5个

The EQs

原帖由 <i>promised</i> 于 2007-11-25 19:52 发表 <a href="http://bbs.kafan.cn/redirect.php?goto=findpost&pid=2148921&ptid=161857" target="_blank"><img src="http://bbs.kafan.cn/images/common/back.gif" border="0"   alt="" /></a><br />
C:\ABC\1125.rar:\mj.exe - 特征码 'Trojan-PWS.Win32.Gamer.h' 被发现<br />
C:\ABC\1125.rar:\12.exe - 特征码 'Trojan-Downloader.Win32.VB.bqd' 被发现<br />
C:\ABC\1125.rar:\1.exe - 特征码 'Trojan-PWS.Win32.OnLineGa ...

f-prot+sophos+ik。。。。

[ 本帖最后由 EQ2 于 2007-11-25 19:55 编辑 ]

promised

sophos的新启发很强劲
但AV-Comparatives 11月不会测
多引擎那个linux的sophos实在是太垃圾了。。。。。。。

[ 本帖最后由 promised 于 2007-11-25 20:20 编辑 ]

sam.to

Hello,

f2b4657b5568d072.exe_ - Virus.Win32.AutoRun.agd

New malicious software was found in this file. It's detection will be included in the next update. Thank you for your help.

Please quote all when answering.

--
Best regards, Vyacheslav Zakorzhevsky
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 981
Paranoia Database - 49114
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder (2)

C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\mj.exe - Infected GENERIC.MALWARE.7DD.3600 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\12.exe - Infected GENERIC.MALWARE.9F6.5000 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\1.exe - Infected TROJAN-PSW.ONLINEGAMES.U - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\my0616.exe - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder (2)\f2b4657b5568d072.exe - Infected TROJAN-DOWNLOADER.AGENT.3 - Deleted

5 Files scanned
4 Infected files found
1 Suspected files found
0 Files disinfected
4 Files deleted

will

avast! 4个

啊弥陀佛

木马名称:Trojan-PSW.Win32.Gamer.h
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1125\MJ.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-Downloader.Win32.VB.dpm
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1125\12.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?
木马名称:Trojan-PSW.Win32.OnLineGames.wez
程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\1125\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

残缺的唯美

deleted: Trojan program Trojan-PSW.Win32.Gamer.h        File: C:\Documents and Settings\Administrator\×ÀÃæ\1125.rar/mj.exe
deleted: Trojan program Trojan-Downloader.Win32.VB.bqd        File: C:\Documents and Settings\Administrator\×ÀÃæ\1125.rar/12.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.hqi        File: C:\Documents and Settings\Administrator\×ÀÃæ\1125.rar/1.exe
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.ipf        File: C:\Documents and Settings\Administrator\×ÀÃæ\1125.rar/my0616.exe//UPack
deleted: virus Virus.Win32.AutoRun.agd        File: C:\Documents and Settings\Administrator\×ÀÃæ\1125.rar/f2b4657b5568d072.exe

卡巴报木马

jolen

AntiVir PersonalEdition Premium
Start of the scan: 2007年11月26日  13:21
Starting the file scan:
Begin scan in 'C:\Documents and Settings\Administrator\桌面\1125.rar'
C:\Documents and Settings\Administrator\桌面\1125.rar
  [0] Archive type: RAR
  --> mj.exe
      [DETECTION] Is the Trojan horse TR/Spy.Agent.AJB.3
  --> 12.exe
      [DETECTION] Is the Trojan horse TR/Dldr.VB.bqd
  --> 1.exe
      [DETECTION] Is the Trojan horse TR/PSW.Online.agb.2
  --> my0616.exe
      [DETECTION] Is the Trojan horse TR/Dropper.Gen
  --> f2b4657b5568d072.exe
      [DETECTION] Is the Trojan horse TR/Crypt.FKM.Gen
      [WARNING]   The file was ignored!


End of the scan: 2007年11月26日  13:21
Used time: 00:13 min

The scan has been done completely.

      0 Scanning directories
      6 Files were scanned
      5 viruses and/or unwanted programs were found
      0 Files were classified as suspicious:
      0 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
      1 Files not concerned
      1 Archives were scanned
      1 Warnings
      0 Notes

syl_1986

呵呵，刚刚打开连接卡巴就报警了