zbot * 59

taoyuan237

原帖由 Palkia 于 2009-1-21 15:45 发表
446998

剩余文件上报了吗？？要是上报了我就不上报了

小小爬蔷虎

小红伞：
Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\wsnpoem.rar'
C:\Documents and Settings\Administrator\桌面\wsnpoem.rar
    [0] Archive type: RAR
    --> 1233.exe
      [DETECTION] Contains recognition pattern of the DR/Agent.pza dropper
    --> avto.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> avto1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> avto2.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> avto3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> avto4.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> demo.exe
      [DETECTION] Is the TR/Spy.ZBot.ked Trojan
    --> drumbuss.exe
      [DETECTION] Is the TR/Spy.ZBot.PE.45 Trojan
    --> gbr.exe
      [DETECTION] Is the TR/Spy.ZBot.kun Trojan
    --> kdjer.exe
      [DETECTION] Is the TR/Spy.ZBot.jzv Trojan
    --> ldr.exe
      [DETECTION] Is the TR/Spy.ZBot.PE.30 Trojan
    --> ldrx.exe
      [DETECTION] Is the TR/Spy.ZBot.hss Trojan
    --> ldrxc.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> main.exe
      [DETECTION] Is the TR/Spy.ZBot.kdd Trojan
    --> ntos.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> pinnew.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> pinnew1 (1).exe
      [DETECTION] Is the TR/Agent.gzv.4 Trojan
    --> pinnew1 (10).exe
      [DETECTION] Is the TR/Agent.gzx.1 Trojan
    --> pinnew1 (11).exe
      [DETECTION] Is the TR/Agent.gzx.4 Trojan
    --> pinnew1 (12).exe
      [DETECTION] Is the TR/Agent.gzx.3 Trojan
    --> pinnew1 (13).exe
      [DETECTION] Is the TR/Agent.gzx.2 Trojan
    --> pinnew1 (14).exe
      [DETECTION] Is the TR/Agent.gzx.5 Trojan
    --> pinnew1 (15).exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> pinnew1 (16).exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> pinnew1 (17).exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> pinnew1 (18).exe
      [DETECTION] Is the TR/ATRAPS.Gen Trojan
    --> pinnew1 (2).exe
      [DETECTION] Is the TR/Agent.gzv.1 Trojan
    --> pinnew1 (3).exe
      [DETECTION] Is the TR/Agent.gzv.2 Trojan
    --> pinnew1 (4).exe
      [DETECTION] Is the TR/Agent.gzv.5 Trojan
    --> pinnew1 (5).exe
      [DETECTION] Is the TR/Agent.gzv.6 Trojan
    --> pinnew1 (6).exe
      [DETECTION] Is the TR/Agent.gzv.7 Trojan
    --> pinnew1 (7).exe
      [DETECTION] Is the TR/Agent.gzv.8 Trojan
    --> pinnew1 (8).exe
      [DETECTION] Is the TR/Agent.gzv.9 Trojan
    --> pinnew1 (9).exe
      [DETECTION] Is the TR/Agent.gzv.3 Trojan
    --> pinnew1.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> q1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q2.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q3.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q4.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q5.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q6.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q7.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> q8.exe
      [DETECTION] Contains recognition pattern of the DR/Delphi.Gen dropper
    --> q9.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> readme.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> Rundll4.exe
      [DETECTION] Contains recognition pattern of the W32/Smile.A Windows virus
    --> sysutils.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> teste1_p.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> teste2_p.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> teste3_p.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> teste4_p.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> twex.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> EB6C4499B05F.dll
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> sysutils32.dll
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> TDSSserv.sys
      [DETECTION] Is the TR/Rootkit.Gen Trojan
    --> TDSS2950.tmp
      [DETECTION] Is the TR/Dldr.FraudLoa.WD Trojan
    --> TDSS780c.tmp
      [DETECTION] Is the TR/TDss.AA Trojan
    [NOTE]      A backup was created as '49e5e12b.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年1月22日  10:58
Used time: 00:11 Minute(s)

The scan has been done completely.

      0 Scanning directories
     60 Files were scanned
     57 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      0 Warnings
      1 Notes

[ 本帖最后由 小小爬蔷虎 于 2009-1-22 11:01 编辑 ]

wcj20236

好多重复的，没几个样本，都为生成物。   微点杀。