碰上肉鸡鸟，49个样本

mofunzone

The scan has been done completely.

      0 Scanning directories
     49 Files were scanned
     41 viruses and/or unwanted programs were found
     40 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      8 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
实际下载下来有200多个，我把里面杂七杂八的什么脚本网页等等都删了，只测试exe文件

The EQs

Scan performed at: 2007-4-2 11:33:52
Scanning Log
NOD32 version 2161 (20070401) NT
Command line: C:\Documents and Settings\EQ2\桌面\49
Operating memory - is OK

Date: 2.4.2007  Time: 11:33:56
Anti-Stealth technology is enabled.
Scanned disks, folders and files: C:\Documents and Settings\EQ2\桌面\49\
C:\Documents and Settings\EQ2\桌面\49\1cxxxx.exe - a variant of Win32/TrojanDownloader.Delf.NQX trojan
C:\Documents and Settings\EQ2\桌面\49\515.exe - a variant of Win32/TrojanDropper.Small.APR trojan
C:\Documents and Settings\EQ2\桌面\49\519.exe - a variant of Win32/TrojanDropper.Small.APR trojan
C:\Documents and Settings\EQ2\桌面\49\525.exe - Win32/TrojanDropper.Small.APR trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\55.exe - Win32/TrojanDropper.Microjoin.C trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\613.exe - Win32/TrojanDropper.Small.APR trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\81.exe - a variant of Win32/TrojanDropper.Small.APR trojan
C:\Documents and Settings\EQ2\桌面\49\a.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\a1-18.exe - a variant of Win32/PSW.Legendmir.AQS trojan
C:\Documents and Settings\EQ2\桌面\49\a3-10.exe - Win32/PSW.Legendmir.ASN trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\a3-30.exe - Win32/PSW.Legendmir.AVD trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\a55.exe - Win32/PSW.Legendmir.AVD trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\aa.exe - Win32/TrojanDownloader.Agent.UE trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\aaaa.exe - a variant of Win32/PSW.Legendmir.AQS trojan
C:\Documents and Settings\EQ2\桌面\49\b-3-25.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b1.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b2.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b3-20.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b3-28.exe - Win32/PSW.Legendmir.ATC trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\b3-30.exe - a variant of Win32/PSW.Legendmir.AVG trojan
C:\Documents and Settings\EQ2\桌面\49\b3-5.exe - Win32/PSW.Legendmir.ARS trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\bbak.exe - a variant of Win32/PSW.Legendmir.ATE trojan
C:\Documents and Settings\EQ2\桌面\49\c.exe - a variant of Win32/TrojanDownloader.Agent.PD trojan
C:\Documents and Settings\EQ2\桌面\49\cc.exe - a variant of Win32/PSW.Legendmir.ATE trojan
C:\Documents and Settings\EQ2\桌面\49\ccc.exe - Win32/TrojanDropper.Microjoin.C trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\cool1.exe - Win32/TrojanDownloader.Agent.UE trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\css1.exe - Win32/TrojanDropper.Microjoin.C trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\csss.exe - a variant of Win32/Delf.AG worm
C:\Documents and Settings\EQ2\桌面\49\ss.exe - Win32/PcClient.OQ trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\xiao.exe - Win32/TrojanDownloader.Agent.UE trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\xxxx.exe - a variant of Win32/TrojanDownloader.Delf.NQX trojan
C:\Documents and Settings\EQ2\桌面\49\xxxxx.exe - a variant of Win32/TrojanDownloader.Delf.NQX trojan
C:\Documents and Settings\EQ2\桌面\49\xxxxx22.exe - Win32/Rootkit.Vanti.E trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\xxxxxxxx.exe - Win32/TrojanDownloader.Agent.UE trojan - quarantined - unable to clean - deleted
C:\Documents and Settings\EQ2\桌面\49\复件 xxxxx.exe - Win32/TrojanDownloader.Agent.UE trojan - quarantined - unable to clean - deleted
Number of scanned files: 49
Number of threats found: 36
Number of files cleaned: 36
Time of completion: 11:34:37 Total scanning time: 41 sec (00:00:41)

