过主流2 (天天更新) (此帖完,1024楼有新帖子地址)

pianokjt

红伞果然miss
了

sam.to

3d1161827ae8ce90c46690e7f163ca6f  A1.Keyword.Research.2.3.1.Crack.40063.exe3
799cf65e8166d4fbd18e2a697f23c0b1  A1.Keyword.Research.2.3.1.Keygen.40063.exe3
0fb8362dca9e10e093f70cfea8465847  A1.Website.Download.2.3.1.Crack.40063.exe3
a0c1fc51b0bb14b89df6336fd9fe8abd  A1.Website.Download.2.3.1.Keygen.40063.exe3
2f1e77b44fa2375b032a3ca840c82750  Blue.Iris.2.43.Crack.40063.exe3
6320568770470e271d7ceaed14bd33a4  Blue.Iris.2.43.Keygen.40063.exe3
5cc864ef63fc429895b64ff6cad6f9d6  RS.WinTools.net.Ultimate.10.7.1.Crack.40063.exe3
840d44a1d7c8553c89a1f942df5b032d  RS.WinTools.net.Ultimate.10.7.1.Keygen.40063.exe3
f55e3cc9a0fc91af33790557584be74f  Tune.Up.Utilities.2010.Keygen.40063.exe3
dca59673c21c3cc91c0b267eafa41c81  Windows.XP.NASA.Second.Generation.SP3.2010.Crack.40063.exe3
4b3f38835cc9adc7ee2c50ae5140ca1f  Windows.XP.NASA.Second.Generation.SP3.2010.Keygen.40063.exe3


to ll,mcafee,avira



We received the following archive files:

File ID	Filename	Size (Byte)	Result
25972690	765735-532.rar	96.66 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25972691	A1.Keyword.Resea...63.exe3	99.5 KB	UNDER ANALYSIS
25972692	A1.Keyword.Resea...63.exe3	99.5 KB	UNDER ANALYSIS
25972693	A1.Website.Downl...63.exe3	99.5 KB	UNDER ANALYSIS
25972694	A1.Website.Downl...63.exe3	99.5 KB	UNDER ANALYSIS
25972695	Blue.Iris.2.43.C...63.exe3	99.5 KB	UNDER ANALYSIS
25972696	Blue.Iris.2.43.K...63.exe3	99.5 KB	UNDER ANALYSIS
25972697	RS.WinTools.net....63.exe3	99.5 KB	UNDER ANALYSIS
25972698	RS.WinTools.net....63.exe3	99.5 KB	UNDER ANALYSIS
25972699	Tune.Up.Utilitie...63.exe3	99.5 KB	UNDER ANALYSIS
25972700	Windows.XP.NASA....63.exe3	99.5 KB	UNDER ANALYSIS
25972701	Windows.XP.NASA....63.exe3	99.5 KB	UNDER ANALYSIS

Please find a detailed report concerning each individual sample below:

Filename

Result

A1.Keyword.Resea...63.exe3

MALWARE

The file 'A1.Keyword.Research.2.3.1.Crack.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

A1.Keyword.Resea...63.exe3

MALWARE

The file 'A1.Keyword.Research.2.3.1.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

A1.Website.Downl...63.exe3

MALWARE

The file 'A1.Website.Download.2.3.1.Crack.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

A1.Website.Downl...63.exe3

MALWARE

The file 'A1.Website.Download.2.3.1.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

Blue.Iris.2.43.C...63.exe3

MALWARE

The file 'Blue.Iris.2.43.Crack.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

Blue.Iris.2.43.K...63.exe3

MALWARE

The file 'Blue.Iris.2.43.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

RS.WinTools.net....63.exe3

MALWARE

The file 'RS.WinTools.net.Ultimate.10.7.1.Crack.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

RS.WinTools.net....63.exe3

MALWARE

The file 'RS.WinTools.net.Ultimate.10.7.1.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

Tune.Up.Utilitie...63.exe3

MALWARE

The file 'Tune.Up.Utilities.2010.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

Windows.XP.NASA....63.exe3

MALWARE

The file 'Windows.XP.NASA.Second.Generation.SP3.2010.Crack.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

