放马

qqq000@qq.com

放马

tracydk

Starting the file scan:

Begin scan in 'F:\样本\new[1].part1.rar'
Begin scan in 'F:\样本\new[1].part2.rar'
Begin scan in 'F:\样本\setup.rar'
F:\样本\setup.rar
  [0] Archive type: RAR
  --> setup\cdnprot.vxd
      [DETECTION] Is the Trojan horse TR/Drop.Cdnup.AB.4
  --> setup\cdntran.vxd
      [DETECTION] Is the Trojan horse TR/Drop.Cdnup.AB.6
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\yassist4[1].exe.part1.rar'
F:\样本\yassist4[1].exe.part1.rar
  [0] Archive type: RAR
  --> yassist4[1]\$R0
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\yassist4[1].exe.part2.rar'
Begin scan in 'F:\样本\yassist4[1].exe.part3.rar'
Begin scan in 'F:\样本\yassist4[1].exe.part4.rar'
Begin scan in 'F:\样本\yassist4[1].exe.part5.rar'
Begin scan in 'F:\样本\剑盟瑞星升级程序.part1.rar'
Begin scan in 'F:\样本\剑盟瑞星升级程序.part2.rar'
Begin scan in 'F:\样本\新建文件夹.part1.rar'
Begin scan in 'F:\样本\新建文件夹.part2.rar'
Begin scan in 'F:\样本\新建文件夹.part3.rar'
Begin scan in 'F:\样本\新建文件夹.part4.rar'
F:\样本\新建文件夹.part4.rar
  [0] Archive type: RAR
  --> (20070504082300)yassist4[1]\$R0
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\新建文件夹.part5.rar'


End of the scan: 2007年5月4日  08:57
Used time: 00:10 min

The scan has been done completely.

      0 Scanning directories
     95 Files were scanned
      4 viruses and/or unwanted programs were found
      2 classified as suspicious:
      3 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     89 Files not concerned
     15 Archives were scanned
      0 Warnings
     11 Notes
      0 Hidden objects were found

mofunzone

Starting the file scan:

