opera 下找到的.

scottxzt

尤金卡巴斯基

2008/10/13 18:23:49        已清除        木马程序 Trojan.Win32.Dialer.bkm        G:\Temp\Virus\新建文件夹.rar/新建文件夹\opr003BQ/server.exe

Palkia

病毒        2008-10-13  18:27:39        C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\opr003BQ\server.exe        Win32.Troj.DialerT.nh.126976        清除成功       
病毒        2008-10-13  18:27:39        C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\opr00019        JS.Agent.vi.620        清除成功       
病毒        2008-10-13  18:27:39        C:\Documents and Settings\Administrator\桌面\新建文件夹.rar\新建文件夹\opr0000Z        JS.Downloader.vw.919        清除成功

lf968

被感染的: Exploit.SinaDLoader.B

被感染的: Exploit.CVE.2008.2463

BD

kingmuro

2008-10-13 18:36:44        检测到威胁: Trojan.Win32.Dialer.bkm        D:\My Documents\桌面\新建文件夹.rar/新建文件夹\opr003BQ/server.exe               
2008-10-13 18:36:44        未处理: Trojan.Win32.Dialer.bkm        D:\My Documents\桌面\新建文件夹.rar/新建文件夹\opr003BQ/server.exe        延期       
2008-10-13 18:36:44        检测到威胁: Trojan.Win32.Dialer.bkm        D:\My Documents\桌面\新建文件夹.rar/新建文件夹\opr003BQ/server.exe

Kitman

Requested URL:        http://bbs.kafan.cn/attachment.p ... 9e&t=1223896654
Information:        Contains recognition pattern of the HTML/Rce.Gen HTML script virus
Generated by AntiVir WebGuard 8.0.15.0, AVE 8.1.1.35, VDF 7.0.7.31

will

Multi Command-Line Scanner Report
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\opr00004   
MD5 Hash: 00C8C183E82303076990AF05FDB784E3   
Type: Digital Micrograph Script / Extension: .S   

A-squared ----- Nothing   
Avast ----- VBS:Obfuscated-gen [Trj]   
Antivir ----- HTML/Rce.Gen   
BitDefender ----- Nothing   
ClamWin ----- JS.Psyme-36   
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Nothing   
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- Nothing   

*** 3/11 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\opr0000Z   
MD5 Hash: 1C19D0F6D1BFEFB5BAFFBB56BC66C3AA   

A-squared ----- Virus.VBS.SnapshotView.A!IK   
Avast ----- VBS:SnapshotView-A [Expl]   
Antivir ----- JS/Dldr.Agent.FW   
BitDefender ----- Exploit.CVE.2008.2463   
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Virus.VBS.SnapshotView.A   
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- JS.Downloader.vw.919   

*** 6/11 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\opr00019   
MD5 Hash: CB26535EEAC42AC3D14574E93413CAC6   
Type: HyperText Markup Language / Extension: .HTML   

A-squared ----- Nothing   
Avast ----- Nothing   
Antivir ----- HEUR/HTML.Malware   
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Nothing   
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- JS.Agent.vi.620   

*** 2/11 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\opr00254   
MD5 Hash: 25BCBD86A3CC559D8ED982E1DE4C8BCA   
Type: Digital Micrograph Script / Extension: .S   

A-squared ----- Trojan-Downloader.JS.Agent.di!IK   
Avast ----- Nothing   
Antivir ----- HTML/Malicious.ActiveX.Gen   
BitDefender ----- Exploit.SinaDLoader.B   
ClamWin ----- Nothing   
Dr.Web ----- Nothing   
NOD32 ----- Nothing   
Ikarus ----- Trojan-Downloader.JS.Agent.di   
Jiangmin ----- Nothing   
Kaspersky ----- Nothing   
Kingsoft ----- Nothing   

*** 4/11 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   
D:\Desk\Samples\Collect\MCLS\opr003BQ   
MD5 Hash: A63B723780DDB243B3DF3F77ED01ED37   
Type: RAR Archive / Extension: .RAR   

A-squared ----- Virus.Win32.Dialer.1313!IK   
Avast ----- Win32:Dialer-1313 [Trj]   
Antivir ----- TR/Agent.rdn   
BitDefender ----- Nothing   
ClamWin ----- Nothing   
Dr.Web ----- BackDoor.Pigeon.12989   
NOD32 ----- a variant of Win32/Dialer.NEW trojan   
Ikarus ----- Virus.Win32.Dialer.1313   
Jiangmin ----- Trojan/Dialer.cnu   
Kaspersky ----- Trojan.Win32.Dialer.bkm   
Kingsoft ----- Win32.Troj.DialerT.nh.126976   

*** 9/11 antivirus engines found virus in this file ***   
-------------------------------------------------------------------------   

Task done @ 2008/10/13 һ 19:43:44.15   

BING126

McAfee  报了3个。。

opr00004            no  
opr0000z            exploit-cve2008-2463      
opr00019            no  
opr00254            exploit-sinadl              
opr003bq            generic backdoor.t        

allinwonderi

[Scanning : C:\Test]


C:\Test\新建文件夹.rar<RAR>:opr003BQ<RAR>:server.exe<DLLRES>:res0.exe<UPX>:res0.exe<DLLRES>:res0.exe <- Trojan.Agent.Qzb : No action



Scanned objects : 15

Infected objects : 1

loveyuwei

5/5

"Scan ""Shell extension scan"" was finished."
"Infections found:";"5"
"Infected objects removed or healed:";"0"
"Not removed or healed:";"5"
"Spyware found:";"0"
"Spyware removed:";"0"
"Not removed:";"0"
"Warnings count:";"0"
"Information count:";"0"
"Scan started:";"2008年10月13日, 22:01:14"
"Scan finished:";"2008年10月13日, 22:01:17 (2 second(s))"
"Total object scanned:";"10"
"User who launched the scan:";"Yuwei"

"Infections"
"File";"Infection";"Result"
"C:\Documents and Settings\Yuwei\Desktop\新建文件夹.rar";"Trojan horse Dialer.SJL";"Infected"
"C:\Documents and Settings\Yuwei\Desktop\新建文件夹.rar:\新建文件夹\opr00004";"Virus found JS/Downloader.Agent";"Infected"
"C:\Documents and Settings\Yuwei\Desktop\新建文件夹.rar:\新建文件夹\opr0000Z";"Virus found Exploit";"Infected"
"C:\Documents and Settings\Yuwei\Desktop\新建文件夹.rar:\新建文件夹\opr003BQ";"Trojan horse Dialer.SJL";"Infected"
"C:\Documents and Settings\Yuwei\Desktop\新建文件夹.rar:\新建文件夹\opr003BQ:\server.exe";"Trojan horse Dialer.SJL";"Infected"