[衍生物系列之2] 样本+15个衍生物 快来试试你的杀软吧

mofunzone

明明有一个0kb的东西，实际antivir已经杀全了

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\������.rar'
C:\Documents and Settings\morgan\My Documents\
  ������.rar
    [0] Archive type: RAR
    --> bvapty94.sys
        [DETECTION] Is the Trojan horse TR/Everda
        [WARNING]   Infected files in archives cannot be repaired!
    --> 20322.exe
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CnsMin.G
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmp6.cab
        [1] Archive type: CAB (Microsoft)
        --> winB.dll
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/SoduiSearch
            [WARNING]   Infected files in archives cannot be repaired!
    --> tmp7.cab
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CnsMin.G
        [WARNING]   Infected files in archives cannot be repaired!
        [1] Archive type: CAB (Microsoft)
        --> staB.dll
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Soduisear.A.1
            [WARNING]   Infected files in archives cannot be repaired!
    --> tmp8.cab
        [1] Archive type: CAB (Microsoft)
        --> b.sys
            [DETECTION] Is the Trojan horse TR/Everda.16000.1
            [WARNING]   Infected files in archives cannot be repaired!
    --> dtrctf46.dll
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Soduisear.A.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> winctf46.dll
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/SoduiSearch
        [WARNING]   Infected files in archives cannot be repaired!
    --> dtrctf46.sys
        [DETECTION] Is the Trojan horse TR/Everda.16000.1
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmpA.cab
        [1] Archive type: CAB (Microsoft)
        --> scintruder.dll
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.H
            [WARNING]   Infected files in archives cannot be repaired!
    --> MyFavor.dll
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/NewWeb.H
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmpC.cab
        [1] Archive type: CAB (Microsoft)
        --> autolive.dll
            [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CnsMin.C
            [WARNING]   Infected files in archives cannot be repaired!
    --> bvapty94.dll
        [DETECTION] Contains signature of the Ad- or Spyware ADSPY/CnsMin.C
        [WARNING]   Infected files in archives cannot be repaired!
    --> tmpE.cab
        [1] Archive type: CAB (Microsoft)
        --> autolive.sys
            [DETECTION] Is the Trojan horse TR/Everda
            [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\ľ����.rar'
C:\Documents and Settings\morgan\My Documents\
  ľ����.rar
    [0] Archive type: RAR
    --> up1.exe
        [DETECTION] Is the Trojan horse TR/Dldr.Barbs.A.7
        [WARNING]   Infected files in archives cannot be repaired!
        [WARNING]   The file was ignored!


End of the scan: 2007年4月26日  07:54
Used time: 00:12 min

The scan has been done completely.

      0 Scanning directories
     22 Files were scanned
     15 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      7 Files not concerned
      8 Archives were scanned
     17 Warnings
      0 Notes
      0 Hidden objects were found

dyw1021

费尔样本杀一个！~~~~~
生成的病毒杀了8个！~~~~~~~~~~~~~~~~~~

xpn282

共有2个O大小的文件..
所以能杀上13个的就已经OK了