11x （剔除没有恶意代码，重新打包上传）

幸福的猪猪

9x，都是从同一个域名的恶意软件的下载地址，下载得来。

另外2x，分别来自不同挂马网页上面的。

kaba miss，to kill。

Hello,

1.exef - Trojan-Downloader.Win32.Geral.amp,

10.exef - Trojan-Downloader.Win32.Geral.amq,

2.exef - Trojan-Downloader.Win32.Geral.amr,

3.exef - Trojan-Downloader.Win32.Geral.amt,

33.exef - Trojan-Downloader.Win32.Tiny.cev,

4.exef - Trojan-Downloader.Win32.Geral.amu,

6.exef - Trojan-Downloader.Win32.Geral.anc,

7.exef - Trojan-Downloader.Win32.Geral.and,

8.exef - Trojan-Downloader.Win32.Geral.ane,

9.exef - Trojan-Downloader.Win32.Geral.ani,

a.css - Worm.Win32.AutoRun.arib

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.




avira kill all。

[ 本帖最后由 幸福的猪猪 于 2009-7-8 10:51 编辑 ]

biwoniuman

微点扫描测试版发现11个病毒

biwoniuman

解压病毒包以后微点主动防御软件拦截和干掉了几十个病毒

xiaohai95

11 To Sophos

kingmuro

[:1:]

kingmuro

kalynn84

2009-7-8 9:29:18        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\1.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\10.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\2.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\3.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Tiny-ACY [Trj]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\33.exe" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\4.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\6.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\7.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\8.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\9.exe\[UPX]\[Embedded_Ia#0e6d0]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Perkesh [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\a.css\[UPX]\[Embedded_Ix#6a00]" file.  
2009-7-8 9:29:21        Ivan        3472        Sign of "Win32:Rootkit-gen [Rtk]" has been found in "C:\Documents and Settings\Administrator\桌面\TDDownload.zip\TDDownload\ok.exe\[Embedded_Ix#0bb60]" file.

521HDL

F-Secure发现0个！

mofunzone

IKARUS - T3SCAN V1.32.10.0 (WIN32)
         T3 V1.01.64
         Copyright (c) 2006 - 2009 by Ikarus Software.
         All rights reserved.

Signature-database from 8.7.2009 00:01:30 (Build: 72996)

C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\1.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\10.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\2.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\3.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\33.exe - Signature 'Trojan-Downloader.Win32.Small' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\4.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\6.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\7.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\8.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\9.exe - Signature 'Trojan-Dropper.Win32.Dogrobot' found
C:\Users\Administrator\Desktop\TDDownload.zip:TDDownload\a.css - Signature 'Packed.Win32.Klone' found
C:\Users\Administrator\Desktop\TDDownload.zip - Signature 'Trojan-Dropper.Win32.Dogrobot' found

        12 Files scanned
          (1 Archiv with 12 files)
        12 Signatures found
        0 Suspect code-parts found
        Used time: 0:00.078

kkgh

瑞星4个