找蜘蛛侠3下载 找到了个毒网

scottxzt

Begin scan in 'D:\Documents and Settings\dell\桌面\新建文件夹.rar'
D:\Documents and Settings\dell\桌面\新建文件夹.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\mppds.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\cmdbcs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\Kvsc3.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\svch0st9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\winform.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\RAVQJ504.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\mppds.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> н¨Îļþ¼Ð\Kvsc3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> н¨Îļþ¼Ð\winform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\83821216.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\iexpl0re.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> н¨Îļþ¼Ð\LgSy0.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
  --> н¨Îļþ¼Ð\LgSy1.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> н¨Îļþ¼Ð\RAVQJ.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\RAVWM.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\rekkblp.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> н¨Îļþ¼Ð\TIMPlatform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\upxdnd.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\winlog0n.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!

End of the scan: 2007年5月5日  14:25
Used time: 00:13 min
The scan has been done completely.
      0 Scanning directories
     25 Files were scanned
     21 viruses and/or unwanted programs were found
     11 classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     -7 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

shenrenrenren

可惜dll不启发。

siman.yu

AVG报两个！ AVAST！报两个！ NOD32报5个！其中两个报启发！

ALEXBLAIR

卡巴的仿真器估计只检查可执行文件的行为吧，dll属于附属的东西，要用rundll32才能单独执行。
具体不是很清楚。。。。

jlennon

tracydk

红伞报21个!!


Starting the file scan:

Begin scan in 'F:\样本\新建文件夹.rar'
F:\样本\新建文件夹.rar
  [0] Archive type: RAR
  --> н¨Îļþ¼Ð\mppds.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\cmdbcs.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\Kvsc3.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\svch0st9.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\winform.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\RAVQJ504.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\mppds.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> н¨Îļþ¼Ð\Kvsc3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
  --> н¨Îļþ¼Ð\winform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\83821216.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\iexpl0re.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> н¨Îļþ¼Ð\LgSy0.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.OL.1
  --> н¨Îļþ¼Ð\LgSy1.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> н¨Îļþ¼Ð\RAVQJ.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\RAVWM.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> н¨Îļþ¼Ð\rekkblp.dll
      [DETECTION] Is the Trojan horse TR/Crypt.NSPM.Gen
  --> н¨Îļþ¼Ð\TIMPlatform.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\upxdnd.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\upxdnd.exe
      [DETECTION] Contains suspicious code HEUR/Malware
  --> н¨Îļþ¼Ð\winlog0n.exe
      [DETECTION] Is the Trojan horse TR/Crypt.XPACK.Gen
      [INFO]      The file was deleted!

sxingbai

什么也没发现

yinxuchina

北京江民新科技术有限公司

        扫描引擎 10.00.600
        病毒库日期 2007-05-05
        更新日期 2007-05-06

扫描目标 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar

开始时间 2007-05-06 00:56:23

在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\cmdbcs.dll 中发现 Trojan/Agent.hpm 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\Kvsc3.dll 中发现 Trojan/Agent.hpp 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\cmdbcs.exe 中发现 Backdoor/Huigezi.qqm 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\Kvsc3.exe 中发现 Backdoor/Huigezi.qqm 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\winform.exe 中发现 Trojan/PSW.GamePass.hnx 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\83821216.exe 中发现 Trojan/PSW.GamePass.hqx 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\iexpl0re.exe 中发现 Trojan/PSW.GamePass.hit 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\LgSy1.dll 中发现 Trojan/PSW.OnLineGames.atb 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\RAVWM.EXE 中发现 TrojanDropper.Agent.bbb 病毒, 已删除
在 C:\Documents and Settings\mrly\My Documents\新建文件夹.rar->新建文件夹\winlog0n.exe 中发现 Backdoor/Huigezi.qqm 病毒, 已删除
正常结束。

扫描结果:
                 文件数 :26                                  病毒体 :10        
                   删除 :10                                    解毒 :0

欠妳緈諨

原帖由 siman.yu 于 2007-5-5 14:30 发表
AVG报两个！ AVAST！报两个！ NOD32报5个！其中两个报启发！


64374


64375

你的AVAST真烂，我的AVAST杀了15个

promised

Scan performed at: 2007-5-6 1:06:48
Scanning Log
NOD32 version 2243 (20070505) NT
Command line: D:\新建文件夹.rar
Operating memory - is OK

Date: 6.5.2007  Time: 01:06:59
Anti-Stealth technology is enabled.
Scanned disks, folders and files: D:\新建文件夹.rar
D:\新建文件夹.rar ?RAR ?新建文件夹\cmdbcs.dll - a variant of Win32/PSW.Agent.NCC trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\svch0st9.exe - probably unknown NewHeur_PE virus [7]
D:\新建文件夹.rar ?RAR ?新建文件夹\mppds.exe - a variant of Win32/PSW.Agent.NCC trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\cmdbcs.exe - a variant of Win32/PSW.Agent.NCC trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\Kvsc3.exe - a variant of Win32/PSW.Agent.NCC trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\winform.exe - probably a variant of Win32/PSW.Agent.NCC trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\83821216.exe - probably a variant of Win32/PSW.QQPass.VD trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\iexpl0re.exe - a variant of Win32/PSW.Agent.NDP trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\LgSy0.dll - probably a variant of Win32/PSW.Agent.NDP trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\RAVQJ.EXE - a variant of Win32/PSW.Delf.NGU trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\RAVWM.EXE - probably a variant of Win32/PSW.Delf.NGU trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\rekkblp.dll - Win32/Pacex.Gen virus
D:\新建文件夹.rar ?RAR ?新建文件夹\TIMPlatform.exe - probably unknown NewHeur_PE virus [7]
D:\新建文件夹.rar ?RAR ?新建文件夹\upxdnd.dll - probably a variant of Win32/Genetik trojan
D:\新建文件夹.rar ?RAR ?新建文件夹\upxdnd.exe - a variant of Win32/PSW.Agent.NDF trojan
Number of scanned files: 25
Number of threats found: 15
Number of active threats: 1
Time of completion: 01:07:02 Total scanning time: 3 sec (00:00:03)

Notes:
[7] File is probably infected with an unknown virus.