Filename

Result

Windows.XP.NASA....63.exe3

MALWARE

The file 'Windows.XP.NASA.Second.Generation.SP3.2010.Keygen.40063.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat DR/Spy.Agent.bnas.The term "DR/" denotes a program that is able to place a virus or a malware discretely on a system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.195.

bbs2811125

532 FEP 清空 都是一类，一个家族特征码ko
类别: Trojan Downloader
说明: This program displays deceptive product messages.

瓜皮猫

532L
eset 清空
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\A1.Keyword.Research.2.3.1.Crack.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\A1.Keyword.Research.2.3.1.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\A1.Website.Download.2.3.1.Crack.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\A1.Website.Download.2.3.1.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\Blue.Iris.2.43.Crack.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\Blue.Iris.2.43.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\RS.WinTools.net.Ultimate.10.7.1.Crack.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\RS.WinTools.net.Ultimate.10.7.1.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\Tune.Up.Utilities.2010.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\Windows.XP.NASA.Second.Generation.SP3.2010.Crack.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马
C:\Users\微亿毫\Desktop\765735-532\2010-Dec-6-1714\Windows.XP.NASA.Second.Generation.SP3.2010.Keygen.40063.exe3 - Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马

歌歌的人

532 AVG继续悲剧，A2也算悲剧

                                            

KOI9009

532L
360 SD Kill ALL

sam.to

af278ffe1228831b505901ea9abb3a3d  Auto.Hide.IP.5.0.7.Crack.52106.exe3
836744a0ad45e9f15979ff8a4a64758c  Auto.Hide.IP.5.0.7.Keygen.52106.exe3
da400aa943c917398ab13a843aaab3dd  Kaspersky.Internet.Security.2010.Crack.52106.exe3
aced537e901de3b389acb3b267dda7d2  Kaspersky.Internet.Security.2010.Keygen.52106.exe3
7471b2eba981d5cd96cb5b661e70439a  Lumion.3D.2010..Tutorials.07.12.2010.Crack.52106.exe3
2e32bdccefa91004caacb5de796b9f89  Lumion.3D.2010..Tutorials.07.12.2010.Keygen.52106.exe3
11fab844fa8d59317fde807f805bc9a2  Parted.Magic.5.3.Crack.52106.exe3
5031bd26f350babc211756ef7f6b6cb1  Parted.Magic.5.3.Keygen.52106.exe3
b43f41a562b97fa09328415ce542b056  Start.Menu.7.Pro.3.7.Crack.52106.exe3
15b4b3e7aaad94767183780922080c5b  Start.Menu.7.Pro.3.7.Keygen.52106.exe3
43f14a794bbe25278ede585d5f85fae8  TMPGEnc.XPress..4.7.4.299.Crack.52106.exe3
43a37381bef5c7173471b23a9c375046  TMPGEnc.XPress..4.7.4.299.Keygen.52106.exe3


to kl,ll,comdoo,avira

	Filename	Size (Byte)	Result
25975671	765735-537.rar	95.6 KB	OK

A listing of files contained inside archives alongside their results can be found below:

File ID	Filename	Size (Byte)	Result
25975672	Auto.Hide.IP.5.0...06.exe3	100.5 KB	UNDER ANALYSIS
25975673	Auto.Hide.IP.5.0...06.exe3	100.5 KB	UNDER ANALYSIS
25975674	Kaspersky.Intern...06.exe3	100.5 KB	UNDER ANALYSIS
25975675	Kaspersky.Intern...06.exe3	100.5 KB	UNDER ANALYSIS
25975676	Lumion.3D.2010.....06.exe3	100.5 KB	UNDER ANALYSIS
25975677	Lumion.3D.2010.....06.exe3	100.5 KB	UNDER ANALYSIS
25975678	Parted.Magic.5.3...06.exe3	100.5 KB	UNDER ANALYSIS
25975679	Parted.Magic.5.3...06.exe3	100.5 KB	UNDER ANALYSIS
25975680	Start.Menu.7.Pro...06.exe3	100.5 KB	UNDER ANALYSIS
25975681	Start.Menu.7.Pro...06.exe3	100.5 KB	UNDER ANALYSIS
25975682	TMPGEnc.XPress.....06.exe3	100.5 KB	UNDER ANALYSIS
25975683	TMPGEnc.XPress.....06.exe3	100.5 KB	UNDER ANALYSIS

