有一个SYS卡巴没报

Joker

detected: virus Heur.Downloader (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\1.exe//PE_Patch//UPack
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jbo        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\comint32.sys
deleted: Trojan program Trojan-PSW.Win32.OnLineGames.jfd        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\gdjzi32.dll//UPack
detected: virus Heur.AntiAV (modification)        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\pcibus.sys
deleted: adware not-a-virus:AdWare.Win32.Cinmus.arx        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\qqsetupt.log//stream//data0002//data0003
deleted: adware not-a-virus:AdWare.Win32.Cinmus.arx        File: C:\Documents and Settings\Administrator\×ÀÃæ\virus.rar/virus\qqsetupt.log//stream//data0002//data0004

flykiss

DR.WEB 4.44
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\1.exe - infected with Trojan.DownLoader.37428
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gddhi32.dll\data001 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gddhi32.dll\data002 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gddhi32.dll\data003 - infected with Trojan.KeyLogger.1451
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdmhi32.dll - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdqqsgi32.dll\data001 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdqqsgi32.dll\data002 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdtli32.dll - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdwli32.dll\data001 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\gdwli32.dll\data002 - infected with Trojan.PWS.Gamania.6024
C:\Documents and Settings\Administrator\桌面\virus.rar\virus\pcibus.sys - infected with Win32.HLLW.Rubbish

Archive contains 11 infected items

Redevil

卡巴7启发报了

卡巴斯基互联网安全套装 7.0
The requested URL http://bbs.kafan.cn/attachment.php?aid=162120 is infected with Heur.Downloader virus

lmzlll

木马名称:未知木马

程序:
C:\DOCUMENTS AND SETTINGS\ADMINISTRATOR\桌面\TEST\VIRUS\VIRUS\1.EXE
是木马程序!
已成功阻止其运行,是否要删除此文件?

其他无法运行……

rest1min

驱逐舰杀掉7个。KV2008杀掉3个。

uhthn2002

Uhthn Anti-Spyware V3 Alpha
Version - 3.0.0
Standard Database - 985
Paranoia Database - 49298
Heuristics Analysis - Excessive
Scan in - C:\Documents and Settings\Uhthn\Desktop\New Folder

C:\Documents and Settings\Uhthn\Desktop\New Folder\1.exe - Suspected TROJAN-PSW.ONLINEGAMES.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\ardasase.fon - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\chreaur.fon - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\comint32.sys - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\enhuafx.fon - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\enpoafx.fon - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\gddhi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdgji32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdjzi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdmhi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdmsi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdqqsgi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdtli32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdwli32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdzhtui32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\gdzxi32.dll - Suspected MaliciousScope:GENERIC.MALWARE.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\kapjecs.dll - OK
C:\Documents and Settings\Uhthn\Desktop\New Folder\kaqhkcs.dll - Suspected TROJAN-SPY.DELF.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\kvdxsjcf.dll - Suspected TROJAN-SPY.DELF.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\pcibus.sys - Infected TROJAN-DOWNLOADER.AGENT.26 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\qqsetups.log - Infected TROJAN-PSW.ONLINEGAMES.48 - Deleted
C:\Documents and Settings\Uhthn\Desktop\New Folder\qqsetupt.log - Suspected TROJAN-PSW.ONLINEGAMES.3
C:\Documents and Settings\Uhthn\Desktop\New Folder\rarjeni.dll - Suspected TROJAN-SPY.DELF.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\sidjecs.dll - Suspected TROJAN-SPY.DELF.2
C:\Documents and Settings\Uhthn\Desktop\New Folder\swrcecs.dll - OK

