22X of this week

傻猪猪米走鸡

已剔除部分损坏，不排除还有遗漏。

luxiao200888

申博的？？

luxiao200888

Starting the file scan:

Begin scan in 'C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本'
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\1.rar
    [0] Archive type: RAR
    --> a33[1].htm
      [DETECTION] Contains recognition pattern of the HTML/Dldr.Iframe.HN HTML script virus
    [DETECTION] Contains recognition pattern of the HTML/Dldr.Iframe.HN HTML script virus
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\2.rar
    [0] Archive type: RAR
    --> fxx[1].htm
      [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.HZ Java script virus
    [DETECTION] Contains recognition pattern of the JS/Dldr.Agent.HZ Java script virus
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\5C8D7598E01339206ACA3E6AD0733A595AE10A72
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\aaa (2).exe
    [DETECTION] Is the TR/ATRAPS.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\BF68239AD9F40C023A9960C3293EDE0A
    [DETECTION] Contains recognition pattern of the ADSPY/BDSearch.1.105 adware or spyware
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2044.exe277
    [DETECTION] Contains recognition pattern of the SPR/Tool.PWViewer program
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2195
    [0] Archive type: ZIP
    --> SP5 2.0/KewlButtonz.ocx
      [DETECTION] Contains recognition pattern of a probably damaged CC/Agent sample
    [DETECTION] Contains recognition pattern of a probably damaged CC/Agent sample
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2362.exe277
    [0] Archive type: RAR SFX (self extracting)
    --> ￋﾬￍ￡ￍ￡.exe
      [DETECTION] Contains recognition pattern of the JOKE/Shaker.C joke
    [DETECTION] Contains recognition pattern of the JOKE/Shaker.C joke
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2435.exe277
    [DETECTION] Is the TR/Agent.22549 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2445.exe277
    [DETECTION] Contains HEUR/Crypted suspicious code
    [NOTE]      The detection was classified as suspicious.
    [NOTE]      The file was moved to '49b9c1af.qua'!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2570.exe277
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-2744.exe277
    [DETECTION] Is the TR/Patched.IG Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\FTP081201-3125.dll5
    [DETECTION] Is the TR/Dmservinf.A.70 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\hosts.exe
    [DETECTION] Contains recognition pattern of the DR/Agent.hst dropper
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\yangben (56).exe
    [DETECTION] Is the TR/Dldr.Nurech.HG Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\yangben (79).exe
    [DETECTION] Is the TR/Crypt.NSPM.Gen Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\yangben (83).exe
    [0] Archive type: RSRC
    --> Object
      [DETECTION] Is the TR/Dldr.Agent.axhi.3 Trojan
    [DETECTION] Is the TR/Dldr.Agent.axhi.3 Trojan
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\yangben (88).exe
    [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
    [NOTE]      The file was deleted!
C:\Documents and Settings\Owner\桌面\09.1.5---1.11日样本\样本.rar
    [0] Archive type: RAR
      --> 1.rar
        [1] Archive type: RAR
        --> c0x[1].htm
          [DETECTION] Contains recognition pattern of the HTML/Shellcode.Gen HTML script virus
      --> 2.rar
        [1] Archive type: RAR
        --> new[1].htm
          [DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
    [DETECTION] Contains recognition pattern of the HTML/Malicious.ActiveX.Gen HTML script virus
    [NOTE]      The file was deleted!

luxiao200888

25117847  6A1AF3737D67629DD087...7E  48 KB  MALWARE
25224439  FTP081201-1692.exe277  112.28 KB  CLEAN
25224442  FTP081201-2436.exe277  112.5 KB  CLEAN

syfwxmh

TO KL Heur Manager&KL

magicyujun

McAfee Total Protection