新门

Guanguancan

DW拦截生成EXE及注册表项目
还生成了一个假系统服务

LOG：
Attempt to set value Common Favorites within the key HKLM\SOFTWARE\Microsoft\Windows\CurrentVersion\Explorer\Shell Folders\
Attempt to create service

IllusionWing

杀掉

UGuard Log (Digital Fox - gankeyu@126.com)
UGuarduu.exe = 4.2.0
HC0.rlb = 2.8.9
HC2.rlb = 2.4.0
FN0.rlb = 2.3.1
扫描选项：扫描档案, 扩展, 忽略非活动, 忽略大文件, nFile, BAT模拟, 捆绑检测, 变形壳, 启发,
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\server.rar>>server.exe//Stream_01 检测到 Virus.KillAV.AVP
[扫描] [捆绑检测] 在 E:\Documents and Settings\Administrator\桌面\Vir\server.rar>>server.exe 检测到 Generic.Binder
[扫描] [Level 2] 在 E:\Documents and Settings\Administrator\桌面\Vir\server.rar>>server.exe 检测到 Virus.KillAV.AVP
检测到了 1 个未知的恶意程序，请上报。
任务 扫描 完成。共耗费的时间：0-00-00 00:00:00:0750，共扫描的文件数量：5，共扫描到的威胁数量：3，威胁率：0.6

taihuxian

卡巴斯基反病毒软件 7.0

The requested URL http://bbs.kafan.cn/attachment.php?aid=135067 is infected with Trojan.Win32.Delf.ahg virus

yangpizhi

Access to the data has been denied!
Warning: A virus or unwanted program has been found in the HTTP Data.

Requested URL:         bbs.kafan.cn/attachment.php?aid=135067
Information:         Is the Trojan horse TR/Delf.ahg

Generated by AntiVir WebGuard 7.01.00.11, AVE 7.6.0.18, VDF 7.0.0.48

残缺的唯美

Result: 1 malware found
Trojan.Win32.Delf.ahg (virus)
C:\Users\Administrator\Desktop\server.rar\server.exe

timhas266

Starting the file scan:

Begin scan in 'C:\Documents and Settings\tim\桌面\server.rar'
C:\Documents and Settings\tim\桌面\server.rar
  [0] Archive type: RAR
  --> server.exe
      [DETECTION] Is the Trojan horse TR/Delf.ahg
      [INFO]      A backup was created as '4776d303.qua'  ( QUARANTINE )
      [INFO]      The file was deleted!


End of the scan: Thursday, 4 October, 2007  19:46
Used time: 00:01 min

The scan has been done completely.

      0 Scanning directories
      3 Files were scanned
      1 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      1 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      2 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes

zotojn

过AVSAT

a256886572008

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 299
Paranoia Database - 6770
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\uhthn\Desktop\server.exe

C:\Documents and Settings\uhthn\Desktop\server.exe - Suspected Win32.Backdoor.Hupigon.5

1 Files scanned
0 Infected files found
1 Suspected files found
0 Files cured
0 Files deleted

29159011

蜘蛛杀了