The EQs

剩下13个运行看看。。。。

soul20010

FS7.0未解压扫描
Result: 32 malware found
Trojan-Downloader.Win32.Agent.ue (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part1.rar\¸´¼þ xxxxx.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\aa.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\cool1.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\xiao.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\xxxxxxxx.exe
Constructor.Win32.MicroJoiner.17 (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part1.rar\55.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\css1.exe
Packed.Win32.NSAnti.b (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part1.rar\61.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part1.rar\81.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part1.rar\515.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part2.rar\525.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part2.rar\613.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\xxxxx22.exe
Trojan-PSW.Win32.Lmir.ash (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part2.rar\a1-18.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\aaaa.exe
Trojan-PSW.Win32.Lmir.asn (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part2.rar\a3-10.exe
Trojan-PSW.Win32.Lmir.atp (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part2.rar\a3-30.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b3-30.exe
Trojan-PSW.Win32.Lmir.awq (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\a.exe
Trojan-PSW.Win32.Lmir.asc (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b1.exe
Trojan-PSW.Win32.Lmir.atr (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b2.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b.exe
Trojan-PSW.Win32.Lmir.ars (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b3-5.exe
Trojan-PSW.Win32.Lmir.ara (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b3-20.exe
Trojan-PSW.Win32.Lmir.atc (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b3-28.exe
Trojan-PSW.Win32.Lmir.asz (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\b-3-25.exe
Trojan-PSW.Win32.Lmir.ate (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\bbak.exe
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\cc.exe
Trojan-PSW.Win32.QQRob.dk (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part3.rar\c.exe
Trojan-PSW.Win32.Delf.lx (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\csss.exe
DoS.Win32.Synte.a (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\DDOS.EXE
Backdoor.Win32.PcClient.xc (virus)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\ss.exe
Riskware found
NetTool.Win32.VNC.a (riskware)
C:\Documents and Settings\ÉÙÁÖ\×ÀÃæ\49.part4.rar\vnc.exe