25 Files scanned
2 Infected files found
16 Suspected files found
0 Files disinfected
2 Files deleted

promised

C:\ABC\virus.rar
        C:\ABC\virus.rar\virus\1.exe
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\1.exe
        C:\ABC\virus.rar\virus\comint32.sys
        C:\ABC\virus.rar\virus\gddhi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gddhi32.dll
        C:\ABC\virus.rar\virus\gdgji32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdgji32.dll
        C:\ABC\virus.rar\virus\gdjzi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdjzi32.dll
        C:\ABC\virus.rar\virus\gdmhi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdmhi32.dll
        C:\ABC\virus.rar\virus\gdmsi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdmsi32.dll
        C:\ABC\virus.rar\virus\gdqqsgi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdqqsgi32.dll
        C:\ABC\virus.rar\virus\gdtli32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdtli32.dll
        C:\ABC\virus.rar\virus\gdwli32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdwli32.dll
        C:\ABC\virus.rar\virus\gdzhtui32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdzhtui32.dll
        C:\ABC\virus.rar\virus\gdzxi32.dll
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\gdzxi32.dll
        C:\ABC\virus.rar\virus\pcibus.sys
        C:\ABC\virus.rar\virus\pcibus.sys\FILE:0000
        C:\ABC\virus.rar\virus\pcibus.sys\FILE:0000\FILE:0000
>>> Virus 'Mal/Behav-160' found in file C:\ABC\virus.rar\virus\pcibus.sys\FILE:0000\FILE:0000
>>> File "C:\ABC\virus.rar\virus\pcibus.sys\FILE:0000" has been identified as suspicious 'Sus/Malware-B'.
        C:\ABC\virus.rar\virus\pcibus.sys\FILE:0001
>>> File "C:\ABC\virus.rar\virus\pcibus.sys\FILE:0001" has been identified as suspicious 'Sus/Malware-B'.
>>> File "C:\ABC\virus.rar\virus\pcibus.sys" has been identified as suspicious 'Sus/Malware-A'.
        C:\ABC\virus.rar\virus\qqsetups.log
        C:\ABC\virus.rar\virus\qqsetups.log\FILE:0000
>>> Virus 'Mal/Packer' found in file C:\ABC\virus.rar\virus\qqsetups.log\FILE:0000
>>> File "C:\ABC\virus.rar\virus\qqsetups.log" has been identified as suspicious 'Sus/Dropper-A'.
        C:\ABC\virus.rar\virus\qqsetupt.log
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0000
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0001
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0000
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0001
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0002
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0003
        C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0003\FILE:0000
>>> File "C:\ABC\virus.rar\virus\qqsetupt.log\FILE:0002\FILE:0003" has been identified as suspicious 'Sus/Behav-1018'.

sam.to

Hello,

1.exed - Trojan-Downloader.Win32.Small.gxf,
gddhi32.dll - Trojan-PSW.Win32.OnLineGames.jfu,
gdgji32.dll - Trojan-PSW.Win32.OnLineGames.jfv,
gdmhi32.dll - Trojan-PSW.Win32.OnLineGames.jfw,
gdmsi32.dll - Trojan-PSW.Win32.WOW.afw,
gdqqsgi32.dll - Trojan-PSW.Win32.OnLineGames.jfx,
gdtli32.dll - Trojan-PSW.Win32.OnLineGames.jfy,
gdwli32.dll - Trojan-PSW.Win32.OnLineGames.jfz,
gdzhtui32.dll - Trojan-PSW.Win32.OnLineGames.jga,
pcibus.sys - Worm.Win32.Downloader.bv,
qqsetups.log - Trojan.Win32.Agent.dbu

New malicious software was found in these files. Detection will be included in the next update. Thank you for your help.

ardasase.fon, chreaur.fon, enhuafx.fon, enpoafx.fon, kapjecs.dll, kaqhkcs.dll, kvdxsjcf.dll, rarjeni.dll, sidjecs.dll, swrcecs.dll

No malicious code were found in these files.

gdzxi32.dll - Trojan-PSW.Win32.OnLineGames.jer

This file is already detected. Please update your antivirus bases.

Please quote all when answering.

--
Best regards, Denis Maslennikov
Virus analyst, Kaspersky Lab.
e-mail: newvirus@kaspersky.com
http://www.kaspersky.com/

http://www.kaspersky.com/virusscanner - free online virus scanner.
http://www.kaspersky.com/helpdesk.html - technical support.

