绅博09.4.5---4.11日样本江民（20090413）扫描后剩下的

lmsa613

绅博09.4.5---4.11日样本江民20090413扫描后剩下的

HC303

余下9个,上报
Begin scan in 'G:\virus\09.4.5---4.11日样本'
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (100).exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (113).exe
    [DETECTION] Is the TR/PCK.Katusha.B.39 Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (129).exe
    --> Object
      [DETECTION] Is the TR/StartPage.aaw Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (154).eml
  [0] Archive type: MIME
    --> file0.html
      [DETECTION] Contains recognition pattern of the EXP/Iframe.B exploit
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (19).exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (2).exe
    [DETECTION] Is the TR/Agent.35886 Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (37).exe
    [DETECTION] Is the TR/PCK.Katusha.B.67 Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (4).exe
    [DETECTION] Contains recognition pattern of the APPL/Tool.TPE.E application
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (40).exe
    [DETECTION] Is the TR/Drop.Agent.weg Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (5).exe
  [0] Archive type: RSRC
    [DETECTION] Is the TR/Spy.Gen Trojan
    --> Object
      --> Object
        [2] Archive type: RSRC
        --> Object
          [DETECTION] Is the TR/Agent2.hgr Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (51).exe
    [DETECTION] Is the TR/PCK.Katusha.B.27 Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (58).exe
    [DETECTION] Is the TR/Drop.Agent.bwd Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (60).exe
    [DETECTION] Is the TR/Agent.FRQ Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (67).exe
    [DETECTION] Is the TR/Clicker.Agen.DSE Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (80).exe
    [DETECTION] Is the TR/Dldr.CodecPack.fiw Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (83).exe
    [DETECTION] Contains recognition pattern of the SPR/Tool.Obfuscator.ER.10 program
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (87).exe
    [DETECTION] Is the TR/Dldr.FakeAV.AV Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (92).exe
    [DETECTION] Is the TR/Dldr.FraudLo.ehh Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (96).exe
    [DETECTION] Is the TR/Agent.RRR.1 Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (98).exe
    [DETECTION] Is the TR/Fake.Antivirus.2010.R Trojan
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (99).exe
    [DETECTION] Is the TR/Dldr.FakeAl.JL.2 Trojan

Beginning disinfection:
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (100).exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (113).exe
    [DETECTION] Is the TR/PCK.Katusha.B.39 Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (129).exe
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (154).eml
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (19).exe
    [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (2).exe
    [DETECTION] Is the TR/Agent.35886 Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (37).exe
    [DETECTION] Is the TR/PCK.Katusha.B.67 Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (4).exe
    [DETECTION] Contains recognition pattern of the APPL/Tool.TPE.E application
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (40).exe
    [DETECTION] Is the TR/Drop.Agent.weg Trojan
    [NOTE]      TR/Drop.Agent.weg: Script-Error (9)
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (5).exe
    [DETECTION] Is the TR/Spy.Gen Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (51).exe
    [DETECTION] Is the TR/PCK.Katusha.B.27 Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (58).exe
    [DETECTION] Is the TR/Drop.Agent.bwd Trojan
    [NOTE]      TR/Drop.Agent.bwd: Script-Error (9)
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (60).exe
    [DETECTION] Is the TR/Agent.FRQ Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (67).exe
    [DETECTION] Is the TR/Clicker.Agen.DSE Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (80).exe
    [DETECTION] Is the TR/Dldr.CodecPack.fiw Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (83).exe
    [DETECTION] Contains recognition pattern of the SPR/Tool.Obfuscator.ER.10 program
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (87).exe
    [DETECTION] Is the TR/Dldr.FakeAV.AV Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (92).exe
    [DETECTION] Is the TR/Dldr.FraudLo.ehh Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (96).exe
    [DETECTION] Is the TR/Agent.RRR.1 Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (98).exe
    [DETECTION] Is the TR/Fake.Antivirus.2010.R Trojan
    [NOTE]      The file was deleted!
G:\virus\09.4.5---4.11日样本\09.4.5---4.11日样本\样本 (99).exe
    [DETECTION] Is the TR/Dldr.FakeAl.JL.2 Trojan
    [NOTE]      The file was deleted!


End of the scan: 2009年4月13日  15:42
Used time: 00:03 Minute(s)

The scan has been done completely.

      2 Scanned directories
     34 Files were scanned
     22 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     21 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
     12 Files not concerned
      2 Archives were scanned
      0 Warnings
     21 Notes

HC303

25317940  ####  288 KB  CLEAN
205682  #### (1).exe  12.12 KB  CLEAN
25317941  #### (130).exe  96 KB  CLEAN
25317942  #### (131).dat  12 Byte  CLEAN
25317943  #### (150).dat  100 Byte  CLEAN
25317944  #### (157).dll  42.5 KB  CLEAN
25320484  #### (158).exe  869.5 KB  UNDER ANALYSIS
25320485  #### (159).EXE  91 KB  UNDER ANALYSIS
25316218  #### (160).JPG  91.17 KB  CLEAN

ledled

VB Kill 15