pamier2001

对象: 复件 xxxxx.exe
        病毒: Trojan-Downloader.Win32.Agent.ue (KAV 引擎), Trojan.Downloader.Agent.ALO (BD 引擎)
对象: 1cxxxx.exe
        病毒: Generic.Malware.PWBdldPk.95852C42 (BD 引擎)
对象: 55.exe
        病毒: Constructor.Win32.MicroJoiner.17 (KAV 引擎), Trojan.Dropper.Microjoin.J (BD 引擎)
对象: 61.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.B (BD 引擎)
对象: 81.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.A (BD 引擎)
对象: 515.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.B (BD 引擎)
对象: 519.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.B (BD 引擎)
对象: 525.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.B (BD 引擎)
对象: 613.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.B (BD 引擎)
对象: a1-18.exe
        病毒: Trojan-PSW.Win32.Lmir.ash (KAV 引擎), Trojan.Pws.Lmir.ASH (BD 引擎)
对象: a3-10.exe
        病毒: Trojan-PSW.Win32.Lmir.asn (KAV 引擎), Trojan.Pws.Lmir.ASN (BD 引擎)
对象: a3-30.exe
        病毒: Trojan-PSW.Win32.Lmir.atp (KAV 引擎), Trojan.PWS.Lmir.ATR (BD 引擎)
对象: a55.exe
        病毒: Trojan-PSW.Win32.Lmir.atp (KAV 引擎), Trojan.PWS.Lmir.ATR (BD 引擎)
对象: a.exe
        病毒: Trojan-PSW.Win32.Lmir.awq (KAV 引擎), Trojan.PSW.Lmir.AWQ (BD 引擎)
对象: aa.exe
        病毒: Trojan-Downloader.Win32.Agent.ue (KAV 引擎), Generic.Malware.Sdld!g.D02F4FA2 (BD 引擎)
对象: aaaa.exe
        病毒: Trojan-PSW.Win32.Lmir.ash (KAV 引擎), Trojan.Pws.Lmir.ASH (BD 引擎)
对象: b1.exe
        病毒: Trojan-PSW.Win32.Lmir.asc (KAV 引擎), Trojan.Pws.Lmir.ASC (BD 引擎)
对象: b2.exe
        病毒: Trojan-PSW.Win32.Lmir.atr (KAV 引擎), Trojan.PWS.Lmir.ATR (BD 引擎)
对象: b3-5.exe
        病毒: Trojan-PSW.Win32.Lmir.ars (KAV 引擎), Trojan.PWS.Lmir.QE (BD 引擎)
对象: b3-20.exe
        病毒: Trojan-PSW.Win32.Lmir.ara (KAV 引擎), Dropped:Trojan.Pws.Legmir.DLL (BD 引擎)
对象: b3-28.exe
        病毒: Trojan-PSW.Win32.Lmir.atc (KAV 引擎), Dropped:Trojan.Pws.Lmir.ATN (BD 引擎)
对象: b3-30.exe
        病毒: Trojan-PSW.Win32.Lmir.atp (KAV 引擎), Trojan.Pws.Lmir.ATP (BD 引擎)
对象: b-3-25.exe
        病毒: Trojan-PSW.Win32.Lmir.asz (KAV 引擎), Dropped:Trojan.Pws.Lmir.BDR (BD 引擎)
对象: b.exe
        病毒: Trojan-PSW.Win32.Lmir.atr (KAV 引擎), Trojan.PWS.Lmir.ATR (BD 引擎)
对象: bbak.exe
        病毒: Trojan-PSW.Win32.Lmir.ate (KAV 引擎), Generic.Malware.FP!dldPk!g.2441AF7F (BD 引擎)
对象: c.exe
        病毒: Trojan-PSW.Win32.QQRob.dk (KAV 引擎), Generic.Graybird.979CF7E2 (BD 引擎)
对象: cc.exe
        病毒: Trojan-PSW.Win32.Lmir.ate (KAV 引擎), Generic.Malware.FP!Pk!g.CEF7D027 (BD 引擎)
对象: ccc.exe
        病毒: Constructor.Win32.MicroJoiner.17 (KAV 引擎), Trojan.Dropper.Microjoin.J (BD 引擎)
对象: cool1.exe
        病毒: Trojan-Downloader.Win32.Agent.ue (KAV 引擎), GenPack:Trojan.Downloader.Agent.UE (BD 引擎)
对象: css1.exe
        病毒: Constructor.Win32.MicroJoiner.17 (KAV 引擎), Trojan.Dropper.Joiner.AJ (BD 引擎)
对象: csss.exe
        病毒: Trojan-PSW.Win32.Delf.lx (KAV 引擎), Trojan.Downloader.RD (BD 引擎)
对象: ddd.exe
        病毒: Generic.Graybird.017EE317 (BD 引擎)
对象: DDOS.EXE
        病毒: DoS.Win32.Synte.a (KAV 引擎), Virtool.DoS.Synte.A (BD 引擎)
对象: ss.exe
        病毒: Backdoor.Win32.PcClient.xc (KAV 引擎)
对象: vnc.exe
        病毒: not-a-virus:NetTool.Win32.VNC.a (KAV 引擎), Spyware.Vnc.A (BD 引擎)
对象: xiao.exe
        病毒: Trojan-Downloader.Win32.Agent.ue (KAV 引擎), GenPack:Trojan.Downloader.Agent.UE (BD 引擎)
对象: xxxx.exe
        病毒: Generic.Malware.PWBdldPk.95852C42 (BD 引擎)
对象: xxxxx22.exe
        病毒: Packed.Win32.NSAnti.b (KAV 引擎), Trojan.NSAnti.A (BD 引擎)
对象: xxxxx.exe
        病毒: Generic.Malware.PWBdldPk.95852C42 (BD 引擎)
对象: xxxxxxxx.exe
        病毒: Trojan-Downloader.Win32.Agent.ue (KAV 引擎), GenPack:Trojan.Downloader.Agent.UE (BD 引擎)
对象: 服务卸载工具.exe
        病毒: Backdoor.Win32.Agent.uy (KAV 引擎)
扫描完成: 2007-4-2 11:42
    已检查 49 个文件
    已发现 41 个染毒文件
    发现 0 个可疑文件

蓝色牛仔裤

AVK 06 -----41个
AVK 07------40个

[ 本帖最后由 蓝色牛仔裤 于 2007-4-2 11:48 编辑 ]

mofunzone

看来雨伞已经和kav+bd战平了。。
和avc的结果差不多

欠妳緈諨

金山杀27个

小邪邪

07-04-02-12:34：mcafee+avk联合绞杀43个

观弈书童

nod32 36个
金山27个