26x

will

KV2009杀9个启发了1个…

schumi小粉

avast killed 11，上报~
2009-2-11 15:13:25 Administrator 2256 Sign of "Win32:Agent-ADVJ [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\08c75f12ed1fb6811fd4916d25f2279c.exe\[Upack]\[Embedded_I#17e0]" file.  
2009-2-11 15:13:31 Administrator 2256 Sign of "Win32:KillAV-KK [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\175b21ed19a962c66215d82b5143b97d.exe\[FSG]\[Embedded_Ix#01124]" file.  
2009-2-11 15:13:31 Administrator 2256 Sign of "Win32:KillAV-KK [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\3417eeec89020888916b742e103051e2.exe\[FSG]\[Embedded_Ix#01124]" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:KillAV-KK [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\582abb99a75418a4608a2a23f09217a9.dll" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Agent-ADVJ [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\5e622eda6b3a65d1f4a983a013799f6d.exe\[Upack]\[Embedded_I#17e0]" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Agent-ADVJ [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\6a3221f30e01d96932a2700503543885.exe\[Upack]\[Embedded_I#17e0]" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\759fa174ed7e583aa3cc3de254e55a7c.exe\[FSG]\[Embedded_I#01108]" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Agent-ADVJ [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\7b2504ea250d9839bca4952279576f51.exe\[Upack]\[Embedded_I#17e0]" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\ad0c3f17a9805ff83d71131bd0c6a5b8.exe" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Trojan-gen {Other}" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\c238971bba36a1db5bcf99c37c582e22.exe" file.  
2009-2-11 15:13:32 Administrator 2256 Sign of "Win32:Agent-ADVJ [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\新建文件夹\MCLS\MCLS\ddb6cbfa0cf80f68509f6b5ddf33c0ff.exe\[Upack]\[Embedded_I#17e0]" file.

ledled

to VB

vmzy

小红伞，启发16个，其余上报。
MCLS.zip
    [0] Archive type: ZIP
    --> MCLS/02647a779f3a42b9489b6fe22ede7bd2.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> MCLS/175b21ed19a962c66215d82b5143b97d.exe
          [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
      --> MCLS/3417eeec89020888916b742e103051e2.exe
          [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    --> MCLS/512e49f10b523112cae67dac826bfc7d.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> MCLS/55d716fc8c3f77808f4b47a6db6f9551.sys
      [DETECTION] Is the TR/Rootkit.Gen Trojan
    --> MCLS/5b778406e9da47cffa60a5ae407032df.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> MCLS/759fa174ed7e583aa3cc3de254e55a7c.exe
          [DETECTION] Is the TR/Dropper.Gen Trojan
    --> MCLS/7fd3300ff27314588b769adc2d830c52.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> MCLS/ad0c3f17a9805ff83d71131bd0c6a5b8.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> MCLS/c238971bba36a1db5bcf99c37c582e22.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    --> MCLS/e1ede71c074448a0d0353a432733178b.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
    [WARNING]   The file was ignored!


End of the scan: 2009年2月11日  15:14
Used time: 00:09 Minute(s)

The scan has been done completely.

      0 Scanning directories
     27 Files were scanned
     16 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     11 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

黑衣~魂

DR.WEB 殺11
175b21ed19a962c66215d82b5143b97d.exe - probably infected with DLOADER.Trojan
3417eeec89020888916b742e103051e2.exe - probably infected with DLOADER.Trojan
512e49f10b523112cae67dac826bfc7d.exe - infected with Trojan.PWS.Wsgame.10308
55c58f4b5220b8560b853c6a410b091b.sys - infected with Trojan.NtRootKit.2664
55d716fc8c3f77808f4b47a6db6f9551.sys - infected with Trojan.NtRootKit.2622
5b778406e9da47cffa60a5ae407032df.exe - infected with Trojan.PWS.Gamania.origin
9d597f23c397964d5f0fd6190818961a.dll - infected with Trojan.DownLoad.28004
ad0c3f17a9805ff83d71131bd0c6a5b8.exe - infected with Trojan.MulDrop.30228
b1817e8062b22ba9d2d32876444f96fc.dll - infected with Trojan.MulDrop.29802
c238971bba36a1db5bcf99c37c582e22.exe\data001 - infected with Trojan.PWS.Wsgame.10226
\e7ff57158aeec2a8a1a7e54b9d427ba7.dll - infected with Trojan.Siggen.2051

TO-DW

gomu887

费尔 17个
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\02647a779f3a42b9489b6fe22ede7bd2.exe        Trojan.Cap921018.ncpp        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\08c75f12ed1fb6811fd4916d25f2279c.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\175b21ed19a962c66215d82b5143b97d.exe        Trojan.Cap92110.yopl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\3417eeec89020888916b742e103051e2.exe        Trojan.Cap92110.yopl        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\512e49f10b523112cae67dac826bfc7d.exe        TrojanPSW.GameOL.uny.slch        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\55c58f4b5220b8560b853c6a410b091b.sys        Rootkit.Agent.gvg.fqfo        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\582abb99a75418a4608a2a23f09217a9.dll        TrojanDownloader.Mnless.ceg.kovt.dll        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\5b778406e9da47cffa60a5ae407032df.exe        TrojanDownloader.Nurech.bd.bmqk        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\5e622eda6b3a65d1f4a983a013799f6d.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\6a3221f30e01d96932a2700503543885.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\759fa174ed7e583aa3cc3de254e55a7c.exe        Trojan.Cap92110.yjzz        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\7b2504ea250d9839bca4952279576f51.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\7fd3300ff27314588b769adc2d830c52.exe        Trojan.Cap92110.gbbu        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\ad0c3f17a9805ff83d71131bd0c6a5b8.exe        Trojan.Inject.nry.cmfv        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\c238971bba36a1db5bcf99c37c582e22.exe        Trojan.Cap91110.fzmm        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\ddb6cbfa0cf80f68509f6b5ddf33c0ff.exe        Trojan.OnLineGames.gen.a        木马        还未处理
C:\Documents and Settings\Administrator\桌面\MCLS.zip>>MCLS\e1ede71c074448a0d0353a432733178b.exe        Trojan.Cap921021.hzgs        木马        还未处理

kkgh

瑞星16个

kingmuro

FLogo

kaba miss 15x (and heur)

to kaba kill,waiting for reply。。。


Hello,

0818961a.dll

No malicious code was found in this file.