Begin scan in 'C:\Documents and Settings\morgan\My Documents\新建文件夹'
C:\Documents and Settings\morgan\My Documents\新建文件夹\
  (20070504082300)yassist4[1].exe
C:\Documents and Settings\morgan\My Documents\新建文件夹\(20070504082300)yassist4[1]\
  $R0
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '465e867c.qua'!
  [NSIS].nsi
C:\Documents and Settings\morgan\My Documents\新建文件夹\(20070504082300)yassist4[1]\$PLUGINSDIR\
  InstallOptions.dll
  ioSpecial.ini
  modern-header.bmp
  modern-wizard.bmp
C:\Documents and Settings\morgan\My Documents\新建文件夹\(20070504082300)yassist4[1]\Assist\
  $R0
  filter.ini
  float.gif
  notify.wav
  sound.wav
  yiebwlist.dat
  yierepairn.dat
  yphishbrule.dat
  yphishrule.dat
C:\Documents and Settings\morgan\My Documents\新建文件夹\(20070504082300)yassist4[1]\shell\
  $R0
C:\Documents and Settings\morgan\My Documents\新建文件夹\(20070504082300)yassist4[1]\shell\$PLUGINSDIR\
  address.bmp
  ioFile.ini
Begin scan in 'C:\Documents and Settings\morgan\My Documents\new[1]'
C:\Documents and Settings\morgan\My Documents\new[1]\
  new[1].exe
      [DETECTION] Is the Trojan horse TR/Dldr.H
      [INFO]      The file was moved to '46b18685.qua'!
Begin scan in 'C:\Documents and Settings\morgan\My Documents\setup'
C:\Documents and Settings\morgan\My Documents\setup\setup\
  cdn.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.3
      [INFO]      The file was moved to '46a88684.qua'!
  cdnaux.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.4
      [INFO]      The file was moved to '46a88685.qua'!
  cdnctr.exe
  cdndet.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.5
      [INFO]      The file was moved to '4737a7aa.qua'!
  cdndisp.dat
  cdnglo.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.4
      [INFO]      The file was moved to '46a88687.qua'!
  cdnhint.dat
  cdniehlp.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.3
      [INFO]      The file was moved to '46a88686.qua'!
  cdnins.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.6
      [INFO]      The file was moved to '4737a7ab.qua'!
  cdnns.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.2
      [INFO]      The file was moved to '46a88680.qua'!
  cdnprev.dat
  cdnprh.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.1
      [INFO]      The file was moved to '4737a7ad.qua'!
  cdnprot.dat
  cdnprot.sys
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.5
      [INFO]      The file was moved to '4737a7a4.qua'!
  cdnprot.vxd
      [DETECTION] Is the Trojan horse TR/Drop.Cdnup.AB.4
      [INFO]      The file was moved to '46a88689.qua'!
  cdnspie.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.7
      [INFO]      The file was moved to '4737a7a6.qua'!
  cdntdns.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.B.6
      [INFO]      The file was moved to '46a8868b.qua'!
  cdntran.dat
  cdntran.sys
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.12
      [INFO]      The file was moved to '46a88688.qua'!
  cdntran.vxd
      [DETECTION] Is the Trojan horse TR/Drop.Cdnup.AB.6
      [INFO]      The file was moved to '4737a7a5.qua'!
  cdnunins.exe
  cdnup.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.C.1
      [INFO]      The file was moved to '46a8868a.qua'!
  cdnvers.dat
  client.dll
  idnconv.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.C.8
      [INFO]      The file was moved to '4737a7a7.qua'!
  imaconv.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.DLT
      [INFO]      The file was moved to '469b8692.qua'!
  imaoe.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.DLU
      [INFO]      The file was moved to '4704a7bf.qua'!
  imaol.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/BDSearch.DLV
      [INFO]      The file was moved to '469b86ec.qua'!
  setup.exe
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Cdnup.A.3
      [INFO]      The file was moved to '46ae868b.qua'!
  src.dat
  [NSIS].nsi
Begin scan in 'C:\Documents and Settings\morgan\My Documents\yassist4[1].exe'
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\
  yassist4[1].exe
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\yassist4[1]\
  $R0
      [DETECTION] Contains suspicious code HEUR/Malware
      [INFO]      The file was moved to '465e8682.qua'!
  [NSIS].nsi
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\yassist4[1]\$PLUGINSDIR\
  InstallOptions.dll
  ioSpecial.ini
  modern-header.bmp
  modern-wizard.bmp
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\yassist4[1]\Assist\
  $R0
  filter.ini
  float.gif
  notify.wav
  sound.wav
  yiebwlist.dat
  yierepairn.dat
  yphishbrule.dat
  yphishrule.dat
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\yassist4[1]\shell\
  $R0
C:\Documents and Settings\morgan\My Documents\yassist4[1].exe\yassist4[1]\shell\$PLUGINSDIR\
  address.bmp
  ioFile.ini
Begin scan in 'C:\Documents and Settings\morgan\My Documents\剑盟瑞星升级程序'
C:\Documents and Settings\morgan\My Documents\剑盟瑞星升级程序\
  剑盟瑞星升级程序.exe
      [DETECTION] Is the Trojan horse TR/Dldr.H
      [INFO]      The file was moved to 'ba98fd05.qua'!


End of the scan: 2007年5月3日  18:02
Used time: 00:25 min

The scan has been done completely.

     16 Scanning directories
     71 Files were scanned
     24 viruses and/or unwanted programs were found
      2 classified as suspicious:
      0 files were deleted
      0 files were repaired
     24 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     45 Files not concerned
      0 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

[ 本帖最后由 mofunzone 于 2007-5-3 17:02 编辑 ]

红心王子

KV和卡巴都没有报，全都过了

Nblock

太多了点吧 我去装个带扫描的

The EQs

杀广告有意思？？卡巴之类的厂商根本就不认。。。。

shenrenrenren

百度，雅虎，cnnic卡巴从来不杀。。。

wangjay1980

大企业卡巴不会杀的