[6.3]有惊无险 又带礼物来了

水晶

2008-6-4 20:37:59        恶意HTTP对象 <http://bbs.kafan.cn/attachment.p ... s/sys32/14.exe//FSG>: 已检测新变种 病毒 'Invader'。

allinwonderi

[Scanning : C:\Documents and Settings\All Users\Documents\Test]


C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:DosSys16.Sys <- Trojan.Psw.Qqpass.Cbk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:13.exe<UPack>:13.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Afqn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:18.exe<UPack>:18.exe<DLLRES>:res0.exe <- Trojan.Psw.Onlinegames.Akcs : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:18.exe<UPack>:18.exe<DLLRES>:res1.exe <- Trojan.Psw.Onlinegames.Afqn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:1AB9A128.EXE<UPack>:1AB9A128.EXE <- Trojan.Popwin.Bfu : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:33.exe <- Trojan.Psw.Qqpass.Cbj : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:33.exe<UPX>:33.exe<DLLRES>:FILE0.exe <- Trojan.Psw.Qqpass.Cbk : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dbhlp32.dlL <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dionpis.dll <- Trojan.Psw.Onlinegames.Akji : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dndsioc.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmbiost.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmsbbqi.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmsjhif.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:huifitc.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosdrop00.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosfmsq00.dll <- Trojan.Psw.Onlinegames.Ajsq : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:msosptfs00.dll <- Worm.Downloader.Mb : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:nicozftp00.dll <- Trojan.Psw.Onlinegames.Akww : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:nicozftp00.dll<UPack>:nicozftp00.dll <- Trojan.Psw.Onlinegames.Akww : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:SysDaJHv.dll <- Trojan.Psw.Onlinegames.Akcs : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:SysWoWCt.dll<UPack>:SysWoWCt.dll <- Trojan.Psw.Onlinegames.Ajnn : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:unojjlrx.dll <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dbhlp32.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dionpis.exe <- Trojan.Psw.Onlinegames.Akji : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:dndsioc.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmbiost.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmsbbqi.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:fmsjhif.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:huifitc.exe <- Trojan.Psw.OnLineGames.Almz : No action
C:\Documents and Settings\All Users\Documents\Test\virus.rar<RAR>:kcjcixin.exe <- Trojan.Psw.OnLineGames.Almz : No action



Scanned objects : 130

Infected objects : 31

allinwonderi

[Found virus]         <W32/InfoStealer!Generic (not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\drivers\ieplus\DosSys16.Sys
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\localtmp\SETUP.EXE->(UPack)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\11.exe->(embedded)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\13.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\14.exe->(embedded)
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\18.exe
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\1AB9A128.EXE->(UPack)
[Found security risk]         <W32/AutoRun.D.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\33.exe->(UPX)
[Found security risk]         <W32/Injector.A.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\4.exe
[Found downloader]         <W32/Downloader.C.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\9AA28F90.DLL
[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\fmsiocps.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msoscqit00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosdohs00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosdrop00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosfmsq00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosjtio00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosmhfp00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosmnsf00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosping00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\msosptfs00.dll
[Found security risk]         <W32/Agent.L.gen!Eldorado (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\nicozftp00.dll
[Found possible security risk]         <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\SysDaJHv.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\SysWoWCt.dll->(UPack)
[Found possible security risk]         <W32/Heuristic-210!Eldorado (damaged, not disinfectable)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\SysZxacC.dll->(UPack)
[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\sys32\wipicdec.dll
[Found security risk]         <W32/OnlineGames.C.gen!GSA (not disinfectable, generic)>        C:\Documents and Settings\All Users\Documents\Test\virus.rar->virus\windows\wipicdec.exe->(embedded)

---------------------------------------------------------------------
Scan ended:        2008-6-4, 20:40:25
Duration:        0:00:20

Scan result:

Scanned files:                 6
Infected objects:         26
Disinfected objects:         0
Quarantined files:         0
---------------------------------------------------------------------

BING126

McAfee报了39个

samancy

费尔小测!