gogo8989

哈哈今天FS报的多了
2007年12月3日 14:35:20 - 14:35:22
计算机名称:  
扫描类型: 扫描指定目标
目标: F:\新建文件夹


--------------------------------------------------------------------------------

结果: 发现15个恶意软件
Trojan-Downloader.Win32.Small.gxf (病毒)
F:\新建文件夹\attachment.php\virus\1.exe
Trojan-PSW.Win32.OnLineGames.jbo (病毒)
F:\新建文件夹\attachment.php\virus\comint32.sys
Trojan-PSW.Win32.OnLineGames.jfu (病毒)
F:\新建文件夹\attachment.php\virus\gddhi32.dll
Trojan-PSW.Win32.OnLineGames.jfv (病毒)
F:\新建文件夹\attachment.php\virus\gdgji32.dll
Trojan-PSW.Win32.OnLineGames.jfd (病毒)
F:\新建文件夹\attachment.php\virus\gdjzi32.dll
Trojan-PSW.Win32.OnLineGames.jfw (病毒)
F:\新建文件夹\attachment.php\virus\gdmhi32.dll
Trojan-PSW.Win32.WOW.afw (病毒)
F:\新建文件夹\attachment.php\virus\gdmsi32.dll
Trojan-PSW.Win32.OnLineGames.jfx (病毒)
F:\新建文件夹\attachment.php\virus\gdqqsgi32.dll
Trojan-PSW.Win32.OnLineGames.jfy (病毒)
F:\新建文件夹\attachment.php\virus\gdtli32.dll
Trojan-PSW.Win32.OnLineGames.jfz (病毒)
F:\新建文件夹\attachment.php\virus\gdwli32.dll
Trojan-PSW.Win32.OnLineGames.jga (病毒)
F:\新建文件夹\attachment.php\virus\gdzhtui32.dll
Trojan-PSW.Win32.OnLineGames.jer (病毒)
F:\新建文件夹\attachment.php\virus\gdzxi32.dll
Worm.Win32.Downloader.bv (病毒)
F:\新建文件夹\attachment.php\virus\pcibus.sys
Trojan.Win32.Agent.dbu (病毒)
F:\新建文件夹\attachment.php\virus\qqsetups.log
AdWare.Win32.Cinmus.arx (adware)
F:\新建文件夹\attachment.php\virus\qqsetupt.log




--------------------------------------------------------------------------------

统计信息
已扫描:
文件: 26
未扫描: 0
结果:
病毒: 14
间谍软件: 1
可疑对象: 0
危险软件: 0
操作:
已杀毒: 0
已重命名: 0
删除: 0
已隔离: 0
失败: 0
引导区:
已扫描: 0
受感染: 0
可疑对象: 0
已杀毒: 0


--------------------------------------------------------------------------------

选项
病毒定义版本:
病毒: 2007-12-03_01
间谍软件: 2007-12-02_03
扫描引擎:
F-Secure AVP: 7.00.171, 2007-12-02
F-Secure Libra: 2.04.01, 2007-11-28
F-Secure Orion: 1.02.37, 2007-12-03
F-Secure Draco: 1.00.35, 2007-11-21

[ 本帖最后由 gogo8989 于 2007-12-3 14:39 编辑 ]

Graybird

Starting the file scan:

Begin scan in 'E:\virus.rar'
E:\virus.rar
  [0] Archive type: RAR
  --> virus\1.exe
      [DETECTION] Is the Trojan horse TR/Agent.1764.1
  --> virus\gddhi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jfu
  --> virus\gdgji32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jbo.1
  --> virus\gdjzi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jfd
  --> virus\gdmhi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.17700
  --> virus\gdmsi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.Wow.acd
  --> virus\gdqqsgi32.dll
      [DETECTION] Contains suspicious code HEUR/Malware
  --> virus\gdtli32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jbo.7
  --> virus\gdwli32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jbo.4
  --> virus\gdzhtui32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.jga
  --> virus\gdzxi32.dll
      [DETECTION] Is the Trojan horse TR/PSW.OnlineGames.Jer.23
  --> virus\pcibus.sys
      [DETECTION] Is the Trojan horse TR/Dldr.Agent.45056
  --> virus\qqsetups.log
      [DETECTION] Is the Trojan horse TR/Agent.dbu.1
  --> virus\qqsetupt.log
      [DETECTION] Contains detection pattern of the dropper DR/Cinmus.arx
      [INFO]      The file was deleted!


End of the scan: 2007年12月3日  14:53
Used time: 00:22 min

The scan has been done completely.

      0 Scanning directories
     26 Files were scanned
     13 viruses and/or unwanted programs were found
      1 Files were classified as suspicious:
      1 files were deleted
      0 files were repaired
      0 files were moved to quarantine
      0 files were renamed
      0 Files cannot be scanned
     13 Files not concerned
      1 Archives were scanned
      0 Warnings
      0 Notes