50x （由一个病毒样本加花演变生成？）

幸福的猪猪

由一个病毒下载地址，启发出另外49个下载地址。。。（不知为嘛，明明50个文件，小红伞却杀出100个来。数量翻了一倍多）

随机抽取几个上传到在线杀毒引擎查看comodo的查杀结果，结果是不能被识别。50个打包上报comodo。给予查杀！



Start of the scan: 2009年8月9日  15:45
Starting the file scan:
Begin scan in 'C:\TDDownload'
C:\TDDownload\50\2285c1af4e9ea41cacd94e10c19be9f7
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\46b0844c4bdd91c9eeb6cb0ddc51b1ef
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\8d3e734e7b72e31fe3713600f0a53fad.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\c6f9857f2f26742feefd2b6d96139cea
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\ee577b39732b49bc3c9ccb9f69124730
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x10.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x11.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x13.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x14.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x15.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x16.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x17.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x18.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x19.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x20.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x21.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x22.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x23.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x24.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x26.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x27.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x28.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x29.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x3.exe
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x30.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x31.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x32.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x33.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x34.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x35.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x36.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x37.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x38.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x39.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x4.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x41.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x42.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x43.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x44.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x45.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x46.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x47.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x48.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x49.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x5.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x50.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x6.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x7.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x8.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!
C:\TDDownload\50\x9.css
    --> Object
      [1] Archive type: RSRC
      --> Object
        [DETECTION] Contains recognition pattern of the RKIT/Agent.AIWN.20 root kit
    [DETECTION] Is the TR/Hijacker.Gen Trojan
    [NOTE]      The file was deleted!

End of the scan: 2009年8月9日  15:45
Used time: 00:27 Minute(s)
The scan has been done completely.
      2 Scanned directories
     50 Files were scanned
    100 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
     50 files were deleted
      0 Viruses and unwanted programs were repaired
      0 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
    -50 Files not concerned
      0 Archives were scanned
      0 Warnings
     50 Notes

[ 本帖最后由 幸福的猪猪 于 2009-8-9 16:12 编辑 ]

hddu

费尔全杀

托尼托尼·乔巴

很好


PS：你又比我快

悠柚

IObit 干掉了一个，引擎问题

wwezsqzr

咖啡全杀

z2665

avast全杀
本来50个扫出来150个

失落的手链

瑞星2010

样本质量太差 mcafee竟然全部报的一个名字。

江湖的fans

金山极速版  0

hansyu

NIS2009
kill all
Hacktool.Rootkit