embedded#04000]\[PECompact] [L] Win32:Agent-WPR [Trj] (0)
E:\VirusZoo\MalCol\virus\urqOHWnO.dll [L] Win32:VunDrop [Drp] (0)
E:\VirusZoo\MalCol\virus\vltdfabw.dll [L] Win32:Agent-LTS [Trj] (0)
E:\VirusZoo\MalCol\virus\winwil32.dll [L] Win32:Small-EDU [Trj] (0)
Infected files: 19

mofunzone

这么多下的没几个有胆子回的
哎。。
下次不发了，内部测试，不给你们这些吃白食的

[ 本帖最后由 mofunzone 于 2008-5-29 22:17 编辑 ]

solcroft

太胖了，考虑我的流量限制，不下了

hello1577

比较臃肿，试试卡巴

小邪邪

AVK查杀34个

欠妳緈諨

18
D:\virus\virus\818646.dll - 特征码 'Trojan-Downloader.Zlob.ABMP' 被发现
D:\virus\virus\9kgen_up.int
D:\virus\virus\9kgen_up1.int
D:\virus\virus\a.tmp
D:\virus\virus\A46C-tmp.exe
D:\virus\virus\apsagy.dll - 特征码 'Trojan.Win32.Delflob.I' 被发现
D:\virus\virus\atfxqogp.dll - 特征码 'AdWare.AdSpy' 被发现
D:\virus\virus\boqnrwdmfrp.dll
D:\virus\virus\c-setup.exe - 特征码 'Trojan-PWS.Win32.QQRob.ps' 被发现
D:\virus\virus\calc.exe
D:\virus\virus\Codec.exe - 特征码 'Trojan-Downloader.Small.wfd' 被发现
D:\virus\virus\crack.exe - 可疑代码段 被发现 (Level: 50)
D:\virus\virus\csrss.exe
D:\virus\virus\ctfmona.exe
D:\virus\virus\embd.exe
D:\virus\virus\fccApQJA.dll
D:\virus\virus\file.exe
D:\virus\virus\install.exe - 特征码 'Trojan-Clicker.Win32.Small.BG' 被发现
D:\virus\virus\install12.exe - 特征码 'Trojan-Clicker.Win32.Small.BG' 被发现
D:\virus\virus\iSecurity.cpl - 特征码 'Trojan-Clicker.Win32.Small.BG' 被发现
D:\virus\virus\iSecurity1.cpl
D:\virus\virus\keygen.exe
D:\virus\virus\khfGxWqn.dll
D:\virus\virus\light-codec1345.exe:\$TEMP\notepad.exe.dat
D:\virus\virus\light-codec1345.exe:\$TEMP\calc.exe.dat
D:\virus\virus\light-codec1345.exe:\$TEMP\linux
D:\virus\virus\light-codec1345.exe:\$TEMP\$PLUGINSDIR\DcryptDll.dll - 特征码 'Virus.Trojan.Win32.DNSChanger.chg' 被发现
D:\virus\virus\light-codec1345.exe:\$TEMP\$PLUGINSDIR\StartMenu.dll
D:\virus\virus\light-codec1345.exe:\$TEMP\$PLUGINSDIR\modern-header.bmp
D:\virus\virus\light-codec1345.exe
D:\virus\virus\light-codec1363.exe
D:\virus\virus\light-codec4049.exe - 特征码 'Downloader.DNSChanger.HM' 被发现
D:\virus\virus\light-codec4192.exe - 特征码 'Downloader.DNSChanger.HN' 被发现
D:\virus\virus\luapvs.dll
D:\virus\virus\MediaTubeCodec_ver1.971.45.exe
D:\virus\virus\msconfig.exe
D:\virus\virus\msprint.exe - 特征码 'Trojan-Clicker.Win32.Small.BG' 被发现
D:\virus\virus\notepad.exe
D:\virus\virus\nyps4.exe - 特征码 'Trojan.Vundo.Gen.2' 被发现
D:\virus\virus\qoMdDuvS.dll
D:\virus\virus\rbnpsrv.exe
D:\virus\virus\services.exe
D:\virus\virus\setup.exe
D:\virus\virus\setup1.exe
D:\virus\virus\setup2.exe
D:\virus\virus\setup3.exe - 特征码 'Trojan-Clicker.Win32.Small.BG' 被发现
D:\virus\virus\smss.exe
D:\virus\virus\sn_pkz.int
D:\virus\virus\sn_pkz1.int
D:\virus\virus\tmp529448591.dll
D:\virus\virus\urqOHWnO.dll
D:\virus\virus\vltdfabw.dll - 特征码 'Virus.Win32.Agent.LTS' 被发现
D:\virus\virus\vregfwlx.dll - 特征码 'Virus.Win32.Agent.LTS' 被发现
D:\virus\virus\winwil32.dll
D:\virus\virus\xmpstean.exe - 特征码 'Trojan.Win32.Small.ZZB' 被发现
D:\virus\virus\XXXmediaCodec_ver1.5051.0.exe
D:\virus\virus\yaywvstT.dll
D:\virus\virus\zfe0.exe
D:\virus\virus\zfe01.exe
D:\virus\virus\zfe02.exe
D:\virus\virus\ztool1
D:\virus\virus\ztool2

