【New】http://pa.tt-09.com/ap.txt【未打包】

qigang

[file]
open=y
url1=http://www.xiazaide1.cn/jpg/cw01.exe
url2=http://www.xiazaide1.cn/jpg/cw02.exe
url3=http://www.xiazaide1.cn/jpg/cw03.exe
url4=http://www.xiazaide1.cn/jpg/cw04.exe
url5=http://www.xiazaide1.cn/jpg/cw05.exe
url6=http://www.xiazaide1.cn/jpg/cw06.exe
url7=http://www.xiazaide1.cn/jpg/cw07.exe
url8=http://www.xiazaide1.cn/jpg/cw08.exe
url9=http://www.xiazaide1.cn/jpg/cw09.exe
url10=http://www.xiazaide1.cn/jpg/cw10.exe
url11=http://www.xiazaide1.cn/jpg/cw11.exe
url12=http://www.xiazaide1.cn/jpg/cw12.exe
url13=http://www.xiazaide1.cn/jpg/cw13.exe
url14=http://www.xiazaide1.cn/jpg/cw14.exe
url15=http://www.xiazaide1.cn/jpg/cw15.exe
url16=http://www.xiazaide1.cn/jpg/cw16.exe
url17=http://www.xiazaide1.cn/jpg/cw17.exe
url18=http://www.xiazaide1.cn/jpg/cw18.exe
url19=http://www.xiazaide1.cn/jpg/cw19.exe
url20=http://www.xiazaide1.cn/jpg/cw20.exe
url21=http://www.xiazaide1.cn/jpg/cw21.exe
url22=http://www.xiazaide1.cn/jpg/cw22.exe
url23=http://www.xiazaide1.cn/jpg/999999.exe
url24=http://www.xiazaide1.cn/jpg/88.exe
url25=http://www.xiazaide1.cn/jpg/3_kzc.exe
url26=http://www.xiazaide1.cn/jpg/setup.exe
url27=http://www.xiazaide1.cn/jpg/wuji.exe
url28=
url29=
url30=
url31=
count=31

gzg

我来打包

JusticeH

BitDefender ANtiVirus 2009
捉22個，其餘5個上報

C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw21.exe BehavesLike:Win32.ExplorerHijack Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\88.exe Dropped:Trojan.Agent.AGTR Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw19.exe Dropped:Trojan.PWS.OnlineGames.ZWI Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw20.exe Dropped:Trojan.PWS.OnlineGames.ZWI Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw22.exe Trojan.Dropper.STM Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\3_kzc.exe Trojan.Obfuscated.MQ Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\setup.exe Trojan.Obfuscated.MQ Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw01.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw04.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw05.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw06.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw07.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw08.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw10.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw11.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw12.exe Trojan.PWS.Agent.SGC Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw14.exe Trojan.PWS.OnlineGames.AAGG Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw15.exe Trojan.PWS.OnlineGames.AAGG Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw16.exe Trojan.PWS.OnlineGames.AAGG Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw17.exe Trojan.PWS.OnlineGames.AAGG Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\cw18.exe Trojan.PWS.OnlineGames.AAGG Deleted
C:\Documents and Settings\Justice\My Documents\virus\KAFAN\复件 新建文件夹\999999.exe Trojan.PWS.QQPass.NFJ Deleted

sam.to

to kl(6)

This file is already detected. Please update your bases.

[ 本帖最后由 sam.to 于 2009-1-2 15:16 编辑 ]

fzz8848

leonfg

ESET 剩1个
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\3_kzc.exe - Win32/TrojanClicker.Agent.NFE trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\999999.exe - a variant of Win32/PSW.Delf.NMX trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw01.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw02.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw03.exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw04.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw05.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw06.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw07.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw08.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw09.exe - probably a variant of Win32/Genetik trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw10.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw11.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw12.exe - probably a variant of Win32/PSW.OnLineGames.NRF trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw13.exe - probably a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw14.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw15.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw16.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw17.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw18.exe - a variant of Win32/TrojanDropper.Agent.NPO trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw19.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw20.exe - a variant of Win32/PSW.OnLineGames.NRD trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw21.exe - a variant of Win32/PSW.Legendmir.NGG trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\cw22.exe - a variant of Win32/PSW.OnLineGames.NST trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\setup.exe - probably a variant of Win32/Agent.OCX trojan - cleaned by deleting - quarantined [1]
C:\Documents and Settings\GUNDAM\桌面\复件 新建文件夹\wuji.exe - probably a variant of Win32/TrojanDownloader.Delf.NJH trojan - cleaned by deleting - quarantined [1]

Palkia

C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\3_kzc.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\999999.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw01.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw02.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw03.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw04.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw05.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw06.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw07.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw08.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw09.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw10.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw11.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw12.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw13.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw14.exe        Trojan.Inject.lzi.mozl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw15.exe        TrojanPSW.GameOL.tjx.caov        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw16.exe        TrojanPSW.GameOL.tjx.jjyq        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw17.exe        TrojanPSW.GameOL.tjx.ffaj        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw18.exe        TrojanPSW.GameOL.tjx.nhll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw19.exe        Trojan.Cap812174.fkhm.arc        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw20.exe        Trojan.Cap812170.syoz.arc        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw21.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\cw22.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\复件 新建文件夹\复件 新建文件夹\wuji.exe        Trojan.Agent.baka.cihs        木马        还未处理

