10个样本~~`

scottxzt

BEAT蜘蛛7个

蓝色牛仔裤

居然没人贴红伞, 好久没贴过红伞了..9个..


Starting the file scan:

Begin scan in 'C:\Documents and Settings\Administrator\桌面\桌面.rar'
C:\Documents and Settings\Administrator\桌面\桌面.rar
  [0] Archive type: RAR
  --> upxdnd.exe
      [DETECTION] Is the Trojan horse TR/PSW.11264.15
  --> main.exe
      [DETECTION] Is the Trojan horse TR/Drop.NSAnti.N
  --> winform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> downma10.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.6
  --> mppds.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> downma11.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> sernet.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> nwiztlbb.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> alg32.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.6
      [INFO]      The file was deleted!

scottxzt

我贴了你的BETA,你来红伞吧.

jlennon

7的确进步了，好现象。

xpn282

红伞和AVK都是杀9个..他们都漏掉了8008o.exe...不过它没什么作为

The EQs

加了NSANTI

moonsilver

4

caocao

KIS7个
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\桌面.rar/upxdnd.exe
已删除: 木马程序 Trojan.Win32.Agent.akf        文件: D:\Downloads\桌面.rar/main.exe
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nw        文件: D:\Downloads\桌面.rar/downma10.exe//FSG
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.es        文件: D:\Downloads\桌面.rar/mppds.exe
已删除: 木马程序 Trojan-Dropper.Win32.Agent.aud        文件: D:\Downloads\桌面.rar/downma11.exe
已删除: 病毒 Worm.Win32.Delf.bs        文件: D:\Downloads\桌面.rar/sernet.exe//UPack
已删除: 木马程序 Trojan-PSW.Win32.OnLineGames.nw        文件: D:\Downloads\桌面.rar/alg32.exe//FSG

魑魅魍魉

来个BD的!
//-----------------------------------------------------------------
//
//        Product BitDefender Antivirus Plus v10
//        Product 10.2
//
//        Created on:        27/04/2007        22:40:59
//
//-----------------------------------------------------------------


Virus Statistics

Scan path        : C:\桌面.rar
Folders        : 0
Files        :  11
Memory processes scanned        : 0
Archives        : 1
Runtime packers        : 0
Identified viruses        : 6
Infected files        : 6
Memory processes infected        : 0
Suspect files        : 0
Warnings        : 0
Disinfected files        : 0
Deleted files        : 0
Moved files        : 0
I/O errors        : 0
Scan time        : 00:00:02
Scan speed (files/sec)        : 5

Virus definitions        : 542559
Scan plugins        : 16
Archive plugins        : 41
Unpack plugins        : 6
Mail plugins        : 6
System plugins        : 5

Virus scan options

Detection
[ ] Scan boot sectors
[ ] Memory Processes
[X] Scan archives
[X] Scan runtime packers
[X] Scan email

File mask
[ ] Programs
[X] All files
[ ] User defined extensions:
[ ] Exclude extensions: ;

Action

Infected objects
[ ] Ignore
[X] Disinfect
[ ] Delete
[ ] Move to quarantine
[ ] Prompt user

Second action
[ ] Ignore
[ ] Delete
[X] Move to quarantine
[ ] Prompt user

Virus scan options
[X] Enable warnings
[X] Enable heuristics
[X] Show all files in log
[X] Report file: C:\Documents and Settings\        \Application Data\BitDefender\Desktop\Profiles\Logs\contextual\1177684859.log

Spyware scan options

[X] Scan for riskware
[ ] Skip dial and applications from scan
[ ] Registry keys
[ ] Cookies


Summary:

C:\桌面.rar=>upxdnd.exe        Infected: Generic.Malware.SdldPWS.C75F7ADB
C:\桌面.rar=>upxdnd.exe        Disinfection failed
C:\桌面.rar=>upxdnd.exe        Move failed
C:\桌面.rar=>winform.exe        Infected: Generic.Malware.SgPWS.8ABB31EA
C:\桌面.rar=>winform.exe        Disinfection failed
C:\桌面.rar=>winform.exe        Move failed
C:\桌面.rar=>mppds.exe        Infected: Generic.Malware.SdldgPWS.DC6E6F9C
C:\桌面.rar=>mppds.exe        Disinfection failed
C:\桌面.rar=>mppds.exe        Move failed
C:\桌面.rar=>downma11.exe        Infected: Trojan.NSAnti.B
C:\桌面.rar=>downma11.exe        Disinfection failed
C:\桌面.rar=>downma11.exe        Move failed
C:\桌面.rar=>sernet.exe        Infected: Generic.Malware.WBdld.5E74005E
C:\桌面.rar=>sernet.exe        Disinfection failed
C:\桌面.rar=>sernet.exe        Move failed
C:\桌面.rar=>nwiztlbb.exe        Infected: Generic.Malware.SBdldg.5EF10CD8
C:\桌面.rar=>nwiztlbb.exe        Disinfection failed
C:\桌面.rar=>nwiztlbb.exe        Move failed

Scanned files

C:\桌面.rar        OK
C:\桌面.rar=>upxdnd.exe        Infected: Generic.Malware.SdldPWS.C75F7ADB
C:\桌面.rar=>upxdnd.exe        Disinfection failed
C:\桌面.rar=>upxdnd.exe        Move failed
C:\桌面.rar=>8008o.exe        OK
C:\桌面.rar=>main.exe        OK
C:\桌面.rar=>winform.exe        Infected: Generic.Malware.SgPWS.8ABB31EA
C:\桌面.rar=>winform.exe        Disinfection failed
C:\桌面.rar=>winform.exe        Move failed
C:\桌面.rar=>downma10.exe        OK
C:\桌面.rar=>mppds.exe        Infected: Generic.Malware.SdldgPWS.DC6E6F9C
C:\桌面.rar=>mppds.exe        Disinfection failed
C:\桌面.rar=>mppds.exe        Move failed
C:\桌面.rar=>downma11.exe        Infected: Trojan.NSAnti.B
C:\桌面.rar=>downma11.exe        Disinfection failed
C:\桌面.rar=>downma11.exe        Move failed
C:\桌面.rar=>sernet.exe        Infected: Generic.Malware.WBdld.5E74005E
C:\桌面.rar=>sernet.exe        Disinfection failed
C:\桌面.rar=>sernet.exe        Move failed
C:\桌面.rar=>nwiztlbb.exe        Infected: Generic.Malware.SBdldg.5EF10CD8
C:\桌面.rar=>nwiztlbb.exe        Disinfection failed
C:\桌面.rar=>nwiztlbb.exe        Move failed
C:\桌面.rar=>alg32.exe        OK

worker321

咖啡3个

2007-4-28        1:43:36        未采取操作         C:\Documents and Settings\Administrator\桌面\桌面.rar\UPXDND.EXE        PWS-LegMir.gen.b(特洛伊)
2007-4-28        1:43:37        未采取操作         C:\Documents and Settings\Administrator\桌面\桌面.rar\SERNET.EXE        New Malware.n(特洛伊)
2007-4-28        1:43:37        未采取操作         C:\Documents and Settings\Administrator\桌面\桌面.rar\NWIZTLBB.EXE        New Malware.n(特洛伊)