仨

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\gr.exe
Type: Generic Win/DOS Executable / Extension: .EXE
MD5 Hash: 7372C5538AD30691944A9386EA496E01

ArcaVir -----Nothing
A-squared ----- Rootkit.Agent!IK
Avast ----- Win32:Rootkit-gen [Rtk]
AVG ----- Agent_r.IL.dropper  
AntiVir V8 ----- TR/Crypt.XDR.Gen
BitDefender ----- Rootkit.Agent.AIWN
ClamWin -----Nothing
Dr.Web V5 ----- MULDROP.Trojan
Eset V3 ----- probably a variant of Win32/Genetik trojan
F-Prot ----- W32/OnlineGames.AJ.gen!Eldorado  
Ikarus ----- Rootkit.Agent
Jiangmin ----- TrojanDownloader.Agent.ayet
Kaspersky ----- Trojan-Dropper.Win32.Agent.afiw
Kingsoft ----- Win32.Troj.DropRootKit.a.143360
VBA32 ----- Win32.Trojan.Downloader

*** 13/15 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\jiocs.dll
Type: Win32 Executable MS Visual C++ / Extension: .EXE
MD5 Hash: 3E6CEE82DE28834BA206E20C58A396F3

ArcaVir -----Nothing
A-squared -----Nothing
Avast -----Nothing
AVG ----- Agent_r.HD  
AntiVir V8 -----Nothing
BitDefender ----- Trojan.Inject.SJ
ClamWin -----Nothing
Dr.Web V5 ----- Trojan.MulDrop.29910
Eset V3 -----Nothing
F-Prot ----- W32/Heuristic-KPP!Eldorado  
Ikarus -----Nothing
Jiangmin ----- Trojan/Small.gcj
Kaspersky ----- Trojan.Win32.AntiAV.agn
Kingsoft ----- Win32.Troj.Agent.yj.44032
VBA32 -----Nothing

*** 7/15 antivirus engines found virus in this file ***
-------------------------------------------------------------------------
D:\Desk\Samples\Collect\MCLS\usp10.dll
Type: Win32 Executable Generic / Extension: .EXE
MD5 Hash: 5D4EA1A2616BE4A5FCB2C92BA5212EF2

ArcaVir -----Nothing
A-squared ----- Win32.SuspectCrc!IK
Avast -----Nothing
AVG -----Nothing
AntiVir V8 ----- TR/Agent.7168.32
BitDefender ----- DeepScan:Generic.Malware.dld!!.4D5C8BBF
ClamWin -----Nothing
Dr.Web V5 -----Nothing
Eset V3 -----Nothing
F-Prot ----- W32/Heuristic-217!Eldorado  
Ikarus ----- Win32.SuspectCrc
Jiangmin ----- TrojanDownloader.Small.aauc
Kaspersky ----- HEUR:Trojan-Downloader.Win32.Generic
Kingsoft ----- Win32.Troj.Agent.jc.7168
VBA32 ----- Win32.Trojan.Downloader

*** 9/15 antivirus engines found virus in this file ***
-------------------------------------------------------------------------

Task done @ 2009/01/21 三 17:30:34.16
Note: The results might be different from that of the GUI version.

mayazhimi

沙发咯

luxiao200888

1 to avira

mayazhimi

卡巴杀了

xyao

微点

will

Download list : http://txt.naiws.com/oo.txt

c5132902

Generic Dropper.bu
Downloader-BLE

sbbdms

打包~

sbbdms

卡巴杀25漏3

已删除：木马程序 Trojan.Win32.Agent.ahzz        文件　: D:\软件\其它\v\k\new\28.rar/new28.exe//NSPack
已删除：木马程序 Trojan-GameThief.Win32.WOW.emh        文件　: D:\软件\其它\v\k\new\28.rar/new1.exe
已删除：木马程序 Trojan-Dropper.Win32.Agent.afju        文件　: D:\软件\其它\v\k\new\28.rar/new2.exe
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new3.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Spy.Win32.Agent.sc        文件　: D:\软件\其它\v\k\new\28.rar/new5.exe
已删除：病毒 Worm.Win32.Downloader.yv        文件　: D:\软件\其它\v\k\new\28.rar/new6.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.Magania.gen        文件　: D:\软件\其它\v\k\new\28.rar/new7.exe//PE_Patch//UPack
已删除：病毒 Worm.Win32.Downloader.yv        文件　: D:\软件\其它\v\k\new\28.rar/new9.exe//PE_Patch.UPX//UPX
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new10.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan.Win32.Agent.biul        文件　: D:\软件\其它\v\k\new\28.rar/new11.exe
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new13.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan.Win32.Agent.bitq        文件　: D:\软件\其它\v\k\new\28.rar/new14.exe
已删除：木马程序 Trojan-Spy.Win32.Small.cae        文件　: D:\软件\其它\v\k\new\28.rar/new15.exe//PE_Patch.UPX//UPX
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new16.exe//PE_Patch.UPX//UPX
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new17.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-PSW.Win32.Agent.lrw        文件　: D:\软件\其它\v\k\new\28.rar/new18.exe//PE_Patch.UPX//UPX
已删除：病毒 Worm.Win32.Downloader.yv        文件　: D:\软件\其它\v\k\new\28.rar/new19.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan.Win32.Pakes.mqh        文件　: D:\软件\其它\v\k\new\28.rar/new20.exe
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new21.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.OnLineGames.umwv        文件　: D:\软件\其它\v\k\new\28.rar/new22.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-Dropper.Win32.Agent.adxr        文件　: D:\软件\其它\v\k\new\28.rar/new23.exe//FSG
已删除：木马程序 Trojan-PSW.Win32.Agent.lqp        文件　: D:\软件\其它\v\k\new\28.rar/new24.exe//#
已删除：木马程序 Trojan-Spy.Win32.Small.cah        文件　: D:\软件\其它\v\k\new\28.rar/new25.exe
已删除：病毒 Worm.Win32.Downloader.zd        文件　: D:\软件\其它\v\k\new\28.rar/new26.exe//PE_Patch.UPX//UPX
已删除：木马程序 Trojan-GameThief.Win32.Lmir.gzh        文件　: D:\软件\其它\v\k\new\28.rar/new27.exe//UPX

TO KL

Hello,

new12.exe_, new8.exe_ - Worm.Win32.Downloader.zx

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

new4.exe_

No malicious code was found in this file.

Please quote all when answering.
The answer is relevant to the latest bases from update sources.


>
>
Regards, Vladislav Pintiysky
Virus Analyst

[ 本帖最后由 sbbdms 于 2009-1-22 08:01 编辑 ]

allinwonderi

2x to lab