Palkia

88.exe              68.65/68.65KB       100.00%    在线扫描      它是一个“蠕虫病毒”2008-12-29 23:45:28  2008-12-29 23:45:29  
setup.exe           35.95/35.95KB       100.00%    在线扫描      没有发现病毒，但这并不能说明此文件百分之百可信。2008-12-29 23:45:28  2008-12-29 23:45:29

08红伞威点

Start of the scan: 2008年12月30日  17:51
Starting the file scan:

Begin scan in 'C:\Documents and Settings\***\桌面\样本'
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\3_kzc.exe
    [0] Archive type: OVL
    --> Object
      [DETECTION] This file has been compressed using unusual runtime compression (PCK/UPACK). Please verify the origin of this file.
    [NOTE]      A backup was created as '49c4ef68.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\88.exe
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      A backup was created as '4987ef42.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\999999.exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      A backup was created as '4992ef43.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw01.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AC Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '4989ef82.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw02.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '480ffba3.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw03.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '4989ef84.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw04.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Contains a recognition pattern of the (harmful) BDS/Agent.vzr.2 back-door program
    [NOTE]      A backup was created as '4989ef83.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw05.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AH Trojan
        --> Object
          [DETECTION] Is the TR/PSW.Wow.dxt.6 Trojan
    [NOTE]      A backup was created as '480ffba4.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw06.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AD Trojan
        --> Object
          [DETECTION] Is the TR/Agent.17920.57 Trojan
    [NOTE]      A backup was created as '480ffba5.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw07.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
        --> Object
          [DETECTION] Is the TR/PSW.Magania.aoys.2 Trojan
    [NOTE]      A backup was created as '4989ef86.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw08.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.MultiFirst.AE Trojan
        --> Object
          [DETECTION] Is the TR/SmallGame.BF.7 Trojan
    [NOTE]      A backup was created as '4989ef85.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw09.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '480ffba6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw10.exe
    [DETECTION] Is the TR/Agent.BHQ Trojan
    [NOTE]      A backup was created as '498aef85.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw11.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AH Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '498aef86.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw12.exe
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/PSW.MultiFirst.AH Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '480cfba7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw13.exe
      [DETECTION] Is the TR/Thief.Games.ubha Trojan
    [NOTE]      A backup was created as '498aef87.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw14.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '480cfba8.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw15.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '498aef89.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw16.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '498aef88.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw17.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '480cfba9.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw18.exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '498aef8a.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw19.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.Magania.annh Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '480cfbab.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw20.exe
    [0] Archive type: OVL
      --> Object
        [1] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Thief.Magania.annh Trojan
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      A backup was created as '498bef89.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw21.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '480dfbaa.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\cw22.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [NOTE]      A backup was created as '498bef8b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\setup.exe
    [DETECTION] Is the TR/Rootkit.Gen Trojan
    [NOTE]      A backup was created as '49cdef78.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
C:\Documents and Settings\***\桌面\样本\复件 新建文件夹\wuji.exe
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      A backup was created as '49c3ef88.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2008年12月30日  17:51
Used time: 00:14 Minute(s)

The scan has been done completely.

      2 Scanning directories
     27 Files were scanned
     37 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
     27 files were deleted
      0 files were repaired
     27 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
    -10 Files not concerned
      0 Archives were scanned
      0 Warnings
     27 Notes
-------------------------------------------------------------------------
红伞S版库（V7.01.01.48）清空。

挪威的冬天

clear

信息        2008-12-30  17:55:13        您此次查毒共查出27个病毒以及危险代码                       
信息        2008-12-30  17:55:13        您此次查毒共查了内存模块0个，磁盘引导扇区0个，文件58个                       
信息        2008-12-30  17:55:13        金山毒霸主程序查毒过程结束，查毒方式：命令行查毒                       

金山毒霸可信认证查询结果如下:

报告生成于:   2008/12/30 17:54

999999.exe      --------      可疑的
cw03.exe      --------      可疑的
cw09.exe      --------      可疑的
cw13.exe      --------      可疑的
cw14.exe      --------      可疑的
cw21.exe      --------      可疑的
cw22.exe      --------      可疑的
wuji.exe      --------      可疑的


3_kzc.exe      --------      病毒
cw01.exe      --------      病毒
cw02.exe      --------      病毒
cw05.exe      --------      病毒
cw06.exe      --------      病毒
cw07.exe      --------      病毒
cw08.exe      --------      病毒
cw10.exe      --------      病毒
cw11.exe      --------      病毒
cw12.exe      --------      病毒
cw19.exe      --------      病毒
cw20.exe      --------      病毒


cw04.exe      --------      未知


88.exe      --------      分析中
cw15.exe      --------      分析中
cw16.exe      --------      分析中
cw17.exe      --------      分析中
cw18.exe      --------      分析中
setup.exe      --------      分析中


理论文件总数:        27
实际文件总数:        27

其中:

分析中: 6
可疑的: 8
病毒: 12
未知: 1

识别率为: 96%