21x?

KOI9009

Begin scan in 'D:\下载\1'
D:\下载\1\0891.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 208.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    --> small.exe
      --> Object
        [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
    --> lojk.exe
      [DETECTION] Is the TR/Drop.Agent.PAL Trojan
D:\下载\1\1.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 1.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> [TempDir]/olpddk.exe
        [2] Archive type: RAR SFX (self extracting)
        --> win2.exe
          [DETECTION] Contains recognition pattern of the DR/Agent.UX dropper
D:\下载\1\1027345.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 208.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
D:\下载\1\17.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 25.exe
      --> Object
        [DETECTION] Is the TR/Drop.Agen.aabb.2 Trojan
D:\下载\1\208.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 208.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
D:\下载\1\5.exe
    [DETECTION] Contains recognition pattern of the DR/BHO.irn.1 dropper
    --> ProgramFilesDir/31.exe
      [DETECTION] Is the TR/Spy.Gen Trojan
D:\下载\1\8858.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 208.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    --> small.exe
      --> Object
        [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
    --> lojk.exe
      [DETECTION] Is the TR/Drop.Agent.PAL Trojan
D:\下载\1\9009.exe
  [0] Archive type: RAR SFX (self extracting)
    --> zzp8.exe
      [1] Archive type: RAR SFX (self extracting)
      --> sd04.exe
        [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
      --> new90.exe
        [DETECTION] Is the TR/Drop.Agent.PAL Trojan
    --> new90.exe
      [DETECTION] Is the TR/Drop.Agent.PAL Trojan
D:\下载\1\cachev.exe
  [0] Archive type: NSIS
    [DETECTION] Is the TR/Dropper.Gen Trojan
    --> [TempDir]/svchst.exe
      [1] Archive type: RAR SFX (self extracting)
      --> win20.exe
        [DETECTION] Contains recognition pattern of the DR/Agent.VF.2 dropper
        --> win20.exe
          [DETECTION] Contains recognition pattern of the DR/Agent.VJ dropper
      --> win21.exe
        [DETECTION] Contains recognition pattern of the DR/Agent.VF.1 dropper
        --> win21.exe
          [DETECTION] Contains recognition pattern of the DR/Agent.VK dropper
D:\下载\1\fei.exe
  [0] Archive type: NSIS
    [DETECTION] Is the TR/Dropper.Gen Trojan
    --> [TempDir]/fei fei.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> win.exe
        [DETECTION] Is the TR/Dropper.Gen Trojan
D:\下载\1\lojk.exe
  [0] Archive type: RAR SFX (self extracting)
    --> sd04.exe
      [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
    --> new90.exe
      [DETECTION] Is the TR/Drop.Agent.PAL Trojan
D:\下载\1\setup1046.exe
    [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
D:\下载\1\small.exe
    --> Object
      [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
D:\下载\1\zzp.exe
    [DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper

Beginning disinfection:
D:\下载\1\0891.exe
    [WARNING]   The file was ignored!
D:\下载\1\1.exe
    [WARNING]   The file was ignored!
D:\下载\1\1027345.exe
    [WARNING]   The file was ignored!
D:\下载\1\17.exe
    [WARNING]   The file was ignored!
D:\下载\1\208.exe
    [WARNING]   The file was ignored!
D:\下载\1\5.exe
    [DETECTION] Contains recognition pattern of the DR/BHO.irn.1 dropper
    [WARNING]   The file was ignored!
D:\下载\1\8858.exe
    [WARNING]   The file was ignored!
D:\下载\1\9009.exe
    [WARNING]   The file was ignored!
D:\下载\1\cachev.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [WARNING]   The file was ignored!
D:\下载\1\fei.exe
    [DETECTION] Is the TR/Dropper.Gen Trojan
    [WARNING]   The file was ignored!
D:\下载\1\lojk.exe
    [WARNING]   The file was ignored!
D:\下载\1\setup1046.exe
    [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    [WARNING]   The file was ignored!
D:\下载\1\small.exe
    [WARNING]   The file was ignored!
D:\下载\1\zzp.exe
    [DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
    [WARNING]   The file was ignored!

