绅博的，100多个

mofunzone

慢慢测试吧

红心王子

都是些好掉牙的病毒了，下次记得发点新的
老病毒现在都懒得发了
KV砍掉119个virus

金剑

风暴胜者V2 测试版本(http://www.v0day.com)
_________您的安全是我们的责任_______________
载入病毒库…进行整理…分配内存…可以使用

===============================================
   ___________病毒查杀结果__________________

===============================================
2007年5月26日11时3分23秒 开始查杀C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\segttt\segttt.exe 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\testkl\testkl\1.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\testkl\testkl\2.exe 为可疑文件
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\testkl\testkl\3.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\testkl\testkl\kl.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\setup.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\setup.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\Recycled\INFO.EXE
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\fyso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\jtso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\mhso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\qjso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\rxso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\tlso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wdso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wgso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wlso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wmso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\woso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\ztso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\daso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\downloader.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\fyso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\jtso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\mhso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\qjso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\rxso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\tlso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\wdso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\wgso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\wlso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\wmso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\woso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\16a.us\16a.us\ztso.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\97725.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\CSRSS.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\ctfnom.exe 操作:阻止运行
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\LSASS.EXE 为可疑文件
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\RAVWM.EXE
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\RUNDLL32.exe 为可疑文件
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\upxdnd.exe
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\uninstall\rundl132.exe 为可疑文件
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\911520\911520\2.exe 为可疑文件
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\911520\911520\kaspersky.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ctv163\ctv163\q.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\wm.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\temp1\34258607.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\temp1\66742886.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\temp1\nwizwows.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\temp1\TIMPlatform.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\ee28\ee28\temp1\winform.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\good520qq\admin.exe 操作:阻止运行
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\5xz.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\CSRSS.exe
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\down.exe
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\LSASS.EXE 为可疑文件
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\RAVWM.EXE
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\RUNDLL32.exe 为可疑文件
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\systemm.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\TIMPlatform.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\upxdnd.exe
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf.org2\qq.520sf.org\5xz.exe 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\fyso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\jtso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\mhso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\qjso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\rxso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\tlso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wdso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wgso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wlso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\wmso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\woso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\7y7.us\7y7.us\ztso0.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\packet.dll
  未知的木马病毒(启发)C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\RichDll.dll 操作:阻止运行
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\wanpacket.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\iebar\winio.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\packet.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\RAVWM506.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\wanpacket.dll
威胁性文件：C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\autorun.pif
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\autorun.inf 为可疑文件
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\熊猫烧香\autorun.inf 变种的木马病毒
=========================================
_________文件性质分析结果________________
"带壳"仅指文件性质,仅供专业人员分析使用。

C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\97725.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\RAVWM.EXE 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\down.exe 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\RAVWM.EXE 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\97725\97725\RichDll.dll 带壳文件:UPX加壳
C:\Documents and Settings\Administrator\桌面\virus\桌9面\绅博GDATA\qq.520sf\qq.520sf.org\RAVWM506.dll 带壳文件:UPX加壳
-----------------------------------------
2007年5月26日11时3分50秒收起线程…100% 查杀完毕！
扫描文件：126查杀病毒：76


[ 本帖最后由 金剑 于 2007-6-26 11:00 编辑 ]

wangjay1980

多

solcroft

moonsilver

伯夷叔齐

此役,卡巴领先红伞两个.共176个文件,而最高的卡巴才查出132个.还有46个,里面还有病毒生成的部分文本,估计还有那么20多--30左右的毒没有查出来.

前景堪忧,杀毒形式任重道远，不容乐观! NOD32更是如履薄冰,如临深渊!!

The scan has been done completely.
      0 Scanning directories
    176 Files were scanned
    130 viruses and/or unwanted programs were found
      0 classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     46 Files not concerned
      7 Archives were scanned
      5 Warnings
      0 Notes
      0 Hidden objects were found

[ 本帖最后由 伯夷叔齐 于 2007-5-27 12:13 编辑 ]

龙井茶

里面的新病毒还是不少的.

tracydk

Starting the file scan:

