8x

luxiao200888

RT

[ 本帖最后由 luxiao200888 于 2009-4-3 21:33 编辑 ]

Sebastian

Starting the file scan:

Begin scan in 'D:\kafan\1.exe'
D:\kafan\1.exe
    [DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
    [NOTE]      A backup was created as '4a3b111c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\2.exe'
D:\kafan\2.exe
    [DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
    [NOTE]      A backup was created as '4b4cbddd.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\3.exe'
D:\kafan\3.exe
    [DETECTION] Is the TR/Crypt.UPKM.Gen Trojan
    [NOTE]      A backup was created as '4a3b111e.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\4.cab'
D:\kafan\4.cab
  [0] Archive type: RAR
    --> g1.exe
      [DETECTION] Is the TR/Rootkit.Gen Trojan
    [NOTE]      A backup was created as '4a39111c.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\5.swf'
Begin scan in 'D:\kafan\6.swf'
D:\kafan\6.swf
  [0] Archive type: SWC
    --> Object
      [DETECTION] Contains the SWF/Dldr.Agent.F.1 SWF virus
    [NOTE]      A backup was created as '4a49111d.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!
Begin scan in 'D:\kafan\7.swf'
Begin scan in 'D:\kafan\8.swf'
D:\kafan\8.swf
    [DETECTION] Contains recognition pattern of the EXP/Flash.Gen exploit
    [NOTE]      A backup was created as '4b3ebdde.qua'  ( QUARANTINE )
    [NOTE]      The file was deleted!


End of the scan: 2009年4月3日  21:36
Used time: 00:01 Minute(s)

The scan has been done completely.

      0 Scanned directories
      9 Files were scanned
      6 Viruses and/or unwanted programs were found
      0 Files were classified as suspicious
      6 files were deleted
      0 Viruses and unwanted programs were repaired
      6 Files were moved to quarantine
      0 Files were renamed
      0 Files cannot be scanned
      3 Files not concerned
      1 Archives were scanned
      0 Warnings
      6 Notes

aerbeisi

Sign of "SWF:CVE-2007-0071 [Expl]" has been found in "F:\桌面.rar\6.swf" file.  
Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\桌面.rar\1.exe\[Upack]\[Embedded_Ra#18110]" file.  
Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\桌面.rar\2.exe\[Upack]\[Embedded_Ra#18110]" file.  
Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\桌面.rar\3.exe\[Upack]\[Embedded_Ra#18110]" file.  
Sign of "Win32:Rootkit-gen [Rtk]" has been found in "F:\桌面.rar\4.cab\g1.exe\[Upack]\[Embedded_I#030a0]\[Embedded_I#c0a0]" file.  
Sign of "SWF:CVE-2007-0071 [Expl]" has been found in "F:\桌面.rar\8.swf" file.

Palkia

病毒        2009-04-03  21:41:56        C:\Documents and Settings\Administrator\桌面\桌面.rar\4.cab\g1.exe        Win32.Troj.Killav.y.139264 (木马程序)        跳过，未处理       

dearhaoji

NOD kill one

saga3721

红伞不杀的2个是安全的
File ID  Filename Size (Byte) Result
25311206  7 5.rar 367 Byte OK

A listing of files contained inside archives alongside their results can be found below:

File ID  Filename Size (Byte) Result
25145775  5.swf  142 Byte  CLEAN
25145776  7.swf  142 Byte  CLEAN

ledled

VB Kill 4

尤金卡巴斯基

启发
2009/4/4 0:05:40        已清除        病毒 HEUR:Trojan.Win32.AntiAV        G:\Temp\Virus\桌面.rar/4.cab/g1.exe//UPack               
2009/4/4 0:05:40        已隔离        病毒 HEUR:Trojan.Win32.AntiAV        G:\Temp\Virus\桌面.rar/3.exe//UPack               
2009/4/4 0:05:40        已隔离        病毒 HEUR:Trojan.Win32.AntiAV        G:\Temp\Virus\桌面.rar/3.exe               
2009/4/4 0:05:25        已隔离        病毒 HEUR:Trojan.Win32.AntiAV        G:\Temp\Virus\桌面.rar/2.exe               
2009/4/4 0:05:11        已隔离        病毒 HEUR:Trojan.Win32.AntiAV        G:\Temp\Virus\桌面.rar/1.exe               
2009/4/4 0:05:40        已清除        木马程序 Trojan.Win32.AntiAV.atx        G:\Temp\Virus\桌面.rar/4.cab/g1.exe//UPack//#               
To KL

kingsheet

卡巴 检测到：木马程序 Trojan.Win32.AntiAV.atx        URL: http://bbs.kafan.cn/attachment.p ... b//g1.exe//UPack//#

schumi小粉

avast missed 2