orz's DownLoad List33x

Sherry.ai

从orz中提取33x

[ 本帖最后由 935623508 于 2008-12-28 16:17 编辑 ]

Sherry.ai

顺便发一下地址~
[file]       
open=y
url1=http://111.vvvbw.cn/new/new1.exe
url2=http://111.vvvbw.cn/new/new2.exe
url3=http://111.vvvbw.cn/new/new3.exe
url4=http://111.vvvbw.cn/new/new4.exe
url5=http://111.vvvbw.cn/new/new5.exe
url6=http://111.vvvbw.cn/new/new6.exe
url7=http://111.vvvbw.cn/new/new7.exe
url8=http://111.vvvbw.cn/new/new8.exe
url9=http://111.vvvbw.cn/new/new9.exe
url10=http://111.vvvbw.cn/new/new10.exe
url11=http://222.vvvbw.cn/new/new11.exe
url12=http://222.vvvbw.cn/new/new12.exe
url13=http://222.vvvbw.cn/new/new13.exe
url14=http://222.vvvbw.cn/new/new14.exe
url15=http://222.vvvbw.cn/new/new15.exe
url16=http://222.vvvbw.cn/new/new16.exe
url17=http://222.vvvbw.cn/new/new17.exe
url18=http://222.vvvbw.cn/new/new18.exe
url19=http://222.vvvbw.cn/new/new19.exe
url20=http://222.vvvbw.cn/new/new20.exe
url21=http://333.vvvbw.cn/new/new21.exe
url22=http://333.vvvbw.cn/new/new22.exe
url23=http://333.vvvbw.cn/new/new23.exe
url24=http://333.vvvbw.cn/new/new24.exe
url25=http://333.vvvbw.cn/new/new25.exe
url26=http://333.vvvbw.cn/new/new26.exe
url27=http://333.vvvbw.cn/new/new27.exe
count=27

挪威的冬天

信息        2008-12-28  16:03:07        您此次查毒共查出17个病毒以及危险代码                       
信息        2008-12-28  16:03:07        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件56个                       
信息        2008-12-28  16:03:07        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/28 16:2

new11[1].exe      --------      可疑的
new13[1].exe      --------      可疑的
new14[1].exe      --------      可疑的
new17[1].exe      --------      可疑的
new1[1].exe      --------      可疑的
new21[1].exe      --------      可疑的
new22[1].exe      --------      可疑的
new23[1].exe      --------      可疑的
new3[1].exe      --------      可疑的
new9[1].exe      --------      可疑的


new10[1].exe      --------      病毒
new12[1].exe      --------      病毒
new15[1].exe      --------      病毒
new16[1].exe      --------      病毒
new18[1].exe      --------      病毒
new19[1].exe      --------      病毒
new24[1].exe      --------      病毒
new25[1].exe      --------      病毒
new26[1].exe      --------      病毒
new27[1].exe      --------      病毒
new2[1].exe      --------      病毒
new4[1].exe      --------      病毒
new5[1].exe      --------      病毒
new6[1].exe      --------      病毒
new7[1].exe      --------      病毒
new8[1].exe      --------      病毒


new20[1].exe      --------      分析中


理论文件总数:        27
实际文件总数:        27

其中:

分析中: 1
可疑的: 10
病毒: 16

识别率为: 100%

kxmp

TF检测出

leonfg

ESET 全k
C:\Documents and Settings\GUNDAM\桌面\DL List\new10[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new11[1].exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new12[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new13[1].exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new14[1].exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new15[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new16[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new17[1].exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new18[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new19[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new1[1].exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new20[1].exe - a variant of Win32/TrojanDownloader.Agent.OOB trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new21[1].exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new22[1].exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new23[1].exe - a variant of Win32/PSW.Legendmir.NGG trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new24[1].exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new25[1].exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new26[1].exe - probably a variant of Win32/PSW.Delf.NLZ trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new27[1].exe - a variant of Win32/PSW.Delf.NMX trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new2[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new3[1].exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new4[1].exe - a variant of Win32/Agent.OKR trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new5[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new6[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new7[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new8[1].exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined
C:\Documents and Settings\GUNDAM\桌面\DL List\new9[1].exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined

syfwxmh

原帖由 935623508 于 2008-12-28 15:45 发表
从orz中提取33x有的过卡巴

你用的是什么版本的卡巴？


PS秀一下自己美化的XP
卡巴清空

Sherry.ai

我没用卡巴...是Virus total显示的
不能怪我

syfwxmh

汗~~~

08红伞威点

Start of the scan: 2008年12月28日  16:55
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\文件'
C:\Documents and Settings\***\桌面\文件\DL List\new10[1].exe
    [DETECTION] Is the TR/Agent.BHQ Trojan
    [NOTE]      A backup was created as '49ce3f55.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new11[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49ce3f56.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new12[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
        --> Object
          [DETECTION] Is the TR/Agent.14336.27 Trojan
    [NOTE]      A backup was created as '48a5c23f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new13[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49ce3f57.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new14[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48a5c230.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new15[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49ce3f58.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new16[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [NOTE]      A backup was created as '48a5c231.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new17[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49ce3f59.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new18[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
        --> Object
          [DETECTION] Is the TR/SmallGame.BF.1 Trojan
    [NOTE]      A backup was created as '48a5c232.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new19[1].exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49ce3f5a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new1[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48a5c233.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new20[1].exe
      [DETECTION] Is the TR/Drop.Agent.Zlo.1 Trojan
    [NOTE]      A backup was created as '49ce3f5c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new21[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49ce3f5b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new22[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48a5c234.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new23[1].exe
    [DETECTION] Is the TR/PSW.OnlineGames.uaki Trojan
    [NOTE]      A backup was created as '49ce3f5d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new24[1].exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48a5c235.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new25[1].exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aobb Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '49ce3f5e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new26[1].exe
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      A backup was created as '48a5c237.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new27[1].exe
    [DETECTION] Is the TR/Crypt.CFI.Gen Trojan
    [NOTE]      A backup was created as '48a5c236.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new2[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '49ce3f5f.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new3[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48a5c208.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new4[1].exe
      [DETECTION] Is the TR/Dldr.Agent.asqf Trojan
    [NOTE]      A backup was created as '49ce3f50.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new5[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AC Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48a5c239.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new6[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
    [NOTE]      A backup was created as '49ce3f61.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new7[1].exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '48a5c20a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new8[1].exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
    [DETECTION] Contains HEUR/Malware suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      A backup was created as '49ce3f60.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\文件\DL List\new9[1].exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '48a5c209.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月28日  16:55
Used time: 00:14 Minute(s)

The scan has been done completely.

      2 Scanning directories
     27 Files were scanned
     33 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
     27 files were deleted
      0 files were repaired
     27 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -7 Files not concerned
      0 Archives were scanned
      0 Warnings
     27 Notes
-------------------------------------------------------------------------------
红伞S版（V7.01.01.37）清空。

kkgh

瑞星全杀