5月7日杂包第二季！

pyic

详见附件，目前为止过30%的杀软！


对不起，打错了应该是30%，不是70%，已纠正。

[ 本帖最后由 pyic 于 2009-5-7 16:15 编辑 ]

Sebastian

Starting the file scan:

Begin scan in 'D:\kafan\activcx(1).exe'
D:\kafan\activcx(1).exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a7698c6.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\activcx(2).exe'
D:\kafan\activcx(2).exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4b00edf7.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\activcx.exe'
D:\kafan\activcx.exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a7698c8.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\b.exe'
D:\kafan\b.exe
    [DETECTION] Is the TR/Crypt.XDR.Gen Trojan
    [NOTE]      A backup was created as '4a679891.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\cx(1).exe'
D:\kafan\cx(1).exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a2a98db.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\cx(2).exe'
D:\kafan\cx(2).exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a2a98dc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\cx.exe'
D:\kafan\cx.exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a3098dc.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\windoss.exe'
D:\kafan\windoss.exe
    --> Object
      [DETECTION] Is the TR/Killav.PN Trojan
    [NOTE]      A backup was created as '4a7098cd.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年5月7日  16:14
Used time: 00:01 Minute(s)

The scan has been done completely.

      0 Scanned directories
      8 Files were scanned
      8 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      8 files were deleted
      0 Viruses and unwanted programs were repaired
      8 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      0 Files not concerned
      0 Archives were scanned
      0 Warnings
      8 Notes

einnawy

费尔 kill 7

328397663

原帖由 pyic 于 2009-5-7 16:09 发表
详见附件，目前为止过30%的杀软！


对不起，打错了应该是30%，不是70%，已纠正。

全都是在论坛收集的.

Scanned file:   zabao.rar - Infected zabao.rar/cx(1).exe - infected by Trojan-Downloader.Win32.Geral.jl zabao.rar/cx(2).exe - infected by Trojan-Downloader.Win32.Geral.jl zabao.rar/cx.exe - infected by Trojan-Downloader.Win32.Geral.jl zabao.rar/windoss.exe - infected by Trojan-Downloader.Win32.Geral.jj zabao.rar/activcx(1).exe - infected by Trojan-Downloader.Win32.Geral.jo zabao.rar/activcx(2).exe - infected by Trojan-Downloader.Win32.Geral.jo zabao.rar/activcx.exe - infected by Trojan-Downloader.Win32.Geral.jo zabao.rar/b.exe - infected by Worm.Win32.AutoRun.ahlx Statistics: Known viruses: 2141994 Updated: 07-05-2009 File size (Kb): 298 Virus bodies: 8 Files: 8 Warnings: 0 Archives: 1 Suspicious: 0

kingmuro

2009-05-07 16:53:38        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\cx(1).exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:41        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\cx(2).exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:43        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\cx.exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:47        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\windoss.exe\[UPX]\[Embedded_Ra#04110]\[Embedded_Ia#dda0]" file.  
2009-05-07 16:53:51        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\activcx(1).exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:53        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\activcx(2).exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:54        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\activcx.exe\[UPX]\[Embedded_Ra#14110]" file.  
2009-05-07 16:53:56        gxf        2240        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\gxf\桌面\zabao\b.exe\[UPX]\[Embedded_I#5e00]" file.

Sebastian

1:http://exe316.com/xiao/aa1.exe
1:http://exe316.com/xiao/aa2.exe
1:http://exe316.com/xiao/aa3.exe
1:http://exe316.com/xiao/aa4.exe
1:http://exe316.com/xiao/aa5.exe
1:http://exe316.com/xiao/aa6.exe
1:http://exe316.com/xiao/aa7.exe
1:http://exe316.com/xiao/aa8.exe
1:http://exe316.com/xiao/aa9.exe
1:http://exe316.com/xiao/aa10.exe
1:http://exe316.com/xiao/aa11.exe
1:http://exe316.com/xiao/aa12.exe
1:http://exe316.com/xiao/aa13.exe
1:http://exe316.com/xiao/aa14.exe
1:http://exe316.com/xiao/aa15.exe
1:http://exe316.com/xiao/aa16.exe
1:http://exe316.com/xiao/aa17.exe
1:http://exe316.com/xiao/aa18.exe
1:http://exe316.com/xiao/aa19.exe
1:http://exe316.com/xiao/aa20.exe
1:http://exe316.com/xiao/aa21.exe
1:http://exe316.com/xiao/aa22.exe
1:http://exe316.com/xiao/aa23.exe
1:http://exe316.com/xiao/aa24.exe
1:http://exe316.com/xiao/aa25.exe
1:http://exe316.com/xiao/aa26.exe
1:http://exe316.com/xiao/aa27.exe
1:http://exe316.com/xiao/aa29.exe
1:http://exe316.com/xiao/aa30.exe
1:http://exe316.com/xiao/aa31.exe
1:http://exe316.com/xiao/111.exe
1:http://exe316.com/xiao/aa33.exe
1:http://exe316.com/xiao/xiao7.exe
1:http://exe316.com/xiao/9001.exe

kkgh

费尔  Trojan.Wruyen.vvyl   x7

linkak

07:05:2009 17:08:18 SEARCHTASK "USER_DEFINED" started...
scan item: D:\virus\zabao
File scanned: D:\virus\zabao\activcx(1).exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\activcx(2).exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\activcx.exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\b.exe - SIGNATURE FOUND "Packed.Win32.Klone.af"
File scanned: D:\virus\zabao\cx(1).exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\cx(2).exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\cx.exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
File scanned: D:\virus\zabao\windoss.exe - SIGNATURE FOUND "Trojan.Win32.AntiAV"
07:05:2009 17:08:19 SEARCHTASK "USER_DEFINED" FINISHED...
----------------------------------------------------
Directories scanned: 1
Files scanned: 8
Virus found: 8
----------------------------------------------------

328397663

原帖由 Sebastian 于 2009-5-7 16:57 发表
1:http://exe316.com/xiao/aa1.exe
1:http://exe316.com/xiao/aa2.exe
1:http://exe316.com/xiao/aa3.exe
1:http://exe316.com/xiao/aa4.exe
1:http://exe316.com/xiao/aa5.exe
1:http://exe316.com/xiao/aa6.e ...

Hello,

URLs were added to the blacklist.

Thanks!

[ 本帖最后由 328397663 于 2009-5-7 17:55 编辑 ]

Sebastian

http://c.wuc9.com/dd/33.exe
http://c.wuc9.com/dd/4.exe
http://c.wuc9.com/dd/6.exe
http://c.wuc9.com/dd/99.exe
http://c.wuc9.com/dd/10.exe
http://c.wuc9.com/s.css
hxxp://c.wuc9.com/dd/d.gif
hxxp://www.gz-naxin.cn/images/av.jpg
hxxp://c.wuc9.com/cd.jpg

[ 本帖最后由 Sebastian 于 2009-5-7 17:40 编辑 ]