        62 文件被扫描
          (2 压缩档 6 文件)
        17 特征码被侦测
        1 可疑代码段被发现
        耗时: 0:07.110

csliss

已删除：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: D:\病毒樣本\virus\virus\818646.dll//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: D:\病毒樣本\virus\virus\apsagy.dll
已删除：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: D:\病毒樣本\virus\virus\c-setup.exe//ASPack
已删除：木马程序 Trojan-Downloader.Win32.VB.esd        文件: D:\病毒樣本\virus\virus\Codec.exe
已删除：木马程序 Trojan.Win32.Emgr.ac        文件: D:\病毒樣本\virus\virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan.Win32.DNSChanger.dlc        文件: D:\病毒樣本\virus\virus\light-codec1345.exe
已删除：木马程序 Trojan.Win32.DNSChanger.dlc        文件: D:\病毒樣本\virus\virus\light-codec1345.exe//data0001
已删除：木马程序 Trojan.Win32.DNSChanger.dlc        文件: D:\病毒樣本\virus\virus\light-codec1363.exe//data0001
已删除：木马程序 Trojan.Win32.DNSChanger.dja        文件: D:\病毒樣本\virus\virus\light-codec4049.exe
已删除：木马程序 Trojan.Win32.DNSChanger.dja        文件: D:\病毒樣本\virus\virus\light-codec4049.exe//data0001
已删除：木马程序 Trojan.Win32.DNSChanger.dja        文件: D:\病毒樣本\virus\virus\light-codec4192.exe//data0001
已删除：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: D:\病毒樣本\virus\virus\luapvs.dll
已删除：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: D:\病毒樣本\virus\virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact
已删除：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: D:\病毒樣本\virus\virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
已删除：木马程序 Trojan.Win32.DNSChanger.dni        文件: D:\病毒樣本\virus\virus\notepad.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: D:\病毒樣本\virus\virus\setup.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: D:\病毒樣本\virus\virus\setup1.exe
已删除：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: D:\病毒樣本\virus\virus\setup2.exe
已删除：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: D:\病毒樣本\virus\virus\setup3.exe
已删除：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: D:\病毒樣本\virus\virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: D:\病毒樣本\virus\virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
已删除：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: D:\病毒樣本\virus\virus\ztool1
已删除：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: D:\病毒樣本\virus\virus\ztool2

hello1577

12.43的病毒库！
125个成绩不错
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part5.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part5.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part5.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part5.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part5.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part5.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part5.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part5.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part5.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part5.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part5.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part5.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part5.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part5.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part5.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part5.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part5.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part5.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part5.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part5.rar/virus\ztool2
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part6.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part6.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part6.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part6.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part6.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part6.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part6.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part6.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part6.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part6.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part6.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part6.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part6.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part6.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part6.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part6.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part6.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part6.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part6.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part6.rar/virus\ztool2
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part1.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part1.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part1.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part1.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part1.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part1.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part1.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part1.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part1.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part1.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part1.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part1.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part1.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part1.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part1.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part1.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part1.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part1.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part1.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part1.rar/virus\ztool2
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part2.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part2.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part2.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part2.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part2.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part2.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part2.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part2.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part2.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part2.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part2.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part2.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part2.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part2.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part2.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part2.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part2.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part2.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part2.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part2.rar/virus\ztool2
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part3.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part3.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part3.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part3.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part3.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part3.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part3.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part3.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part3.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part3.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part3.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part3.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part3.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part3.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part3.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part3.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part3.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part3.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part3.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part3.rar/virus\ztool2
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part4.rar/virus\818646.dll//PE_Patch.UPX//UPX
检测到：木马程序 Trojan-Downloader.Win32.Peregar.np        文件: E:\virus.part4.rar/virus\apsagy.dll
检测到：木马程序 Trojan-Downloader.Win32.Delf.igd        文件: E:\virus.part4.rar/virus\c-setup.exe//ASPack
检测到：木马程序 Trojan-Downloader.Win32.VB.esd        文件: E:\virus.part4.rar/virus\Codec.exe
检测到：木马程序 Trojan.Win32.Emgr.ac        文件: E:\virus.part4.rar/virus\iSecurity1.cpl//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part4.rar/virus\light-codec1345.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dlc        文件: E:\virus.part4.rar/virus\light-codec1363.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part4.rar/virus\light-codec4049.exe//data0001
检测到：木马程序 Trojan.Win32.DNSChanger.dja        文件: E:\virus.part4.rar/virus\light-codec4192.exe//data0001
检测到：广告程序 not-a-virus:AdWare.Win32.BHO.bgx        文件: E:\virus.part4.rar/virus\luapvs.dll
检测到：木马程序 Trojan-Downloader.Win32.Zlob.ocf        文件: E:\virus.part4.rar/virus\MediaTubeCodec_ver1.971.45.exe
检测到：广告程序 not-a-virus:AdWare.Win32.E404.bp        文件: E:\virus.part4.rar/virus\msprint.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.UPX//UPX
检测到：木马程序 Trojan.Win32.DNSChanger.dni        文件: E:\virus.part4.rar/virus\notepad.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part4.rar/virus\setup.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part4.rar/virus\setup1.exe
检测到：木马程序 Trojan-Downloader.Win32.Zlob.oby        文件: E:\virus.part4.rar/virus\setup2.exe
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part4.rar/virus\setup3.exe//PE_Patch.PECompact//PecBundle//PECompact//#//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Small.wfd        文件: E:\virus.part4.rar/virus\tmp529448591.dll//PE_Patch.PECompact//PecBundle//PECompact
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part4.rar/virus\ztool1
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part4.rar/virus\ztool2
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part6.rar
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part1.rar
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part2.rar
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part3.rar
检测到：木马程序 Trojan-Downloader.Win32.Tibs.abc        文件: E:\virus.part4.rar

[ 本帖最后由 hello1577 于 2008-5-30 16:41 编辑 ]