Trojan-Downloader.Win32.CodecPack.wrb

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

Best Regards,
Oleg Yurzin

Malware Analyst
Kaspersky Lab






Please find a detailed report concerning each individual sample below:

Filename

Result

Auto.Hide.IP.5.0...06.exe3

MALWARE

The file 'Auto.Hide.IP.5.0.7.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Auto.Hide.IP.5.0...06.exe3

MALWARE

The file 'Auto.Hide.IP.5.0.7.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Kaspersky.Intern...06.exe3

MALWARE

The file 'Kaspersky.Internet.Security.2010.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Kaspersky.Intern...06.exe3

MALWARE

The file 'Kaspersky.Internet.Security.2010.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Lumion.3D.2010.....06.exe3

MALWARE

The file 'Lumion.3D.2010..Tutorials.07.12.2010.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Lumion.3D.2010.....06.exe3

MALWARE

The file 'Lumion.3D.2010..Tutorials.07.12.2010.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Parted.Magic.5.3...06.exe3

MALWARE

The file 'Parted.Magic.5.3.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Parted.Magic.5.3...06.exe3

MALWARE

The file 'Parted.Magic.5.3.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Start.Menu.7.Pro...06.exe3

MALWARE

The file 'Start.Menu.7.Pro.3.7.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

Start.Menu.7.Pro...06.exe3

MALWARE

The file 'Start.Menu.7.Pro.3.7.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

TMPGEnc.XPress.....06.exe3

MALWARE

The file 'TMPGEnc.XPress..4.7.4.299.Crack.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

Filename

Result

TMPGEnc.XPress.....06.exe3

MALWARE

The file 'TMPGEnc.XPress..4.7.4.299.Keygen.52106.exe3' has been determined to be 'MALWARE'.
Our analysts named the threat TR/Renos.L.The term "TR/" denotes a trojan horse that is able to spy out data, to violate your privacy or carry out unwanted modifications to the system.Detection is added to our virus definition file (VDF) starting with version 7.10.14.227.

留侯

大蜘蛛：
765735-527\2010-dec-5-1158\cyberlink.powerdvd.mark.ii.ultra.3d.10.0.2113.crack.40063.exe3 - infected with Trojan.DownLoader1.42252

765735-532\2010-Dec-6-1714\A1.Keyword.Research.2.3.1.Crack.40063.exe3 已感染：  Trojan.DownLoad2.18833

765735-537\2010-Dec-8-2002\Auto.Hide.IP.5.0.7.Crack.52106.exe3 已感染：  Trojan.DownLoad2.18833

瓜皮猫

537L
eset  清空
2010/12/8 21:06:32        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\TMPGEnc.XPress..4.7.4.299.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\TMPGEnc.XPress..4.7.4.299.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Start.Menu.7.Pro.3.7.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Start.Menu.7.Pro.3.7.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Parted.Magic.5.3.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Parted.Magic.5.3.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:31        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Lumion.3D.2010..Tutorials.07.12.2010.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:30        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Lumion.3D.2010..Tutorials.07.12.2010.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:30        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Kaspersky.Internet.Security.2010.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:30        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Kaspersky.Internet.Security.2010.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:30        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Auto.Hide.IP.5.0.7.Keygen.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.
2010/12/8 21:06:30        文件系统实时防护        文件        C:\Users\微亿毫\Desktop\765735-537\2010-Dec-8-2002\Auto.Hide.IP.5.0.7.Crack.52106.exe3        Win32/TrojanDownloader.FakeAlert.BBT 特洛伊木马        通过删除清除 - 已隔离        微亿毫-PC\微亿毫        在应用程序新建的文件上发生事件: C:\Program Files\WinRAR\WinRAR.exe.

dragoonwing

537 卡巴2011杯具，kill 0。