Begin scan in 'F:\样本\绅博GDATA.part5.rar'
F:\样本\绅博GDATA.part5.rar
  [0] Archive type: RAR
  --> qq.520sf\qq.520sf.org\woso.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.19
  --> qq.520sf\qq.520sf.org\woso0.dll
      [DETECTION] Is the Trojan horse TR/PSW.WOW.QN.1
  --> qq.520sf\qq.520sf.org\xjz2007.bmp
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> qq.520sf.org2\qq.520sf.org\56.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2337
  --> qq.520sf.org2\qq.520sf.org\5xz.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> qq.520sf.org2\qq.520sf.org\cmdbcs.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ES.2338
  --> qq.520sf.org2\qq.520sf.org\mppds.exe
      [DETECTION] Is the Trojan horse TR/Agent.19968.127
  --> qq.520sf.org2\qq.520sf.org\SysWFGQQ2.dll
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WI.2
  --> qq.520sf.org2\qq.520sf.org\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.RC.47
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\绅博GDATA.part1.rar'
F:\样本\绅博GDATA.part1.rar
  [0] Archive type: RAR
  --> segttt\segttt.exe
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> testkl\testkl\1.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> testkl\testkl\2.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> testkl\testkl\3.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> testkl\testkl\kl.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> ÐÜèÉÕÏã\autorun.pif
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.etx Backdoor server programs
  --> ÐÜèÉÕÏã\Recycled\INFO.EXE
      [DETECTION] Contains signature of the worm WORM/VB.BV.4
  --> ÐÜèÉÕÏã\setup.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
  --> ÐÜèÉÕÏã\u.bat
      [DETECTION] Contains signature of the batch virus BAT/VB.A
  --> 7y7.us\7y7.us\fyso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\fyso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\HiJack.bak
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\HiJack.dll
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.bmo.4
  --> 7y7.us\7y7.us\jtso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\jtso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\mhso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\mhso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\qjso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\qjso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\rxso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\rxso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\svchost_virus.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\绅博GDATA.part2.rar'
F:\样本\绅博GDATA.part2.rar
  [0] Archive type: RAR
  --> 7y7.us\7y7.us\tlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wdso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wdso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wgso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wgso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wlso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wmso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\wmso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\woso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\woso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\ztso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 7y7.us\7y7.us\ztso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\daso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\daso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\downloader.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\fyso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\fyso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\jtso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\jtso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\mhso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\mhso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\qjso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\qjso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\romdrivers.bak
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\romdrivers.bkk
      [DETECTION] Is the Trojan horse TR/Telui
  --> 16a.us\16a.us\romdrivers.dll
      [DETECTION] Is the Trojan horse TR/Telui
  --> 16a.us\16a.us\rxso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\rxso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\tlso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\tlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wdso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wdso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wgso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wgso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wlso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wlso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wmso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\wmso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\woso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\woso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\ztso.exe
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\16a.us\ztso0.dll
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 16a.us\horse.htm
      [DETECTION] Contains signature of the Java script virus JS/Crypt.Agent
  --> 16a.us\svchost.exe.app
      [DETECTION] Is the Trojan horse TR/Crypt.ULPM.Gen
  --> 97725\97725\10Sy.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> 97725\97725\97725.exe
      [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
