木马下载器1.exe 和几个比较新的病毒

diannao6051

木马下载器1.exe 和几个比较新的病毒



http://linj.ys168.com 11.21上传 解压密码arswp

[ 本帖最后由 diannao6051 于 2008-11-21 10:33 编辑 ]

kavfans99

\0_200811210844510539\reg.bak 不是PE文件，也不是图形文件...

Avira AntiVir Premium Scan Report :

Z:\0_200811210844510539\C\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\QQ_UPDATE.CAB
      [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\DOCUMENTS AND SETTINGS\ADMINISTRATOR\LOCAL SETTINGS\TEMP\WMSETUP.DLL
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\PROGRAM FILES\MESSENGER\MSGMR.DLL
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\UPDATE.DLL
    [DETECTION] Is the TR/Qhost.kmd Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\APPPATCH\ACSPECF.DLL
    [DETECTION] Is the TR/Dldr.Agent.dle.1 Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\APPPATCH\ACXTRNEL.SDB
    [DETECTION] Is the TR/Dldr.Agent.dle Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\DOWNLOADED PROGRAM FILES\THUNDERADVISE.DLL
    [DETECTION] Contains recognition pattern of the ADSPY/Bho.daq adware or spyware
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\FONTS\FRAMDEE.TTF
    [DETECTION] Is the TR/Dldr.Small.yvn.4 Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\01AFE3DC.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\08223B03.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\122B901E.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\16AF66EB.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\201476D0.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\2EF0D734.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\34A25F04.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\3B8DA919.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\4D023DE9.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\4FBFD5A4.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\56BC86C7.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\58FF3024.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\5934EA2B.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\66AFCB56.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\8566F82E.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\93DEE065.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\9CA963CA.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\AD794E6B.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\B160485.SYS
    [DETECTION] Contains recognition pattern of the RKIT/Agent.evb root kit
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\B3721C07.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\B8E83D3C.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\BA7EDF54.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\D435FD4.SYS
    [DETECTION] Contains recognition pattern of the RKIT/Agent.evb root kit
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\DA63E650.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\DFEC5CB7.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\E0D39066.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\E1D19FCC.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\F35EE9E.SYS
    [DETECTION] Contains recognition pattern of the RKIT/Agent.euu root kit
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\F8E07BB2.DLL
      [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\HBMHLY.DLL
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\HBZHUXIAN.DLL
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\SYSTEM.EXE
    [DETECTION] Is the TR/PSW.MultiFirst.V Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\SYSTEM32\UPNPSRV.DLL
    [DETECTION] Is the TR/Agent.AKOK Trojan
    [NOTE]      The file was deleted!
Z:\0_200811210844510539\C\WINDOWS\TEMP\WMSETUP.DLL
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!

     15 Scanning directories
     53 Files were scanned
     42 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     42 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      0 Archives were scanned
      0 Warnings
     42 Notes

sand63

fzz8848

order110

小红伞杀
Begin scan in 'C:\Documents and Settings\Administrator\桌面\l.rar'
C:\Documents and Settings\Administrator\桌面\l.rar
    [0] Archive type: RAR
      --> l.exe
          [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '49982f1b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!

啊弥陀佛

微点拦截

kingmuro

西风萧雨

star_xing

C:\Documents and Settings\ztx\桌面\l.rar > RAR > l.exe - Win32/Agent.OAG 特洛伊木马

star1025

eav 4
C:\Documents and Settings\Administrator\桌面\l.rar » RAR » l.exe - Win32/Agent.OAG trojan