0cf04517.sys - Rootkit.Win32.Small.ty,
2733178b.exe_ - Trojan-GameThief.Win32.OnLineGames.bkty,
2d830c52.exe_ - Trojan-GameThief.Win32.OnLineGames.bktx,
2ede7bd2.exe_ - Trojan-GameThief.Win32.OnLineGames.uqne,
410b091b.sys - Rootkit.Win32.Agent.hdj,
81c2f823.sys - Rootkit.Win32.Small.tx,
f09217a9.dll - Trojan.Win32.Agent.bput

These files are already detected. Please update your antivirus bases.

103051e2.exe_, 5143b97d.exe_ - Trojan-Downloader.Win32.Agent.bhez,
54e55a7c.exe_ - Trojan.Win32.Small.bub,
9a8b93b3.sys - Rootkit.Win32.Small.tz,
9d427ba7.dll - Trojan.Win32.KillAV.bor,
da16ade0.sys - Rootkit.Win32.Small.ub,
fb699b6a.sys - Rootkit.Win32.Small.ua

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

[ 本帖最后由 FLogo 于 2009-2-12 05:56 编辑 ]

电影结束了

"Scan ""Shell extension scan"" was finished."
"Infections";"21";"21";"0"
"Information";"2"
"Folders selected for scanning:";"E:\收集区\MCLS\MCLS\02647a779f3a42b9489b6fe22ede7bd2.exe;E:\收集区\MCLS\MCLS\08c75f12ed1fb6811fd4916d25f2279c.exe;E:\收集区\MCLS\MCLS\1385864d28fc08f56bf80eb481c2f823.sys;E:\收集区\MCLS\MCLS\175b21ed19a962c66215d82b5143b97d.exe;E:\收集区\MCLS\MCLS\3417eeec89020888916b742e103051e2.exe;E:\收集区\MCLS\MCLS\512e49f10b523112cae67dac826bfc7d.exe;E:\收集区\MCLS\MCLS\55c58f4b5220b8560b853c6a410b091b.sys;E:\收集区\MCLS\MCLS\55d716fc8c3f77808f4b47a6db6f9551.sys;E:\收集区\MCLS\MCLS\582abb99a75418a4608a2a23f09217a9.dll;E:\收集区\MCLS\MCLS\5b77840"
"Scan started:";"2009年2月11日, 16:41:26"
"Scan finished:";"2009年2月11日, 16:41:37 (11 second(s))"
"Total object scanned:";"26"
"User who launched the scan:";"Administrator"

"Infections"
"File";"Infection";"Result"
"E:\收集区\MCLS\MCLS\02647a779f3a42b9489b6fe22ede7bd2.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\08c75f12ed1fb6811fd4916d25f2279c.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\1385864d28fc08f56bf80eb481c2f823.sys";"Trojan horse Agent_r.GJ";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\175b21ed19a962c66215d82b5143b97d.exe";"Trojan horse Agent_r.IL.dropper";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\3417eeec89020888916b742e103051e2.exe";"Trojan horse Agent_r.IL.dropper";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\512e49f10b523112cae67dac826bfc7d.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\55c58f4b5220b8560b853c6a410b091b.sys";"Trojan horse Agent_r.IL";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\55d716fc8c3f77808f4b47a6db6f9551.sys";"Trojan horse Agent_r.GI";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\5e622eda6b3a65d1f4a983a013799f6d.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\6a3221f30e01d96932a2700503543885.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\7b2504ea250d9839bca4952279576f51.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\7fd3300ff27314588b769adc2d830c52.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\85023202fc7c2a99395a00710cf04517.sys";"Trojan horse Agent_r.GJ";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\aa1e0d9123b55095025ddd219a8b93b3.sys";"Trojan horse Agent_r.GJ";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\ad0c3f17a9805ff83d71131bd0c6a5b8.exe";"Trojan horse PSW.OnlineGames.BNRQ.dropper";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\b1817e8062b22ba9d2d32876444f96fc.dll";"Trojan horse Dropper.Generic_c.ANE";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\c238971bba36a1db5bcf99c37c582e22.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\ddb6cbfa0cf80f68509f6b5ddf33c0ff.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\e1ede71c074448a0d0353a432733178b.exe";"Virus found Win32/Heur";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\e244f0c2d714b30de8df7b66da16ade0.sys";"Trojan horse Agent_r.GJ";"Moved to Virus Vault"
"E:\收集区\MCLS\MCLS\f9f3ef6135f34dd87c77334ffb699b6a.sys";"Trojan horse Agent_r.GJ";"Moved to Virus Vault"

"Information"
"File";"Infection";"Result"
"E:\收集区\MCLS\MCLS\5b778406e9da47cffa60a5ae407032df.exe";"Runtime packed upack";""
"E:\收集区\MCLS\MCLS\759fa174ed7e583aa3cc3de254e55a7c.exe";"Runtime packed fsg";""