KOI9009

[0] Archive type: RAR SFX (self extracting)
    --> 1027345.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    --> feifei.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> [TempDir]/fei fei.exe
        [DETECTION] Is the TR/Dropper.Gen Trojan
        --> win.exe
          [DETECTION] Is the TR/Dropper.Gen Trojan
    --> small.exe
      --> Object
        [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
    --> zzp.exe
      [DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
    --> 9009.exe
      [1] Archive type: RAR SFX (self extracting)
      --> zzp8.exe
        [2] Archive type: RAR SFX (self extracting)
        --> sd04.exe
          [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
        --> new90.exe
          [DETECTION] Is the TR/Drop.Agent.PAL Trojan
      --> new90.exe
        [DETECTION] Is the TR/Drop.Agent.PAL Trojan
    --> 5.exe
      [DETECTION] Contains recognition pattern of the DR/BHO.irn.1 dropper
      --> ProgramFilesDir/31.exe
        [DETECTION] Is the TR/Spy.Gen Trojan
D:\下载\2\8888.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 1027345.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    --> feifei.exe
      [DETECTION] Is the TR/Dropper.Gen Trojan
      --> [TempDir]/fei fei.exe
        [DETECTION] Is the TR/Dropper.Gen Trojan
        --> win.exe
          [DETECTION] Is the TR/Dropper.Gen Trojan
    --> small.exe
      --> Object
        [DETECTION] Is the TR/Drop.Agent.NAE.1 Trojan
    --> zzp.exe
      [DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
    --> 9009.exe
      [1] Archive type: RAR SFX (self extracting)
      --> zzp8.exe
        [2] Archive type: RAR SFX (self extracting)
        --> sd04.exe
          [DETECTION] Is the TR/Crypt.XPACK.Gen Trojan
        --> new90.exe
          [DETECTION] Is the TR/Drop.Agent.PAL Trojan
      --> new90.exe
        [DETECTION] Is the TR/Drop.Agent.PAL Trojan
    --> 5.exe
      [DETECTION] Contains recognition pattern of the DR/BHO.irn.1 dropper
      --> ProgramFilesDir/31.exe
        [DETECTION] Is the TR/Spy.Gen Trojan
D:\下载\2\feifei.exe
  [0] Archive type: RAR SFX (self extracting)
    --> 9009.exe
      [1] Archive type: RAR SFX (self extracting)
      --> zzp8.exe
        [DETECTION] Contains recognition pattern of the DR/MicroJoiner.Gen dropper
      --> new90.exe
        [DETECTION] Is the TR/Drop.Agent.PAL Trojan
    --> setup1046.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan
    --> 17.exe
      [DETECTION] Is the TR/Crypt.ZPACK.Gen Trojan

Beginning disinfection:
D:\下载\2\2830891.exe
    [WARNING]   The file was ignored!
D:\下载\2\8888.exe
    [WARNING]   The file was ignored!
D:\下载\2\feifei.exe
    [WARNING]   The file was ignored!

sam.to

Filename         Result          8858.exe          MALWARE

The file '8858.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Selvice.DF. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          1.exe          MALWARE

The file '1.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Small.N. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          208.exe          MALWARE

The file '208.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Selvice.DF.1. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          17.exe          MALWARE

The file '17.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Fiegi.BB. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          8888.exe          MALWARE

The file '8888.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Selvice.DF.2. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          3.vbs          CLEAN

The file '3.vbs' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
Filename         Result          33.vbs          CLEAN

The file '33.vbs' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
Filename         Result          333.vbs          CLEAN

The file '333.vbs' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
Filename         Result          5.exe          MALWARE

The file '5.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/BHO.irn.1. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.40.
Filename         Result          9009.exe          MALWARE

The file '9009.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Delf.evn. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          cachev.exe          MALWARE

The file 'cachev.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dropper.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename         Result          fei.exe          MALWARE

The file 'fei.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Dropper.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename         Result          feifei.exe          MALWARE

The file 'feifei.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Bifrose.bpfk. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          lojk.exe          MALWARE

The file 'lojk.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/Dldr.Delf.evn.1. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.01.06.41.
Filename         Result          setup1046.exe          MALWARE

The file 'setup1046.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Crypt.ZPACK.Gen. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.This malware is detected by a special detection routine from the engine module.
Filename         Result          small.exe          MALWARE

The file 'small.exe' has been determined to be 'MALWARE'. Our analysts named the threat TR/Drop.Agent.NAE.1. The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.00.02.210. Please note that Avira's proactive heuristic detection module AHeAD detected this threat up front without the latest VDF update as: TR/Downloader.Gen2.
Filename         Result          winxp.vbs          CLEAN

The file 'winxp.vbs' has been determined to be 'CLEAN'. Our analysts did not discover any malicious content.
Filename         Result          zzp.exe          MALWARE

The file 'zzp.exe' has been determined to be 'MALWARE'. Our analysts named the threat DR/MicroJoiner.Gen. The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.This malware is detected by a special detection routine from the engine module.

[ 本帖最后由 sam.to 于 2009-9-28 21:18 编辑 ]