  --> 97725\97725\CSRSS.exe
      [DETECTION] Is the Trojan horse TR/Agent.17408.51
  --> 97725\97725\ctfnom.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> 97725\97725\LSASS.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.QY.29
  --> 97725\97725\main.exe
      [DETECTION] Is the Trojan horse TR/Drop.NSAnti.N
  --> 97725\97725\muxiao2.jpg
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> 97725\97725\RAVWM.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> 97725\97725\RichDll.dll
      [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
  --> 97725\97725\RUNDLL32.exe
      [DETECTION] Is the Trojan horse TR/Agent.18432.34
  --> 97725\97725\SVCHOST.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ARI.225
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\绅博GDATA.part3.rar'
F:\样本\绅博GDATA.part3.rar
  [0] Archive type: RAR
  --> 97725\97725\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.12800.14
  --> 97725\97725\upxdnd.exe
      [DETECTION] Is the Trojan horse TR/Agent.19456.53
  --> 97725\97725\woso.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.NW.19
  --> 97725\97725\woso0.dll
      [DETECTION] Is the Trojan horse TR/PSW.WOW.QN.1
  --> 911520\911520\kaspersky.exe
      [DETECTION] Is the Trojan horse TR/Dldr.Delf.bga.1
  --> 911520\911520\love-911520.jpg
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> blwb\blwb\da.pe
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
  --> blwb\blwb\kb.sys
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
  --> blwb\blwb\system2.jmp
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
  --> blwb\blwb\SystemKb.sys
      [DETECTION] Is the Trojan horse TR/PSW.QQPass.WD.1
    --> count\count.chm
      [1] Archive type: CHM
      --> /left.htm
          [DETECTION] Contains signature of the exploits EXP/CodeBase.8
      --> /QQ.EXE
          [DETECTION] Is the Trojan horse TR/Dldr.Agent.UE.23
  --> ctv163\ctv163\1.gif
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> ctv163\ctv163\14.htm
      [DETECTION] Contains signature of the Java script virus JS/Dldr.Psyme.DU
  --> ctv163\ctv163\2.gif
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> ctv163\ctv163\q.exe
      [DETECTION] Is the Trojan horse TR/Proxy.Delf.CA
  --> ee28\ee28\temp1\34258607.exe
      [DETECTION] Is the Trojan horse TR/Click.Delf.GL.12
  --> ee28\ee28\temp1\66742886.exe
      [DETECTION] Is the Trojan horse TR/Click.Delf.GL.12
  --> ee28\ee28\temp1\nwizwows.dll
      [DETECTION] Is the Trojan horse TR/PSW.WOW.QP.29
  --> ee28\ee28\temp1\nwizwows.exe
      [DETECTION] Is the Trojan horse TR/PSW.WOW.QP.9
  --> ee28\ee28\temp1\TIMPlatform.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> ee28\ee28\temp1\winform.exe
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.LC.201
  --> ee28\ee28\wm.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSPI.Gen
  --> ee28\ee28\xjz2007.bmp
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> good520qq\3800.htm
      [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Agen.AJ.2
  --> good520qq\3800hk.htm
      [DETECTION] Contains signature of the HTML script virus HTML/Dldr.Agen.AJ.2
  --> good520qq\admin.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Hupigon.Gen Backdoor server programs
      [INFO]      The file was deleted!
Begin scan in 'F:\样本\绅博GDATA.part4.rar'
F:\样本\绅博GDATA.part4.rar
  [0] Archive type: RAR
  --> iebar\iebar23.0.dll
      [DETECTION] Contains signature of the Ad- or Spyware ADSPY/Iebar.M.1
  --> qq.520sf\qq.520sf.org\10Sy.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> qq.520sf\qq.520sf.org\5xz.exe
      [DETECTION] Is the Trojan horse TR/Crypt.NSAnti.Gen
  --> qq.520sf\qq.520sf.org\CSRSS.exe
      [DETECTION] Is the Trojan horse TR/Agent.17408.51
  --> qq.520sf\qq.520sf.org\d.jpg
      [DETECTION] Contains signature of the exploits EXP/Ani.Gen
  --> qq.520sf\qq.520sf.org\down.exe
      [DETECTION] Is the Trojan horse TR/Drop.Ag.344576.B
  --> qq.520sf\qq.520sf.org\LSASS.EXE
      [DETECTION] Contains signature of the dropper DR/Agent.alh.1
      [1] Archive type: RAR SFX (self extracting)
      --> systemm.exe
          [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh Backdoor server programs
  --> qq.520sf\qq.520sf.org\main.exe
      [DETECTION] Is the Trojan horse TR/Drop.NSAnti.N
  --> qq.520sf\qq.520sf.org\RAVWM.EXE
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> qq.520sf\qq.520sf.org\RAVWM506.dll
      [DETECTION] Is the Trojan horse TR/Delphi.Downloader.Gen
  --> qq.520sf\qq.520sf.org\RUNDLL32.exe
      [DETECTION] Is the Trojan horse TR/Agent.18432.34
  --> qq.520sf\qq.520sf.org\SVCHOST.EXE
      [DETECTION] Is the Trojan horse TR/PSW.OnLineGames.ARI.225
  --> qq.520sf\qq.520sf.org\systemm.exe
      [DETECTION] Contains a signature of the (dangerous) backdoor program BDS/Agent.alh Backdoor server programs
  --> qq.520sf\qq.520sf.org\TIMPlatform.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
  --> qq.520sf\qq.520sf.org\upxdnd.dll
      [DETECTION] Is the Trojan horse TR/PSW.12800.14
      [INFO]      The file was deleted!


End of the scan: 2007年5月27日  12:04
Used time: 00:18 min

The scan has been done completely.

      0 Scanning directories
    176 Files were scanned
    130 viruses and/or unwanted programs were found
      0 classified as suspicious:
      5 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     46 Files not concerned
      7 Archives were scanned
      0 Warnings
      0 Notes
      0 Hidden objects were found

Joker

呵呵。。。卡7  136个